Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: RklY6N11UbXmr1BcBGcCQzWhm9UxpNX70N92EqE7aw8=
Subject key identifier: 97:CA:03:45:3B:6E:16:39:B2:98:F4:C1:AB:7A:DD:21:8E:AE:F3:05
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 46BF9B2AA873DCDA97F3C6FEAE5A4D94365EE419
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152179.roa
Signing time: Tue 18 Aug 2026 15:22:34 +0000
ROA not before: Tue 18 Aug 2026 15:17:34 +0000
ROA not after: Tue 17 Aug 2027 15:22:34 +0000
asID: 152179
IP address blocks: 179.61.148.0/24 maxlen: 24
179.61.173.0/24 maxlen: 24
181.214.2.0/24 maxlen: 24
181.214.33.0/24 maxlen: 24
181.214.75.0/24 maxlen: 24
181.214.132.0/24 maxlen: 24
181.214.185.0/24 maxlen: 24
181.214.205.0/24 maxlen: 24
181.214.250.0/24 maxlen: 24
181.215.127.0/24 maxlen: 24
181.215.136.0/24 maxlen: 24
181.215.148.0/24 maxlen: 24
181.215.154.0/24 maxlen: 24
181.215.239.0/24 maxlen: 24
185.173.27.0/24 maxlen: 24
194.53.142.0/24 maxlen: 24
2a03:fbc0::/29 maxlen: 48
2a0e:1c00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:bf:9b:2a:a8:73:dc:da:97:f3:c6:fe:ae:5a:4d:94:36:5e:e4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 18 15:17:34 2026 GMT
Not After : Aug 17 15:22:34 2027 GMT
Subject: CN=97CA03453B6E1639B298F4C1AB7ADD218EAEF305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e0:96:8f:7e:dd:92:2c:07:e1:16:da:95:25:
3b:4f:59:71:fc:50:12:15:b4:c8:c5:b9:b8:70:5c:
ee:0e:a1:01:11:e2:29:83:68:c4:38:01:33:1f:89:
3b:f7:2a:b7:df:9c:93:62:e0:80:39:02:0f:79:77:
8f:eb:b3:c5:fd:8a:5a:a8:e9:80:42:fe:91:f3:d4:
6c:bb:fe:9a:ef:8f:76:f0:87:63:72:d5:52:d1:15:
58:7d:6e:de:86:f0:4f:06:ef:da:09:7b:c4:27:fb:
8f:62:66:69:7e:09:91:4a:66:13:44:db:1d:6b:16:
f5:f6:1a:cf:2c:7d:6d:8a:b7:93:2e:3c:8d:dd:17:
14:d9:bd:eb:a4:c5:0d:4c:7a:72:33:c1:f2:5f:60:
41:c6:14:b7:d7:6c:92:d5:9a:5a:d5:ca:26:92:1f:
18:cf:61:10:74:83:9e:c1:3c:f2:b2:0b:5a:b6:c6:
90:46:22:5d:8c:a6:86:1d:ba:2b:62:16:af:0e:bb:
74:3e:0c:a9:57:da:d1:92:1c:50:c4:5d:80:b6:09:
02:25:73:3b:f9:69:44:b6:99:22:47:a1:08:f6:59:
7c:92:75:15:38:e4:ad:43:40:33:0c:54:fb:f2:8f:
5f:04:34:bb:3b:3e:e5:ea:b9:3e:29:7c:7c:3c:e0:
50:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CA:03:45:3B:6E:16:39:B2:98:F4:C1:AB:7A:DD:21:8E:AE:F3:05
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.148.0/24
179.61.173.0/24
181.214.2.0/24
181.214.33.0/24
181.214.75.0/24
181.214.132.0/24
181.214.185.0/24
181.214.205.0/24
181.214.250.0/24
181.215.127.0/24
181.215.136.0/24
181.215.148.0/24
181.215.154.0/24
181.215.239.0/24
185.173.27.0/24
194.53.142.0/24
IPv6:
2a03:fbc0::/29
2a0e:1c00::/29
Signature Algorithm: sha256WithRSAEncryption
85:9e:42:94:61:9d:aa:8d:b7:7f:48:d9:c4:4c:97:85:a1:df:
68:b3:c6:36:0f:20:96:a8:c6:7f:eb:05:3c:5a:b3:48:2d:bf:
fc:3c:ea:4a:af:3e:1e:d0:eb:20:f5:0b:4a:30:16:31:dd:c4:
ef:71:bb:e5:b5:0f:76:fe:9e:90:91:59:3e:01:d0:91:02:25:
9e:44:46:68:8a:d7:44:d3:3a:b3:70:82:f8:4e:69:7b:90:ee:
3e:0b:6d:32:be:59:2d:77:d7:90:04:27:41:13:6c:9b:bf:a5:
71:8c:28:84:f2:71:8b:5a:e0:0e:fe:2d:89:63:11:7f:55:9a:
1b:d4:ea:68:f4:f0:a3:af:15:a6:dc:9d:d2:8d:52:4f:28:c3:
51:7b:92:06:74:f9:87:42:0d:ae:56:36:be:88:04:bb:4c:32:
33:31:68:37:aa:bd:92:36:3f:42:ca:cd:1b:49:d8:2b:90:39:
b6:aa:1a:0e:e8:66:97:1b:1f:60:56:58:6e:4d:35:db:2b:22:
4a:96:c7:54:27:68:93:7a:ef:d9:90:5d:54:38:3a:a9:c6:42:
af:51:bd:11:6f:ef:3f:4b:95:c4:f6:13:b4:0b:b5:2c:ca:03:
8c:46:66:3a:41:56:b6:b1:e4:95:5f:56:3d:4b:0a:62:67:13:
4c:7c:88:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:30:47 2026 by rpki-client