Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: YcViGnpRAt1Q1T/OsNGRarhbBZvtU6D9q0ZOQucaJAw=
Subject key identifier: AA:E9:D9:C9:66:1F:23:2F:E6:95:E7:38:C3:BC:9F:C8:49:8A:1A:70
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 06676E96F2DB52D0B8BE2943F893DB646464A416
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS152179.roa
Signing time: Mon 17 Aug 2026 13:06:23 +0000
ROA not before: Mon 17 Aug 2026 13:01:23 +0000
ROA not after: Mon 16 Aug 2027 13:06:23 +0000
asID: 152179
IP address blocks: 46.236.198.0/24 maxlen: 24
46.236.200.0/23 maxlen: 24
46.236.220.0/24 maxlen: 24
46.236.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:67:6e:96:f2:db:52:d0:b8:be:29:43:f8:93:db:64:64:64:a4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Aug 17 13:01:23 2026 GMT
Not After : Aug 16 13:06:23 2027 GMT
Subject: CN=AAE9D9C9661F232FE695E738C3BC9FC8498A1A70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fb:08:13:44:c8:e8:57:99:8c:50:d4:ee:84:
f4:bf:82:43:09:92:c8:17:42:17:a8:21:64:8a:f5:
79:b9:04:cf:57:c5:19:77:d8:05:f8:1a:c0:f8:97:
e0:d6:0e:93:a2:b6:53:8a:58:14:2a:74:4f:8a:f7:
a2:6c:d7:fb:3c:c7:56:f8:5c:8a:89:c6:c4:dc:d3:
79:88:05:d7:c8:6b:6d:81:a4:3a:14:05:84:db:e5:
01:e0:c4:89:92:73:8b:bd:e1:aa:5e:e6:6f:29:8d:
f8:50:5e:57:a3:f0:8d:5c:39:89:02:4f:71:5d:b9:
cf:19:6d:34:33:74:ee:8b:71:9d:43:dc:90:d0:fe:
27:fa:a9:9e:68:18:3e:df:a7:3b:71:21:76:f0:b5:
f6:bd:6e:6e:90:f3:35:dc:f0:9c:85:77:d5:5f:ec:
f0:f8:8f:f3:bd:89:cc:88:87:e6:c5:7b:31:91:69:
45:11:9c:f8:d1:70:bf:76:b3:95:4d:04:9d:4b:ba:
6f:64:59:83:20:9f:a3:5e:69:0e:dc:7a:cd:4a:2f:
53:44:3a:9a:cb:11:9d:6d:88:71:47:ea:fa:50:f9:
66:3b:0a:b4:db:2c:d3:97:92:e9:65:46:bd:ba:13:
34:d0:f0:f9:29:b7:77:55:6a:d5:70:e6:0e:bc:d9:
24:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E9:D9:C9:66:1F:23:2F:E6:95:E7:38:C3:BC:9F:C8:49:8A:1A:70
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.198.0/24
46.236.200.0/23
46.236.220.0/23
Signature Algorithm: sha256WithRSAEncryption
00:95:2b:d8:e6:1d:ae:f2:cd:a9:cc:f5:c8:45:d7:e8:c0:9a:
a7:66:73:b0:37:5a:70:78:be:fc:00:c5:f6:f9:47:6c:74:9a:
61:53:1b:98:7e:da:a1:cf:78:ad:bb:dc:ae:79:28:04:54:40:
3a:5b:54:6b:eb:16:f8:82:e6:eb:50:e3:9d:17:dc:c2:f8:1d:
71:a1:5d:ea:51:ec:5f:04:93:4d:12:47:26:d6:8c:35:7c:1e:
df:ad:b2:b9:f9:2b:41:5c:c0:36:b1:ac:d6:9b:fb:44:6c:a6:
dc:04:0c:8f:63:1a:ab:30:39:ef:16:c8:e0:b4:f6:56:53:8d:
a0:c1:84:ab:59:16:12:32:87:15:19:2e:7a:93:c6:55:ab:da:
e1:f5:2f:fb:d2:0d:47:3d:c0:5d:98:35:58:48:1c:9a:b0:77:
55:b3:f8:02:85:ea:7e:c0:9c:2a:28:43:3a:1c:b3:f5:e1:49:
e8:37:95:d9:98:b9:30:c8:0f:a1:28:14:8d:3c:73:1c:2c:01:
5e:5c:d1:4b:fc:6b:4d:9d:e9:f3:57:8d:aa:15:ce:6a:64:2f:
ff:37:e1:20:ec:ee:f7:a1:a5:38:ce:05:fb:e2:4e:69:f8:34:
f9:bb:3f:82:47:01:c4:a8:42:b2:0d:6f:e2:e6:74:46:4a:ee:
e7:c5:9a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:22:07 2026 by rpki-client