Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: lDwJerNihVo3Tu9qIZeZBBAMGNBjr2M6BZXmoLMGfpE=
Subject key identifier: 26:6F:D8:D7:58:DF:EF:76:77:A9:B9:36:8A:D9:B2:76:89:AF:51:FB
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 72E7A4548163304AF1D7B3674E6BA1E70445EBCE
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152179.roa
Signing time: Mon 29 Jun 2026 12:35:55 +0000
ROA not before: Mon 29 Jun 2026 12:30:55 +0000
ROA not after: Mon 28 Jun 2027 12:35:55 +0000
asID: 152179
IP address blocks: 179.61.173.0/24 maxlen: 24
181.214.2.0/24 maxlen: 24
181.214.33.0/24 maxlen: 24
181.214.75.0/24 maxlen: 24
181.214.132.0/24 maxlen: 24
181.214.185.0/24 maxlen: 24
181.214.205.0/24 maxlen: 24
181.214.250.0/24 maxlen: 24
181.215.127.0/24 maxlen: 24
181.215.136.0/24 maxlen: 24
181.215.148.0/24 maxlen: 24
181.215.154.0/24 maxlen: 24
181.215.239.0/24 maxlen: 24
185.173.27.0/24 maxlen: 24
194.53.142.0/24 maxlen: 24
2a03:fbc0::/29 maxlen: 48
2a0e:1c00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 07:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:e7:a4:54:81:63:30:4a:f1:d7:b3:67:4e:6b:a1:e7:04:45:eb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 29 12:30:55 2026 GMT
Not After : Jun 28 12:35:55 2027 GMT
Subject: CN=266FD8D758DFEF7677A9B9368AD9B27689AF51FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a4:5f:bd:5e:36:85:ed:4d:46:20:43:01:e2:
69:de:ee:2c:91:e2:3c:2c:df:b6:8c:ce:5c:ae:9c:
bd:33:dd:77:0e:08:8e:da:ff:a4:be:29:04:a3:91:
50:44:6d:7c:79:26:0c:ba:e6:59:2b:7a:75:74:5d:
e2:15:d2:37:b8:c8:ee:90:62:2d:8b:42:7e:99:34:
5a:8e:ae:0c:07:c8:ab:02:4b:81:95:9a:d2:a3:52:
bc:13:18:f7:ba:65:dc:81:76:7d:b4:1e:ea:cd:f3:
73:59:e9:ce:a0:a9:4c:bc:07:a7:9a:1b:93:14:f8:
66:e6:5c:7c:53:4b:93:df:1e:e3:5a:9f:4f:aa:0d:
2b:3a:e2:1d:71:e0:19:32:fc:34:d1:d4:cc:8b:02:
ea:28:62:1a:a3:de:b7:e0:94:f2:6a:0d:4e:e3:f4:
a5:93:9a:cb:96:7d:48:d0:c5:c2:70:72:ad:b0:40:
fe:2a:f6:8d:0a:6e:91:f8:ab:12:bc:5a:33:63:0d:
8d:83:b8:89:23:61:c5:68:7d:3d:12:7e:bd:99:33:
3a:96:5c:6e:74:df:41:51:04:15:e2:26:de:1e:0c:
79:ee:8f:bf:14:1c:51:ec:c2:81:3f:6b:17:c8:a7:
73:8a:2f:9b:12:a2:2c:f5:5d:14:03:33:1e:01:90:
45:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6F:D8:D7:58:DF:EF:76:77:A9:B9:36:8A:D9:B2:76:89:AF:51:FB
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.173.0/24
181.214.2.0/24
181.214.33.0/24
181.214.75.0/24
181.214.132.0/24
181.214.185.0/24
181.214.205.0/24
181.214.250.0/24
181.215.127.0/24
181.215.136.0/24
181.215.148.0/24
181.215.154.0/24
181.215.239.0/24
185.173.27.0/24
194.53.142.0/24
IPv6:
2a03:fbc0::/29
2a0e:1c00::/29
Signature Algorithm: sha256WithRSAEncryption
69:f9:e6:de:7a:9d:6f:a9:7a:ec:10:59:bd:a9:fd:c5:f4:1f:
81:f9:54:ff:81:6f:2d:4a:a3:3a:23:6e:f1:3f:95:3e:27:b2:
3c:9c:30:5f:19:b2:d8:3b:cb:0e:b8:1e:06:55:81:66:5f:67:
78:ef:99:a4:f9:25:45:38:ee:01:ae:59:10:d6:3c:f9:0d:ea:
be:26:7f:00:9a:0e:29:3e:60:84:fc:ec:38:2d:2d:74:7a:ac:
f3:6b:3e:1e:66:fc:3f:57:f2:fb:89:fa:5a:5d:c7:65:fa:20:
99:0e:0d:74:01:aa:c1:f9:86:a9:3e:e9:83:5d:03:1b:34:ec:
0c:a2:1b:95:0f:a8:93:54:c2:61:ea:de:2a:58:ca:ce:63:17:
6f:f1:b8:a2:33:cb:a7:d5:66:97:71:7c:63:f6:f4:f6:14:9d:
d4:64:38:9b:b2:8d:13:03:5d:6f:e2:71:6b:cb:df:6f:ed:8f:
9f:3f:86:d8:0d:b4:15:62:33:32:6b:20:c1:0d:4f:76:3c:5f:
49:14:c1:4b:6a:d6:d3:87:7c:95:8d:34:10:40:12:7a:92:d3:
14:94:c6:d8:d4:1f:58:1d:dd:17:74:24:ab:4f:49:0b:76:36:
6c:33:e3:bd:fb:2d:8e:e3:30:ae:85:b8:3e:0e:ca:5d:67:08:
ab:83:c2:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jul 19 16:39:24 2026 by rpki-client