Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: hRpvdMkX2I38F0RBvFzcze02YgJGdeqLlQo6rCVz+iU=
Subject key identifier: A8:8B:21:42:E5:87:16:AE:4B:15:22:B1:90:1E:FA:67:91:A1:68:1F
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2D34A7524421E87822C71C1CF1F8595518EE5E2C
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152179.roa
Signing time: Thu 15 Oct 2026 06:48:29 +0000
ROA not before: Thu 15 Oct 2026 06:43:29 +0000
ROA not after: Thu 14 Oct 2027 06:48:29 +0000
asID: 152179
IP address blocks: 179.61.173.0/24 maxlen: 24
181.214.2.0/24 maxlen: 24
181.214.33.0/24 maxlen: 24
181.214.75.0/24 maxlen: 24
181.214.132.0/24 maxlen: 24
181.214.185.0/24 maxlen: 24
181.214.205.0/24 maxlen: 24
181.214.250.0/24 maxlen: 24
181.215.127.0/24 maxlen: 24
181.215.136.0/24 maxlen: 24
181.215.148.0/24 maxlen: 24
181.215.154.0/24 maxlen: 24
181.215.239.0/24 maxlen: 24
185.173.27.0/24 maxlen: 24
194.53.142.0/24 maxlen: 24
2a03:fbc0::/29 maxlen: 48
2a0e:1c00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:34:a7:52:44:21:e8:78:22:c7:1c:1c:f1:f8:59:55:18:ee:5e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 15 06:43:29 2026 GMT
Not After : Oct 14 06:48:29 2027 GMT
Subject: CN=A88B2142E58716AE4B1522B1901EFA6791A1681F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:88:4f:ee:25:9f:ae:44:4d:3b:12:19:e9:b3:
cc:01:2a:c9:4d:35:f8:8d:be:9e:ae:ed:a6:4e:5a:
b1:a5:32:14:cb:94:a4:51:72:c6:a9:49:de:08:f0:
df:fd:b2:50:34:50:8d:e8:c3:cf:0a:c3:15:be:a6:
a5:4c:ce:2f:b5:c0:9f:8d:cd:a1:b8:b9:3b:2c:b2:
1d:4d:41:a7:7f:0e:1e:d2:92:fb:e8:b1:a3:8c:8f:
e7:13:fd:63:cc:c0:6d:6e:95:3e:01:5f:9b:e4:4c:
d1:d8:08:50:8e:ba:12:78:78:f9:2a:b2:cf:b4:ba:
f1:11:94:51:ac:f6:e9:69:9a:e1:7e:9c:b1:ec:c0:
ec:6a:9b:c0:1e:0f:93:1b:5e:4a:a2:61:45:ce:7d:
92:4f:8a:7f:e6:01:75:29:8c:65:3e:c2:4a:e4:15:
03:e8:b2:03:b2:87:0e:9a:3d:34:c5:6d:e9:7c:05:
a6:39:0e:92:be:cf:29:3a:a2:da:4e:7d:b3:8f:dc:
72:f4:5f:a8:78:fc:2e:6f:81:80:b3:44:22:c2:8c:
54:4b:71:5d:14:ec:e4:aa:ea:35:fd:d5:d2:dd:13:
1b:b8:0c:da:d1:12:cb:29:71:51:a8:d0:27:b8:be:
dd:8e:50:93:8e:70:8c:c0:6f:a6:94:53:43:bf:80:
43:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8B:21:42:E5:87:16:AE:4B:15:22:B1:90:1E:FA:67:91:A1:68:1F
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.173.0/24
181.214.2.0/24
181.214.33.0/24
181.214.75.0/24
181.214.132.0/24
181.214.185.0/24
181.214.205.0/24
181.214.250.0/24
181.215.127.0/24
181.215.136.0/24
181.215.148.0/24
181.215.154.0/24
181.215.239.0/24
185.173.27.0/24
194.53.142.0/24
IPv6:
2a03:fbc0::/29
2a0e:1c00::/29
Signature Algorithm: sha256WithRSAEncryption
88:fb:26:c8:8e:38:dc:e1:24:58:50:c8:b6:fd:6c:64:d5:aa:
3c:d8:5b:3d:c8:1b:85:bd:fc:c8:50:e1:69:27:1c:dd:68:28:
8f:62:a1:e9:30:b7:fc:da:94:c8:96:c0:8b:c1:2b:e5:e3:76:
ed:63:b2:15:a9:57:a4:ff:1d:14:15:10:18:69:5f:a0:5b:eb:
9b:73:5e:be:42:3a:0f:39:50:84:24:4a:ce:6a:15:97:01:a4:
86:50:97:32:ac:89:37:b7:a6:a2:48:91:29:3b:3e:17:c2:5b:
eb:55:72:7c:69:6c:d6:70:5c:15:0f:5e:1a:47:f2:ff:f7:ba:
a1:54:ef:7f:06:da:46:ed:1a:1a:ee:fd:c0:8c:72:69:99:7c:
86:b2:94:91:19:43:ed:08:03:17:1f:27:e0:bf:9d:30:22:79:
1e:74:b6:87:20:1b:4e:47:60:39:08:05:f6:0a:d2:bf:5f:ef:
35:bf:57:65:5c:0e:18:5d:fd:07:a9:26:ca:44:f6:5d:50:01:
33:9b:02:7e:95:c6:88:eb:e4:0a:98:cb:9e:08:9a:ee:d5:32:
01:cd:9f:30:da:28:93:e6:d4:90:c0:59:27:8f:f0:e3:76:de:
16:22:46:91:33:a1:41:14:f3:6a:1c:a7:49:ec:c4:73:eb:28:
c0:98:03:d5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 19 20:48:14 2026 by rpki-client