Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS152672.roa
File: AS152672.roa (raw, json)
Hash identifier: 24CV6i0q0PLEjF37/NGv/norWYAfvb/T4LhYn9c7r4I=
Subject key identifier: A6:69:AE:F7:5E:6B:5D:3C:DC:17:D3:5C:9A:57:DD:2E:A3:B4:DC:73
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 2B9CB615BBDA121A20D10E9078C952CF72FF76B5
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS152672.roa
Signing time: Fri 29 May 2026 17:16:04 +0000
ROA not before: Fri 29 May 2026 17:11:04 +0000
ROA not after: Fri 28 May 2027 17:16:04 +0000
asID: 152672
IP address blocks: 82.139.194.0/24 maxlen: 24
82.139.204.0/24 maxlen: 24
82.139.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:9c:b6:15:bb:da:12:1a:20:d1:0e:90:78:c9:52:cf:72:ff:76:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: May 29 17:11:04 2026 GMT
Not After : May 28 17:16:04 2027 GMT
Subject: CN=A669AEF75E6B5D3CDC17D35C9A57DD2EA3B4DC73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fc:5b:24:1a:ca:d8:fd:d8:bd:aa:bd:39:3e:
63:9d:85:ee:ee:8b:d8:03:24:45:36:c6:b0:f5:e1:
2b:30:4f:04:ef:53:50:e1:df:f2:ec:70:ac:1c:d9:
8d:cb:93:43:7a:c4:8e:6b:c1:32:32:ee:0e:88:e5:
89:8a:95:0f:cc:cb:50:d9:90:c8:0b:0b:cb:aa:2f:
34:11:aa:b4:ff:fa:d1:53:3c:dd:23:1a:c5:8b:b3:
ab:38:7e:ea:f8:4f:93:86:cc:c1:17:06:f8:8b:79:
d1:b9:3e:d8:90:67:b5:c2:c8:c3:3b:04:d1:aa:82:
f6:0c:02:a3:2b:29:77:41:fd:7c:e6:ea:36:7f:ba:
f9:cf:cd:5a:c5:cb:31:bb:92:85:13:af:21:dc:2c:
67:85:8f:3c:b1:33:ff:10:5d:e7:90:66:81:66:c0:
95:a1:bd:a1:8a:16:2e:de:a0:c6:e5:32:c1:aa:49:
40:aa:31:d8:34:81:29:60:00:67:4d:db:b8:ed:f7:
fe:08:64:81:40:a6:5f:7a:ba:6c:02:d3:46:4b:a6:
9d:25:94:6a:44:7e:60:d7:fb:3b:7b:5a:48:9b:3b:
39:45:ac:5e:5e:ef:9b:16:ed:79:db:1e:e9:67:42:
a3:cd:ea:c1:69:9f:a2:7d:0e:b4:31:38:0c:8a:0e:
f3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:69:AE:F7:5E:6B:5D:3C:DC:17:D3:5C:9A:57:DD:2E:A3:B4:DC:73
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS152672.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.194.0/24
82.139.204.0/24
82.139.219.0/24
Signature Algorithm: sha256WithRSAEncryption
52:80:fb:16:1b:96:50:2e:0a:76:56:6c:89:c1:c9:9c:df:e4:
c1:09:28:52:5c:e2:7f:8b:8e:ef:5a:d0:dd:48:e4:fe:1e:2f:
4d:fb:d6:03:b4:c7:7d:f1:ce:b0:5e:e1:59:81:b0:32:cf:34:
ef:74:b8:62:62:4a:fb:3b:b7:5c:44:c3:ce:66:3c:92:a9:6d:
24:f9:0f:85:09:83:18:31:9e:76:e9:ad:1b:88:1f:a9:13:50:
74:8c:84:06:d4:43:b9:b9:4e:f3:ba:30:b4:c6:af:f8:9f:92:
25:7d:44:c4:43:3f:7e:4a:0e:de:22:9d:df:df:ea:7f:d9:8a:
57:1c:4a:fa:a4:c3:32:5a:fc:35:26:db:fc:78:66:59:61:fc:
92:5d:28:2f:27:8e:ee:48:b3:71:bf:b3:fe:0c:21:82:59:73:
71:30:ff:9e:5d:2f:ba:6b:ff:c7:fb:5d:9e:66:8a:0d:20:b0:
03:b8:82:62:02:d6:57:0d:14:67:fe:2c:3d:0c:b0:0c:64:70:
4a:1b:fd:b6:6b:a7:00:71:e1:4e:38:32:d2:3a:26:b0:6a:22:
e0:62:3b:e9:19:ad:b8:46:07:8a:6c:dc:93:73:5d:1e:05:6a:
5a:f7:9e:47:2e:a5:9e:b8:a4:3a:04:ff:31:6f:2c:a5:3a:c2:
01:b7:6b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:16:50 2026 by rpki-client