Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152599.roa
File: AS152599.roa (raw, json)
Hash identifier: xg69kV9Rb/dki1OypDd7j+/G2tn1GggkixvgmEFUusY=
Subject key identifier: 6F:E8:EF:20:B8:DE:01:EF:47:F1:CF:83:55:54:FA:5E:06:95:02:36
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 61D927A294C6BDB37F543440561BA1A5E678E6DA
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152599.roa
Signing time: Tue 07 Apr 2026 11:20:39 +0000
ROA not before: Tue 07 Apr 2026 11:15:39 +0000
ROA not after: Tue 06 Apr 2027 11:20:39 +0000
asID: 152599
IP address blocks: 168.222.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Apr 2026 04:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:d9:27:a2:94:c6:bd:b3:7f:54:34:40:56:1b:a1:a5:e6:78:e6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 7 11:15:39 2026 GMT
Not After : Apr 6 11:20:39 2027 GMT
Subject: CN=6FE8EF20B8DE01EF47F1CF835554FA5E06950236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ac:d6:8e:1e:49:f7:d2:91:31:6b:10:51:a7:
2d:82:61:6b:aa:e3:f7:be:37:b8:36:26:74:dd:29:
09:10:f8:7a:1a:66:c0:10:e1:51:2e:19:9f:39:23:
46:e4:48:42:e6:00:76:b0:ed:31:aa:7d:2a:58:4d:
ac:22:60:55:bd:0f:59:68:fc:2c:c9:e0:86:8f:a2:
cd:50:3d:75:d2:36:ef:de:3d:d6:60:09:d1:0d:54:
ba:fe:b7:dd:0a:76:13:b3:ce:d6:7d:81:97:b3:a1:
75:e7:07:09:c1:18:33:f5:1c:69:70:6e:35:e6:84:
d1:de:2b:ab:25:57:2c:b7:74:5a:80:46:86:fd:9b:
22:c6:c7:df:00:76:58:75:9b:0e:ef:73:db:18:b9:
ca:ea:eb:c0:fc:79:96:c5:87:ea:08:5a:81:8d:9d:
45:91:53:36:4d:41:26:62:4f:d9:6c:e9:ca:45:37:
d7:b7:6d:2c:6a:6d:dc:c5:0e:f2:db:95:40:91:9b:
55:23:42:4b:66:45:42:c3:62:f9:84:49:8e:e8:cc:
e3:5f:eb:a1:c5:10:7d:c2:94:3e:9b:df:95:e3:18:
37:dd:fb:0b:1c:95:58:3e:d7:0d:f2:de:69:58:54:
da:de:e2:7d:97:4b:bc:75:18:d7:bb:52:64:ed:65:
17:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E8:EF:20:B8:DE:01:EF:47:F1:CF:83:55:54:FA:5E:06:95:02:36
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152599.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.111.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:9a:92:a6:db:94:f6:8c:be:36:38:67:2f:6b:a8:84:56:f2:
b0:eb:cd:98:6b:8e:a1:96:87:39:11:2e:22:c2:6e:93:50:a4:
f2:1c:12:7d:a1:6a:09:ea:c9:0a:98:c3:f9:23:d2:0e:ab:b3:
9d:08:16:55:90:42:5e:e6:fe:29:9a:a8:23:9f:17:e3:13:f4:
26:89:80:b8:64:29:ab:59:c0:64:89:ca:98:6c:74:79:c6:3e:
6f:ca:4f:84:47:fb:c2:94:3e:c7:33:ed:a4:04:b7:ab:aa:e1:
38:70:0e:38:fd:53:c8:3e:3c:12:42:c8:52:63:c4:19:6c:b6:
a9:77:df:29:64:6b:7d:55:b4:36:4c:a1:49:d2:16:f7:97:8f:
77:4d:a5:c3:59:ea:07:dc:c3:3e:8e:9b:86:91:a7:ed:02:cc:
88:4f:51:e4:ae:84:2d:71:a7:1b:2a:93:22:8c:6a:68:77:cd:
06:f2:c1:74:01:0a:f7:63:ed:a1:e2:b1:8f:34:86:80:ee:95:
99:08:97:a7:1d:a2:a6:77:7d:56:6a:91:0b:c9:2c:1e:3d:44:
84:c6:8e:ee:4c:cf:b6:bc:8e:06:ea:77:2c:ff:ff:f2:1e:3a:
c5:76:73:0b:5e:d8:12:64:54:8e:15:ec:bc:20:3c:3a:2d:8e:
47:0e:3d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 15:30:22 2026 by rpki-client