Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS152726.roa
File: AS152726.roa (raw, json)
Hash identifier: FVjIxVxFDkjeVpo+gh7p72cHeU8PhzNcQOAi3j36D3A=
Subject key identifier: 52:C7:46:F5:45:F7:CC:00:F7:4C:1B:AE:04:85:17:8F:24:08:35:64
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 55F9C230D6B490ED480CCEE69BCABBEF0351462A
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS152726.roa
Signing time: Fri 02 Oct 2026 19:37:34 +0000
ROA not before: Fri 02 Oct 2026 19:32:34 +0000
ROA not after: Fri 01 Oct 2027 19:37:34 +0000
asID: 152726
IP address blocks: 5.199.52.0/24 maxlen: 24
212.74.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 01:19:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:f9:c2:30:d6:b4:90:ed:48:0c:ce:e6:9b:ca:bb:ef:03:51:46:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Oct 2 19:32:34 2026 GMT
Not After : Oct 1 19:37:34 2027 GMT
Subject: CN=52C746F545F7CC00F74C1BAE0485178F24083564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:68:78:47:c2:73:c7:e4:c6:d7:3c:09:49:
cd:a1:bb:2f:df:62:05:9b:d6:e6:9c:46:cb:a3:cb:
f2:0b:12:99:59:9a:2d:69:50:21:be:a6:92:f0:af:
00:98:e9:43:5e:4b:8f:97:79:de:5e:f2:73:e9:22:
27:b1:ac:a4:4f:29:12:c2:58:64:33:1e:bb:2a:85:
17:bf:d7:81:27:f8:c8:fb:96:13:53:e2:a5:9f:8b:
1a:cf:1c:ac:9c:9f:fa:a2:f0:46:3b:f1:ce:b9:63:
62:6f:4d:cf:f6:06:29:78:58:92:10:b9:01:ed:4e:
44:3e:79:aa:c5:2d:9b:3a:d1:01:eb:ac:cd:8d:79:
16:6f:40:c2:40:29:27:9d:e4:8e:d9:d8:92:66:50:
e0:cf:69:1d:8c:23:c8:6e:8c:8b:e1:13:b2:57:07:
25:f5:8b:8d:23:88:fa:d3:34:c8:20:de:ee:7f:84:
af:af:e7:2f:69:13:23:f4:4b:d7:cf:e9:da:4a:7a:
78:f8:cc:fe:97:06:ff:60:b8:b4:e7:ff:3e:20:a7:
8f:87:40:60:d8:39:84:0c:3d:54:eb:a5:4c:a5:e6:
66:84:29:cf:6a:ff:3d:bb:88:40:4f:30:f9:c3:e3:
e8:8f:51:dc:94:66:13:17:27:0e:d3:a3:67:1e:ca:
f9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C7:46:F5:45:F7:CC:00:F7:4C:1B:AE:04:85:17:8F:24:08:35:64
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS152726.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.52.0/24
212.74.57.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:35:4e:24:3d:c1:dd:3e:31:8b:95:d7:8c:aa:59:13:fb:73:
e8:18:55:0c:d1:34:15:f5:2e:81:11:16:5f:87:f3:be:8e:a3:
44:e0:d1:eb:3f:11:dc:ce:5f:37:7a:1f:12:d8:1d:84:58:67:
21:3e:42:b0:81:b6:dc:a9:bc:ee:e1:d0:bf:ce:e6:54:97:fc:
57:f5:07:ed:45:b5:e2:b7:fb:65:42:8b:02:ca:39:ed:8b:b3:
32:52:99:5c:c3:67:bd:76:90:7a:71:8c:72:4e:b0:d7:40:85:
17:5d:13:cc:55:b8:a8:4c:7a:42:18:e9:8e:c1:92:72:21:67:
ca:f5:52:57:18:82:dc:bf:91:d4:26:f9:b2:04:5c:b3:2f:2e:
fe:fe:8c:51:62:74:84:8f:7d:2e:30:69:3e:a2:78:70:5d:5d:
0c:cc:2f:09:e2:55:b2:55:0b:56:d9:e6:c3:b3:69:34:69:97:
a5:9f:95:3d:e5:79:bd:b3:1f:28:dd:0f:a4:50:29:f7:4a:98:
dd:e6:f1:33:84:9b:30:0c:ed:14:c1:69:83:7b:79:fe:52:16:
4e:b2:8e:1b:3b:b7:8c:24:42:46:d5:19:77:b8:d6:f8:4f:7e:
ae:d3:2d:a5:8f:3f:93:39:98:2a:11:db:69:36:d3:95:d0:3a:
d9:36:2b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:41:34 2026 by rpki-client