Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS152698.roa
File: AS152698.roa (raw, json)
Hash identifier: 5yK3ZQ1H9PJAk1UvJEWk97WJy8NvpK6IKq8sjMHKOdk=
Subject key identifier: 98:8B:E1:0C:45:6D:8F:73:66:2F:28:F2:CE:49:10:CB:85:57:A6:7E
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 041ED6941CDF7C42C1763FBBD0550CB90B0744B1
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS152698.roa
Signing time: Mon 05 Oct 2026 18:25:18 +0000
ROA not before: Mon 05 Oct 2026 18:20:18 +0000
ROA not after: Mon 04 Oct 2027 18:25:18 +0000
asID: 152698
IP address blocks: 82.139.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:1e:d6:94:1c:df:7c:42:c1:76:3f:bb:d0:55:0c:b9:0b:07:44:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Oct 5 18:20:18 2026 GMT
Not After : Oct 4 18:25:18 2027 GMT
Subject: CN=988BE10C456D8F73662F28F2CE4910CB8557A67E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:47:64:77:41:62:03:75:78:94:78:c0:ac:30:
b5:10:c3:a4:f5:87:ad:a0:8c:be:78:3c:c7:68:34:
ca:3b:25:2a:69:97:a5:c0:d5:7e:8d:1f:b8:eb:ed:
26:e2:e7:18:df:1a:f7:75:d4:9b:45:91:f2:7d:37:
8d:52:16:43:b1:f4:6d:bc:c3:e4:79:91:c7:86:b2:
2b:22:80:5a:6e:2f:dd:c8:8d:58:41:ae:18:1e:d0:
25:a2:3d:4b:ef:da:11:08:ad:45:77:49:5a:9f:04:
87:fb:e6:46:8d:1a:2f:d2:eb:6a:95:18:a1:78:dd:
be:d4:28:0b:16:a1:c3:46:4b:da:58:d0:be:66:ed:
cc:76:30:c9:93:14:4d:57:c5:58:6f:2f:20:eb:13:
75:8e:3a:fa:45:a3:71:b4:4b:77:9d:b9:56:8d:fc:
3b:92:1e:b7:00:be:09:52:ce:51:71:19:cb:03:15:
43:67:63:c1:21:df:53:06:99:1e:23:c3:53:4e:60:
b7:a2:cf:dd:f9:fc:a1:d7:62:bd:ca:c7:ed:38:be:
fc:ff:93:da:fe:bd:0b:76:a4:1c:ad:19:3f:54:8b:
0a:24:1e:da:58:3c:00:45:10:70:e3:78:21:27:38:
d4:b4:45:45:31:a4:27:ca:44:32:c9:6e:80:89:79:
a6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8B:E1:0C:45:6D:8F:73:66:2F:28:F2:CE:49:10:CB:85:57:A6:7E
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS152698.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.228.0/24
Signature Algorithm: sha256WithRSAEncryption
06:32:83:a1:45:7b:ec:0e:24:0d:d8:b7:4b:fc:93:40:15:6d:
d8:9b:f0:c0:11:e5:63:8a:2f:0a:59:c6:a4:f7:cf:54:53:6c:
54:5c:7c:84:66:81:b8:da:72:1f:4d:88:22:5b:f7:44:90:fd:
e0:79:de:53:2e:3c:f8:e9:a8:8a:4f:4c:b5:79:5f:48:d0:f6:
26:58:9c:55:77:8e:3a:90:fb:52:e7:11:c7:cd:ca:9a:60:3d:
9e:24:85:67:c1:1c:51:90:e0:de:29:b4:93:78:fc:ff:3a:af:
34:a2:4b:a4:fa:43:fa:13:de:a8:0f:65:32:3e:64:be:4e:4a:
80:b0:db:f6:8d:31:ee:02:a2:81:43:90:12:56:28:74:ca:e8:
1b:11:d6:99:20:24:c4:1c:c8:1a:c0:0d:a0:46:0d:60:36:44:
1e:48:a8:a7:af:30:10:27:e8:cd:75:e3:44:36:6f:20:ed:00:
2f:84:57:f4:72:fc:03:2c:d5:dc:5e:42:05:35:75:e5:26:d8:
e3:b3:02:8b:37:f9:02:b1:0c:f6:a3:b4:b4:d7:64:34:47:ee:
78:df:f9:cc:7b:a7:d3:44:62:99:c1:24:8e:37:77:93:06:e3:
a3:7f:61:1e:d0:c6:62:c8:f4:18:53:61:79:b2:9a:4c:75:42:
c4:e2:c9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:37:50 2026 by rpki-client