Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152627.roa
File: AS152627.roa (raw, json)
Hash identifier: NFjyALmQ7Hw7fqt9g7e6G3W8K3LSJcdXC+/UBZGaMIA=
Subject key identifier: 20:F6:0E:4D:D1:90:81:73:1E:90:0F:FA:00:92:79:8D:A3:31:90:CE
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0F244B61912B0A8EFC1E9D389C403235E7E7AA75
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152627.roa
Signing time: Mon 07 Sep 2026 07:22:24 +0000
ROA not before: Mon 07 Sep 2026 07:17:24 +0000
ROA not after: Mon 06 Sep 2027 07:22:24 +0000
asID: 152627
IP address blocks: 146.103.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 03:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:24:4b:61:91:2b:0a:8e:fc:1e:9d:38:9c:40:32:35:e7:e7:aa:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 7 07:17:24 2026 GMT
Not After : Sep 6 07:22:24 2027 GMT
Subject: CN=20F60E4DD19081731E900FFA0092798DA33190CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fb:5e:29:3e:ef:31:87:d6:ca:a4:7a:0b:84:
14:5f:92:5a:14:4b:46:f7:ee:e7:29:66:9f:2a:84:
b5:1e:1f:64:b2:a2:0f:fb:4e:61:85:53:12:12:2a:
15:82:33:39:44:f6:ac:a7:a4:75:6f:51:21:1e:17:
c8:6e:e3:e9:ca:81:7f:82:ae:60:2d:9a:21:3a:e8:
c1:a6:4d:33:e2:84:3c:9c:35:a3:1d:7f:4d:5d:fe:
c5:1f:9a:09:7c:21:7b:51:7d:2f:12:03:71:3c:d7:
fb:f4:a8:60:18:db:0a:ef:97:7a:d0:5e:01:2c:37:
85:96:2d:72:88:20:32:d6:9f:4a:20:ef:5a:41:e3:
22:09:0f:08:e8:47:24:7f:1f:ee:bf:42:ec:c6:dc:
da:05:86:10:e5:f8:b4:99:33:ef:11:45:92:be:26:
0c:06:7e:3c:b3:4d:79:01:7f:be:e0:bd:0c:af:a0:
8d:4a:65:c2:a7:50:85:2e:25:48:4e:47:ed:04:fe:
b2:07:11:0a:66:3f:f2:ba:84:3b:c0:14:3d:95:eb:
17:cd:46:72:a9:d9:d6:f0:2f:19:1b:9f:c2:db:2b:
80:4d:98:61:14:de:b1:7c:f2:db:cf:99:b5:ac:50:
fc:17:11:55:37:28:fe:c9:9b:23:b5:b7:a6:b6:94:
9e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F6:0E:4D:D1:90:81:73:1E:90:0F:FA:00:92:79:8D:A3:31:90:CE
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152627.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.37.0/24
Signature Algorithm: sha256WithRSAEncryption
77:29:12:92:0b:53:a8:71:16:4a:8b:7a:6e:05:d6:51:5a:3e:
a1:b1:b0:44:38:3f:34:aa:dd:69:b1:97:a5:9e:56:e4:3f:37:
92:f3:c1:05:cb:f7:31:06:8f:d8:82:85:3a:09:37:bf:ff:00:
f6:2c:48:8a:e7:0d:65:e2:ca:78:ab:9d:7d:07:70:06:f9:cb:
83:1c:b0:09:40:52:a2:48:3d:04:7f:1f:11:7d:71:95:d5:c0:
9f:30:a1:54:71:d7:c0:1f:8a:19:1e:e3:1e:65:60:12:fe:76:
6b:f0:73:41:7f:6b:44:2a:5a:60:45:57:67:19:8a:48:85:8b:
71:35:cc:7e:a3:1d:45:bc:ce:28:77:ec:26:dc:e1:c2:da:46:
a2:e2:ee:d5:79:85:44:0a:b9:58:e7:07:fa:b2:f8:c8:44:de:
b2:1b:c1:a9:78:8e:85:3c:e7:34:1f:db:7e:9c:b3:eb:04:2f:
2e:75:ea:bd:05:06:fe:5d:8c:eb:ad:e2:bf:b3:9f:92:a3:dc:
eb:64:b4:5e:2d:02:77:f9:c4:05:fb:8c:25:f4:7d:f2:7e:c9:
91:c1:70:0c:ec:b4:d7:47:e0:8f:e3:1f:11:46:64:d1:61:72:
92:d7:8b:51:c6:c6:bc:ab:55:13:d3:cb:a9:07:5f:78:31:62:
16:e1:58:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 08:39:59 2026 by rpki-client