Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152698.roa
File: AS152698.roa (raw, json)
Hash identifier: 5ZNv9isbd3ecMUd8BhcIrD7L/6ZQjSPln2FJDP1EZ8A=
Subject key identifier: 95:10:FA:69:58:E5:09:02:C6:09:52:78:49:64:09:86:D9:62:A9:24
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 4492C9710747AFBB03A4E1684D99C7D2C3228560
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152698.roa
Signing time: Tue 25 Aug 2026 11:42:49 +0000
ROA not before: Tue 25 Aug 2026 11:37:49 +0000
ROA not after: Tue 24 Aug 2027 11:42:49 +0000
asID: 152698
IP address blocks: 179.61.134.0/24 maxlen: 24
181.41.195.0/24 maxlen: 24
181.214.4.0/24 maxlen: 24
191.96.103.0/24 maxlen: 24
191.96.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:92:c9:71:07:47:af:bb:03:a4:e1:68:4d:99:c7:d2:c3:22:85:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 25 11:37:49 2026 GMT
Not After : Aug 24 11:42:49 2027 GMT
Subject: CN=9510FA6958E50902C609527849640986D962A924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a2:f3:bd:4d:3d:67:5d:2a:14:71:38:8f:a6:
41:5d:a7:59:fe:9c:f9:14:13:be:57:d0:41:3a:22:
1b:0a:a4:80:20:be:e7:00:2c:a4:bc:55:1d:6a:e3:
33:ac:a5:1b:cb:e3:d8:40:b4:e5:d7:57:59:c2:e0:
49:d5:1a:4b:ef:0e:4b:56:b9:55:7c:87:67:db:b8:
3b:b2:78:b5:15:1f:89:a6:c5:d9:ca:34:ff:6f:fc:
f1:75:5b:0a:08:ea:84:38:e0:50:a0:4c:3b:11:6b:
3d:34:0d:d5:11:d9:38:8b:34:ef:7f:b3:c4:be:b6:
0c:dd:7c:a1:9a:94:a6:90:38:42:2c:79:b0:2d:46:
20:bb:48:00:d5:90:81:35:8d:8f:67:41:89:ea:39:
01:ab:8f:e9:56:c9:f8:43:d9:35:7e:46:a8:b1:5a:
92:ab:9e:e6:8c:bf:df:d3:6c:16:65:81:fc:3c:d2:
2e:ca:f9:e7:17:64:03:38:ab:7e:87:71:cf:2f:9f:
02:d5:e7:78:d1:1e:8e:c7:96:5e:8c:3f:76:1c:3b:
e3:a1:44:87:e3:5e:86:69:14:6b:d0:fc:1d:ae:71:
50:4a:b1:c8:33:0b:e9:ae:25:a7:ae:fe:6f:e4:43:
c9:a0:ab:3e:3c:b4:a3:c5:1b:f0:27:a6:d2:76:7e:
d7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:10:FA:69:58:E5:09:02:C6:09:52:78:49:64:09:86:D9:62:A9:24
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152698.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.134.0/24
181.41.195.0/24
181.214.4.0/24
191.96.103.0/24
191.96.134.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:f8:34:a6:b1:a6:0f:a5:c3:35:7d:e0:05:7c:38:4c:0b:30:
ac:eb:94:55:a1:a8:8d:1d:b6:72:47:7c:ec:f3:19:c4:6f:52:
1b:ed:b9:8f:2a:6f:1e:c0:70:dc:1a:09:68:8f:81:b9:e6:4c:
20:a3:11:59:40:2f:64:d4:7a:28:09:7e:bf:83:7c:90:d9:fd:
f8:bf:66:d7:ad:15:8d:c6:03:da:fb:4a:f1:fe:bf:43:74:bc:
12:7a:15:79:99:45:40:be:04:80:65:c9:99:4c:cf:50:54:39:
7c:d2:e9:aa:03:18:48:a0:5d:73:0f:49:81:ed:fb:0f:76:ce:
cd:30:24:bb:05:eb:71:f6:96:64:33:ad:ca:3d:27:58:1a:27:
b6:a4:05:56:7b:29:a1:e4:83:61:b9:a9:de:6a:e1:36:8a:77:
5d:9b:1c:ac:20:2f:bd:b3:6c:ab:ab:da:e4:68:95:d6:d7:ea:
68:b0:d4:34:3d:e8:84:db:b5:8e:d8:b3:fc:9b:80:41:a6:13:
84:74:1f:fa:0f:88:b3:eb:cb:d8:fb:cf:89:0f:a2:88:7d:40:
49:70:b8:33:84:3b:84:70:dd:41:9f:a7:86:b1:d9:4b:c1:20:
e7:eb:1e:2a:e8:1a:62:65:03:2e:fb:15:fc:eb:31:2a:ea:4c:
d8:30:ae:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:12:45 2026 by rpki-client