Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS151338.roa
File: AS151338.roa (raw, json)
Hash identifier: AmYhZvwfJAE0DPXyieEiLJvQUIOvIThQ5FEeciWlPxE=
Subject key identifier: 38:65:C6:3B:B8:32:32:A5:AE:69:85:76:BD:94:67:35:2B:56:50:B5
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 3BE83E84BE9EE496D4961BB9D6C48D0D27D5E14A
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS151338.roa
Signing time: Thu 20 Aug 2026 18:30:28 +0000
ROA not before: Thu 20 Aug 2026 18:25:28 +0000
ROA not after: Thu 19 Aug 2027 18:30:28 +0000
asID: 151338
IP address blocks: 82.139.221.0/24 maxlen: 24
82.139.224.0/24 maxlen: 24
82.139.225.0/24 maxlen: 24
82.139.234.0/24 maxlen: 24
82.139.235.0/24 maxlen: 24
82.139.236.0/24 maxlen: 24
82.139.238.0/24 maxlen: 24
82.139.242.0/24 maxlen: 24
82.139.246.0/24 maxlen: 24
212.60.156.0/24 maxlen: 24
212.60.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:e8:3e:84:be:9e:e4:96:d4:96:1b:b9:d6:c4:8d:0d:27:d5:e1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Aug 20 18:25:28 2026 GMT
Not After : Aug 19 18:30:28 2027 GMT
Subject: CN=3865C63BB83232A5AE698576BD9467352B5650B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b2:a7:7e:b2:d8:d6:5a:9a:05:8e:57:b6:b0:
2d:1a:28:14:4a:8a:76:82:22:c1:a1:af:f9:9d:57:
08:47:8a:a4:fe:39:59:13:42:87:a6:f1:e2:38:94:
54:79:cc:e6:9a:43:80:8e:81:3e:4b:2b:8b:ba:c4:
5b:db:50:03:e2:68:82:e7:fb:81:92:d8:5b:81:47:
c7:09:49:17:27:68:2c:57:71:44:85:e0:ee:f1:52:
84:07:cd:cc:22:23:96:e4:c5:34:3b:ac:f8:a2:60:
f6:44:00:e9:f4:13:23:2f:04:92:80:cf:cd:6a:26:
23:7e:b6:ef:4e:a8:b2:24:c2:a5:18:cb:fb:e7:4d:
c2:b2:fa:9e:03:ee:53:89:b6:e6:be:82:ef:78:d9:
ab:da:5c:50:27:b6:90:d2:59:40:7b:b0:b2:ba:89:
87:55:c7:9c:bc:ec:38:17:c3:80:61:11:b8:15:b3:
4e:2c:c1:cc:ba:5c:f0:c9:1a:00:5f:f4:a7:94:26:
27:63:7b:f3:a3:14:2f:c3:f0:aa:fc:df:a3:c4:0c:
1b:d6:b7:69:a5:40:53:c3:31:4f:77:cf:1d:71:27:
45:51:64:bd:e6:47:92:8b:c6:86:8b:1f:7f:b8:d9:
82:d0:20:92:bf:ca:f9:6e:ed:25:74:e4:e2:37:bc:
cb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:65:C6:3B:B8:32:32:A5:AE:69:85:76:BD:94:67:35:2B:56:50:B5
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS151338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.221.0/24
82.139.224.0/23
82.139.234.0-82.139.236.255
82.139.238.0/24
82.139.242.0/24
82.139.246.0/24
212.60.156.0/24
212.60.158.0/24
Signature Algorithm: sha256WithRSAEncryption
50:7f:6b:19:02:ef:c4:75:3a:e1:c8:c3:c2:13:6c:42:c5:bf:
29:bf:ef:79:f9:7f:97:2e:81:3a:b7:a4:0b:a3:54:b1:61:6f:
4f:41:cf:8a:a6:50:f2:8a:3a:bd:9d:dc:b2:0e:10:93:72:1d:
07:94:ae:29:e6:ba:d1:da:52:1c:2b:30:14:06:13:23:90:7f:
67:22:55:54:3c:79:ab:2a:c0:6a:21:07:ec:95:7b:41:1d:1e:
9d:6c:4d:f8:a1:64:71:84:48:22:77:c8:57:48:19:6b:f3:0e:
22:47:cb:ec:e1:5a:0e:14:5f:1f:97:73:57:a5:d5:65:a7:4b:
49:e5:41:b0:50:92:9d:c1:ea:5b:87:27:7c:38:89:35:56:d7:
91:18:83:23:e3:0f:7d:5f:cd:ea:0a:13:77:e5:fb:df:b4:a2:
81:bb:52:7c:cd:f1:02:13:30:4d:fd:c6:df:7e:5b:82:bd:7d:
7b:05:66:a5:f4:03:84:c5:22:55:7b:3c:f6:34:e6:62:90:bc:
7c:99:f6:52:89:5c:0d:0e:2a:07:d6:3d:df:c8:8a:51:33:99:
75:66:41:68:a8:90:41:43:22:21:78:2b:f9:8b:0a:fc:d0:f9:
d7:7d:b0:b7:37:47:ad:7a:2d:92:24:53:fd:98:c4:73:a5:c9:
3d:d1:5f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:22:03 2026 by rpki-client