Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152726.roa
File: AS152726.roa (raw, json)
Hash identifier: ByejBQ5Szd3FXUesw2609zFsRMxOc2oXhZ1zUEv0dE4=
Subject key identifier: DC:F8:B4:77:D7:40:68:CB:28:85:D4:2A:E8:95:48:D7:59:2C:42:5C
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6F716570AF7A820F328E43D98F3B8DD24187EFE6
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152726.roa
Signing time: Tue 13 Oct 2026 11:14:38 +0000
ROA not before: Tue 13 Oct 2026 11:09:38 +0000
ROA not after: Tue 12 Oct 2027 11:14:38 +0000
asID: 152726
IP address blocks: 45.89.253.0/24 maxlen: 24
45.93.44.0/24 maxlen: 24
45.95.22.0/24 maxlen: 24
45.133.172.0/24 maxlen: 24
89.19.49.0/24 maxlen: 24
92.118.162.0/24 maxlen: 24
92.119.34.0/24 maxlen: 24
92.242.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:71:65:70:af:7a:82:0f:32:8e:43:d9:8f:3b:8d:d2:41:87:ef:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 13 11:09:38 2026 GMT
Not After : Oct 12 11:14:38 2027 GMT
Subject: CN=DCF8B477D74068CB2885D42AE89548D7592C425C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:95:0f:b5:b7:63:d6:78:40:03:3d:2b:ca:
61:61:b9:cc:f5:9a:64:6b:81:1d:1f:de:26:68:7a:
3b:4b:62:7b:b8:41:f2:28:50:ac:38:c6:33:72:96:
51:dc:23:76:1e:aa:ad:6d:21:ef:56:d9:e4:47:f6:
7b:c6:7a:e4:66:25:6b:de:d3:91:ec:fd:e0:82:df:
10:af:00:a3:6a:f5:0a:be:b8:d2:36:89:57:58:32:
9b:a7:a8:03:59:a2:8a:1f:7f:a0:fd:80:e3:db:fc:
a6:12:38:22:cb:f0:ba:83:99:bd:57:b4:d9:de:a8:
ed:b8:1d:13:1e:51:b3:78:07:e4:47:c9:24:27:21:
7e:6f:fd:6c:fb:13:20:0c:f2:be:1f:eb:c8:0a:91:
19:11:09:44:b7:61:5e:b6:06:8a:b7:9e:68:f2:1e:
93:2c:75:e0:ea:ae:94:5c:ba:37:f9:28:81:e0:a7:
ee:5d:f4:3c:94:a2:13:8d:b7:fd:a6:35:b5:10:06:
49:cc:3f:aa:8b:8d:85:41:97:08:2a:7a:99:95:7f:
59:95:80:ed:49:72:4b:e5:87:21:57:85:27:50:e8:
43:68:61:6d:65:29:e3:a2:ca:43:bb:f9:3b:1a:2b:
c1:0b:31:b3:ea:6e:43:38:95:b7:72:95:22:4b:a5:
c8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F8:B4:77:D7:40:68:CB:28:85:D4:2A:E8:95:48:D7:59:2C:42:5C
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152726.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.253.0/24
45.93.44.0/24
45.95.22.0/24
45.133.172.0/24
89.19.49.0/24
92.118.162.0/24
92.119.34.0/24
92.242.184.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:67:1a:b4:2f:8a:e8:5f:4e:b7:a4:1d:ee:a7:73:90:a8:5c:
e6:86:1f:22:1b:3e:ba:58:b8:88:ac:bd:c7:49:3a:6a:7f:eb:
4b:44:c7:7d:2b:cf:a7:d4:d9:5a:96:d3:84:c0:d2:fb:01:73:
df:bc:c3:b9:33:04:e2:7a:79:ff:6c:7e:bd:a0:99:c8:ac:10:
ef:9a:1e:a5:a6:89:29:db:65:6a:1d:5d:55:41:ed:e1:dd:2b:
7b:65:a2:dd:8c:6e:cc:43:fa:85:39:a9:9a:71:ab:3f:06:e8:
fd:30:29:ed:61:70:9c:0e:30:8d:2c:be:38:89:65:66:81:cf:
e0:42:a6:53:7b:67:8c:0c:da:33:15:d2:3d:24:cd:ee:83:80:
4c:f2:65:18:b0:71:ac:f3:7c:57:50:4a:bf:20:5c:82:86:d4:
c3:7a:cd:f7:14:7a:6f:90:30:34:f2:ce:12:d4:0e:04:66:49:
23:f8:11:d4:75:12:47:ac:bc:7d:4b:7e:77:ba:89:a0:f5:be:
35:3e:67:2d:cf:5c:eb:ba:47:34:cf:ff:ff:36:2c:b9:af:78:
79:a5:87:f3:f9:ef:7f:73:dc:67:a4:f7:2d:96:58:b6:47:46:
b5:27:3d:54:ef:07:74:47:da:01:3c:86:f9:2e:04:28:ef:23:
50:fd:1e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:14:44 2026 by rpki-client