Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS152726.roa
File: AS152726.roa (raw, json)
Hash identifier: r9e5weORdSj3QpMZ9KPd0qVwsCFWUPGHmEvLzlFSGrE=
Subject key identifier: AC:D1:AF:EF:DE:E0:F7:8A:93:01:51:EC:5C:1E:8C:B2:79:7D:0B:1A
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 3906BCF5C489C3348E4C636F8717E4F499244D94
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS152726.roa
Signing time: Sat 17 Oct 2026 05:23:02 +0000
ROA not before: Sat 17 Oct 2026 05:18:02 +0000
ROA not after: Sat 16 Oct 2027 05:23:02 +0000
asID: 152726
IP address blocks: 212.17.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 21:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:06:bc:f5:c4:89:c3:34:8e:4c:63:6f:87:17:e4:f4:99:24:4d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Oct 17 05:18:02 2026 GMT
Not After : Oct 16 05:23:02 2027 GMT
Subject: CN=ACD1AFEFDEE0F78A930151EC5C1E8CB2797D0B1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:54:d0:a1:d9:a8:5d:fc:bb:75:85:9d:7b:29:
0c:f2:79:bb:13:35:98:f9:b8:7e:b0:60:ec:20:b7:
58:d6:58:fe:72:f9:c4:e7:e3:d6:5e:52:3e:bc:cf:
1c:02:1d:0e:71:14:02:04:51:63:20:50:3b:0c:06:
77:dd:57:47:95:51:e7:43:e5:4f:2f:2b:24:d4:0e:
8d:ad:f0:42:84:8c:11:73:4e:c6:18:70:f1:f3:30:
1c:c1:f7:e4:87:e5:58:19:c7:6a:f5:d6:4e:50:a6:
eb:ce:f4:76:b6:28:dd:6c:be:08:2a:86:ba:40:ef:
b3:c3:70:9a:f3:aa:3b:73:88:85:96:d8:f3:02:3d:
31:e9:7d:11:ad:91:ed:61:d8:41:1b:15:a6:83:c8:
ed:91:e4:2c:01:96:27:30:d1:19:9b:02:ed:df:7d:
19:16:3b:f7:91:e8:79:88:cf:78:43:2b:1c:e2:74:
70:c5:66:6d:ae:53:02:22:7c:9e:40:7f:5c:19:a8:
20:ac:01:6e:08:a0:e8:fa:7b:d1:4a:c3:0e:b2:75:
c2:2f:00:a8:8c:d3:b9:aa:7a:64:94:de:dd:59:36:
d2:0a:2e:9c:f7:ef:27:61:df:c6:02:7b:f2:f6:89:
b1:22:69:bb:b3:40:3a:e5:38:c6:80:83:84:59:f6:
26:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D1:AF:EF:DE:E0:F7:8A:93:01:51:EC:5C:1E:8C:B2:79:7D:0B:1A
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS152726.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.17.224.0/24
Signature Algorithm: sha256WithRSAEncryption
25:cb:04:84:96:b3:fe:bc:46:8e:1b:97:ab:f4:b2:91:4b:50:
ce:c2:2b:67:3e:df:54:a9:85:d7:e7:69:1f:bd:e1:d7:84:67:
c9:55:4d:91:74:ec:66:74:5c:b0:dd:1d:7f:72:01:6b:7d:d4:
f6:6f:57:75:1e:2b:b8:09:a3:da:54:d2:76:86:7f:85:bb:4f:
85:d2:33:b6:81:ea:ae:6d:75:c1:99:aa:b2:63:dd:fd:a4:af:
aa:b1:05:c1:42:5d:32:ba:ba:9b:50:75:b9:ec:e3:8b:22:ba:
82:79:af:8f:8c:07:24:16:b1:22:83:42:97:c5:70:ad:57:6c:
58:27:3a:0f:07:64:2b:9c:a3:26:4f:bc:9b:ad:31:fc:ee:42:
99:c1:07:50:83:bc:64:a3:39:ca:91:69:0d:e3:28:f2:f1:63:
83:15:ce:31:cc:f7:01:59:ab:af:c5:43:a2:39:15:a0:24:e4:
d6:c4:5a:c0:dc:57:21:46:26:49:e5:99:0b:bc:2b:d5:9a:a1:
83:71:97:1b:e3:de:1f:46:fb:02:20:6b:5d:f2:3f:2d:e6:c6:
61:06:ca:54:bc:2a:16:10:a4:fa:ca:5e:5a:11:32:54:92:fe:
70:5d:5e:74:77:12:5e:4f:5a:d6:15:ac:ec:2d:b0:a3:e9:88:
4c:bb:49:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 17:09:58 2026 by rpki-client