Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152726.roa
File: AS152726.roa (raw, json)
Hash identifier: nMYsoPg3j+dhtJYQuJipEoqBZcJ1ztugCuE96jdWg7Y=
Subject key identifier: 5A:27:71:F3:74:A1:3F:A2:BC:5B:97:07:CA:67:66:34:00:1F:38:21
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0624B9607E98AA7904E248F3A63E945210826B6B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152726.roa
Signing time: Fri 16 Oct 2026 09:32:42 +0000
ROA not before: Fri 16 Oct 2026 09:27:42 +0000
ROA not after: Fri 15 Oct 2027 09:32:42 +0000
asID: 152726
IP address blocks: 143.14.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:24:b9:60:7e:98:aa:79:04:e2:48:f3:a6:3e:94:52:10:82:6b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 16 09:27:42 2026 GMT
Not After : Oct 15 09:32:42 2027 GMT
Subject: CN=5A2771F374A13FA2BC5B9707CA676634001F3821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1c:9c:59:e4:21:e9:17:c4:54:c6:55:ae:49:
a4:62:20:27:c5:f2:ca:6a:ff:22:53:8f:b9:5c:29:
f2:c0:b7:51:a3:ef:ce:b1:fd:f5:27:c8:ee:36:0d:
fb:31:1d:94:c9:34:20:0a:26:fa:e8:1a:1d:8b:86:
fd:31:ba:77:21:d0:e2:1a:6b:e2:c3:f4:bd:f6:4c:
16:09:9f:74:61:15:cd:cd:03:6b:4b:5b:d5:4f:53:
35:56:76:7e:37:19:03:91:7b:c3:09:fd:fa:15:c0:
32:fd:54:08:0b:51:9b:53:d8:a8:9b:c9:48:bc:f1:
95:74:07:18:bd:24:f8:29:54:18:5d:93:58:3a:cd:
f5:13:d9:84:42:fb:d6:38:b5:57:a7:b6:5e:53:01:
76:07:9c:35:10:76:45:a0:bb:34:a0:eb:f3:f1:6e:
4b:9a:bd:cf:6c:5c:38:12:a9:f0:cb:9f:27:83:e1:
23:0e:89:4c:3a:72:f8:9d:cd:6d:04:c4:3c:06:80:
3e:87:ca:59:db:ef:fa:19:6e:3f:ed:5f:51:99:f5:
d3:d0:e6:11:fe:58:5d:ea:a3:0a:8d:43:f5:4a:74:
74:a9:58:1b:ae:29:6d:07:32:9c:4e:61:ec:63:bb:
e0:b3:2b:b2:5b:75:b1:db:11:46:ef:5a:25:91:96:
18:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:27:71:F3:74:A1:3F:A2:BC:5B:97:07:CA:67:66:34:00:1F:38:21
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152726.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.68.0/24
Signature Algorithm: sha256WithRSAEncryption
90:a4:bc:05:5d:25:1f:58:8d:93:7e:e0:c8:14:5b:da:de:8e:
84:d6:86:66:9c:0d:29:3e:55:1d:65:c1:a2:79:b3:e6:52:63:
6d:41:dd:c4:bd:6a:ab:03:fe:13:a7:b8:56:df:d8:e5:bc:09:
32:60:97:cb:37:20:3d:2b:0c:8b:25:df:46:c5:df:7f:e9:ef:
d7:1f:40:26:f6:8e:60:d3:ae:49:de:b0:76:8f:27:3f:04:37:
ad:57:40:25:4c:06:de:bb:d7:1f:1b:9a:de:61:7f:6a:b4:70:
c7:63:2f:2e:d0:c8:b3:1b:b6:bd:41:62:2c:f9:b8:e9:d2:2f:
f4:07:fc:2e:df:a7:04:4c:99:54:78:b3:14:e3:32:6f:47:81:
dc:64:78:c8:ce:a6:b8:37:d8:63:5b:04:42:22:63:8e:c2:62:
6a:fa:39:79:15:7c:d2:39:bd:00:49:86:99:69:64:e9:b3:e7:
6a:7c:77:ef:0a:c1:a1:17:96:0c:ba:9a:c1:7e:38:eb:da:00:
97:4c:06:11:39:93:a8:f8:4c:d0:f7:29:7e:b5:1f:b4:4f:23:
45:0c:b6:1f:1d:90:da:ba:6b:65:d5:a4:f7:16:d3:58:43:36:
c7:4d:71:d5:04:41:3f:af:5d:bc:50:25:b9:dd:65:df:49:30:
56:4a:4f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:48:50 2026 by rpki-client