Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152868.roa
File: AS152868.roa (raw, json)
Hash identifier: yJTQxSMvHniMX15hH+UzHlCVoT0E03zDn8JetnCxKz0=
Subject key identifier: AC:66:A7:57:90:11:02:E2:28:2F:B4:61:CC:C1:C2:86:7C:E6:EF:58
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 21629B18A347C5F5EAD656267BF388A43DD1184F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152868.roa
Signing time: Tue 11 Aug 2026 08:03:59 +0000
ROA not before: Tue 11 Aug 2026 07:58:59 +0000
ROA not after: Tue 10 Aug 2027 08:03:59 +0000
asID: 152868
IP address blocks: 168.222.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:62:9b:18:a3:47:c5:f5:ea:d6:56:26:7b:f3:88:a4:3d:d1:18:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 11 07:58:59 2026 GMT
Not After : Aug 10 08:03:59 2027 GMT
Subject: CN=AC66A757901102E2282FB461CCC1C2867CE6EF58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:de:32:4d:5f:b7:0c:91:57:c0:63:7f:36:15:
f9:b2:1b:17:b8:e1:63:5d:c0:59:a0:12:cb:a5:49:
6e:54:21:84:64:db:38:66:9c:6c:c3:04:93:ee:db:
51:44:d1:76:0a:b1:4c:a9:68:89:bf:90:b5:71:d8:
fa:5f:9f:ab:4f:3d:98:5d:61:29:59:b5:68:45:df:
70:7e:1c:f5:37:06:77:b8:2e:cd:67:f4:38:a0:41:
5d:16:32:c5:ab:74:92:a1:f9:c5:71:71:ed:57:f9:
27:ee:b7:a0:aa:1e:12:52:1e:eb:f7:82:5d:37:39:
52:a8:72:9a:d9:fc:0d:76:ef:73:c2:b7:05:10:e7:
ab:8a:36:a7:fe:a1:db:1e:77:27:d6:ad:25:f9:0b:
4a:b4:90:fb:94:f0:85:07:8f:85:da:f0:61:fe:6a:
cd:9d:68:11:09:52:be:8c:7c:af:0e:43:5d:1b:14:
ef:f7:68:04:b8:46:14:7c:4e:c9:08:6c:01:d9:14:
4d:da:d3:f0:e4:fa:e9:8f:f1:f6:b0:6e:1a:28:96:
46:01:51:f8:31:bd:c7:b2:65:fc:11:3f:e7:75:c3:
24:ca:64:ff:bc:01:6f:ea:40:ae:43:f2:80:e7:57:
df:19:b3:aa:bb:09:25:45:ab:be:b6:73:42:95:4e:
b5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:66:A7:57:90:11:02:E2:28:2F:B4:61:CC:C1:C2:86:7C:E6:EF:58
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152868.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.53.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:df:5d:bc:28:0b:10:16:91:1f:4f:ba:dc:15:24:61:3d:cb:
bb:df:6a:5f:c8:19:3b:5b:cd:2d:2a:04:f5:99:8c:76:5b:ab:
83:32:0c:f8:9e:76:d6:2c:36:ac:fd:25:ab:e0:f4:75:7f:3f:
68:1d:16:5d:43:5d:ce:41:a7:35:08:64:d0:11:36:1e:e8:01:
f2:54:36:37:e4:6e:98:b4:fa:9a:fd:4f:f1:54:e1:db:68:54:
f4:12:51:8f:9f:e4:3b:b2:e5:de:36:72:0c:43:8f:33:5b:23:
c6:f3:95:c3:2d:f6:5f:69:cc:03:cd:cb:33:fd:5e:b7:c5:cc:
38:d7:08:11:36:7b:fc:18:96:84:e8:0b:48:fb:85:c6:7a:b0:
9b:b5:02:70:b0:f9:8a:cd:7f:04:9b:11:6a:29:3e:2e:c8:4c:
60:43:c7:96:2a:bf:ef:c6:16:c0:fe:40:38:e2:c8:7c:5a:f9:
c0:e6:7f:60:61:fc:83:b3:a9:e4:44:57:0f:33:ab:a0:40:25:
32:78:b3:43:9b:63:15:ae:9f:f5:fd:a1:f2:2b:91:70:d6:1d:
3f:2e:eb:f6:48:22:56:df:f3:bf:41:8d:a4:f2:dd:6e:4b:98:
37:21:ff:5c:27:59:5f:c7:3e:4f:c2:38:4c:2e:bb:69:79:0c:
07:1e:9b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:22:10 2026 by rpki-client