Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152698.roa
File: AS152698.roa (raw, json)
Hash identifier: WM/e1swaOzmwqzglnu1cHsWc/6IY1rBvylM9uTxnVOY=
Subject key identifier: 3A:17:AB:5C:69:0F:43:1B:02:4F:A8:95:C8:35:12:4D:BA:9A:7E:7E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6250980F62869E0A4B75CB0D68B7D917A27C33FC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152698.roa
Signing time: Mon 10 Aug 2026 11:38:29 +0000
ROA not before: Mon 10 Aug 2026 11:33:29 +0000
ROA not after: Mon 09 Aug 2027 11:38:29 +0000
asID: 152698
IP address blocks: 146.103.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:50:98:0f:62:86:9e:0a:4b:75:cb:0d:68:b7:d9:17:a2:7c:33:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 10 11:33:29 2026 GMT
Not After : Aug 9 11:38:29 2027 GMT
Subject: CN=3A17AB5C690F431B024FA895C835124DBA9A7E7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c2:e9:8a:14:90:ca:98:58:bb:7f:f1:db:36:
d8:35:2a:f2:52:5e:b1:62:a2:c8:42:a3:ac:f6:08:
37:21:9a:0b:3c:e3:2e:28:8a:19:2b:3c:fc:a5:41:
38:54:8b:ef:18:ab:cb:71:a0:f4:4a:3b:b4:20:13:
6d:2d:8c:17:3f:4b:25:b8:05:55:1e:fc:a0:8e:c5:
60:cf:13:57:9c:4d:ca:d7:80:81:16:e5:b2:7d:8c:
8c:d4:61:5c:97:24:f6:69:39:65:16:0f:0c:44:7e:
7a:da:8b:31:04:03:fb:c7:80:81:93:f3:7c:72:fd:
ac:df:bc:cb:73:37:61:8b:ca:e4:d7:2d:8a:2f:98:
7e:db:b3:13:1d:cb:b1:c9:5b:c5:cb:d2:0d:6b:be:
78:cc:da:c3:bf:ce:c5:f0:11:1d:8a:c9:93:9c:aa:
62:45:cf:0b:4a:25:34:9e:8f:c7:a6:2d:50:eb:4f:
7a:1f:c1:60:30:be:91:b6:a4:79:05:b9:70:47:ed:
a0:16:07:1d:0f:a8:b0:b9:03:1d:c0:44:fc:2d:51:
72:68:ca:db:f6:4d:f4:93:bb:50:99:6b:28:55:51:
87:fd:65:fc:a9:eb:de:4b:d1:5c:19:e7:64:f8:fc:
83:77:99:4c:81:06:1e:a8:04:44:62:10:a3:be:c4:
ad:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:17:AB:5C:69:0F:43:1B:02:4F:A8:95:C8:35:12:4D:BA:9A:7E:7E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152698.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.54.0/24
Signature Algorithm: sha256WithRSAEncryption
44:13:b3:8d:bc:fc:87:7f:75:98:54:3f:64:cc:83:e7:e4:4c:
07:ef:08:60:64:17:8e:4a:d7:d2:13:29:1f:a4:0c:7b:95:0d:
4d:19:90:87:21:aa:2d:01:f1:88:c2:62:ea:f1:f3:fd:0c:ae:
10:00:b5:03:79:8a:7a:d9:6f:2b:51:d7:d5:77:93:98:1a:9a:
8e:0d:e7:37:5c:7f:58:f7:00:df:e1:6e:e1:41:b9:20:07:d9:
05:bb:4d:89:f2:b6:14:f2:16:ec:b3:2d:54:01:5e:18:20:a3:
3d:72:dc:a5:90:4e:fd:ab:4e:6f:04:b0:25:83:0f:47:9d:ce:
e3:e8:e2:04:14:38:75:61:a9:d3:5c:0d:90:10:bf:9f:82:78:
86:da:aa:a9:54:e7:e6:1c:5e:81:ae:9a:22:2e:14:a4:57:93:
eb:69:f4:18:2b:0d:29:04:07:a8:4e:dc:04:7c:9a:c6:0b:dd:
32:35:0c:46:43:b0:5b:25:2f:cc:e4:fe:db:16:0a:db:00:5e:
07:f6:95:64:0e:7f:5b:8a:23:20:b0:f9:c2:af:dc:79:ff:70:
66:8f:c2:37:11:45:71:0b:06:4f:20:a2:de:d4:97:73:2e:96:
c1:e4:8a:b1:fb:ed:33:5b:57:6f:d6:c7:de:72:11:fd:59:c3:
82:a0:fb:60
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUYlCYD2KGngpLdcsNaLfZF6J8M/wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA4MTAxMTMzMjlaFw0yNzA4MDkxMTM4MjlaMDMxMTAvBgNV
BAMTKDNBMTdBQjVDNjkwRjQzMUIwMjRGQTg5NUM4MzUxMjREQkE5QTdFN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFwumKFJDKmFi7f/HbNtg1KvJS
XrFioshCo6z2CDchmgs84y4oihkrPPylQThUi+8Yq8txoPRKO7QgE20tjBc/SyW4
BVUe/KCOxWDPE1ecTcrXgIEW5bJ9jIzUYVyXJPZpOWUWDwxEfnraizEEA/vHgIGT
83xy/azfvMtzN2GLyuTXLYovmH7bsxMdy7HJW8XL0g1rvnjM2sO/zsXwER2KyZOc
qmJFzwtKJTSej8emLVDrT3ofwWAwvpG2pHkFuXBH7aAWBx0PqLC5Ax3ARPwtUXJo
ytv2TfSTu1CZayhVUYf9Zfyp695L0VwZ52T4/IN3mUyBBh6oBERiEKO+xK2vAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUOherXGkPQxsCT6iVyDUSTbqafn4wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTUyNjk4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkmc2
MA0GCSqGSIb3DQEBCwUAA4IBAQBEE7ONvPyHf3WYVD9kzIPn5EwH7whgZBeOStfS
EykfpAx7lQ1NGZCHIaotAfGIwmLq8fP9DK4QALUDeYp62W8rUdfVd5OYGpqODec3
XH9Y9wDf4W7hQbkgB9kFu02J8rYU8hbssy1UAV4YIKM9ctylkE79q05vBLAlgw9H
nc7j6OIEFDh1YanTXA2QEL+fgniG2qqpVOfmHF6BrpoiLhSkV5PrafQYKw0pBAeo
TtwEfJrGC90yNQxGQ7BbJS/M5P7bFgrbAF4H9pVkDn9biiMgsPnCr9x5/3Bmj8I3
EUVxCwZPIKLe1JdzLpbB5Iqx++0zW1dv1sfechH9WcOCoPtg
-----END CERTIFICATE-----
Generated at Wed Aug 26 23:09:48 2026 by rpki-client