Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152868.roa
File: AS152868.roa (raw, json)
Hash identifier: uDvDJWL3HsynE2LObjo2xxkbXCZDUeAuFeQB0b4sx4Y=
Subject key identifier: FB:65:4E:DA:3D:21:27:43:62:C8:1C:59:AA:05:51:3B:C9:31:82:82
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2684BE80F362460EC23D884BD37C4365D047FBA2
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152868.roa
Signing time: Fri 14 Aug 2026 12:26:41 +0000
ROA not before: Fri 14 Aug 2026 12:21:41 +0000
ROA not after: Fri 13 Aug 2027 12:26:41 +0000
asID: 152868
IP address blocks: 191.96.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 10:38:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:84:be:80:f3:62:46:0e:c2:3d:88:4b:d3:7c:43:65:d0:47:fb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 14 12:21:41 2026 GMT
Not After : Aug 13 12:26:41 2027 GMT
Subject: CN=FB654EDA3D21274362C81C59AA05513BC9318282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:a0:0f:70:db:25:c9:49:d1:bf:02:00:b9:
64:40:ca:06:ab:30:66:b1:8f:9c:f8:cc:5f:83:5e:
cb:03:1a:d4:8c:e0:41:89:9c:ab:bd:e0:83:e7:89:
cf:5d:73:f8:3e:40:99:9e:49:6a:d9:c3:38:6b:cb:
f2:49:f8:24:d0:a1:6c:19:02:c1:51:81:cd:62:68:
c8:81:c1:9e:c8:09:1e:ea:ef:0c:22:ed:3c:e1:cd:
22:d7:f0:2c:05:be:7a:b5:87:64:a7:4a:38:1e:e6:
08:64:0a:83:72:41:88:cc:0f:d3:ce:e5:cf:96:58:
fd:f3:98:0e:22:d0:63:ea:32:a6:f1:2f:d6:08:e9:
d9:67:6b:de:ce:b7:b2:f5:27:08:f2:53:ab:e7:1a:
e3:70:f7:e9:a7:88:b4:ef:72:3c:3f:55:9c:3b:5b:
ba:dd:9b:1c:98:72:2a:5d:09:60:b1:56:02:12:0e:
b1:e8:ac:c2:e3:66:72:35:3a:a4:8e:f0:ec:1c:40:
50:6d:45:bf:50:68:12:ab:ec:0e:96:ab:f9:b2:d9:
95:c9:52:b1:7f:18:0a:19:d3:90:94:00:26:18:95:
bf:0b:1c:cb:4d:1b:c7:04:af:1f:93:4f:f9:a2:c5:
6d:5c:e2:32:4d:71:2c:2d:c3:d6:3a:e4:be:f6:74:
9c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:65:4E:DA:3D:21:27:43:62:C8:1C:59:AA:05:51:3B:C9:31:82:82
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152868.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.207.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:6d:96:26:e1:eb:98:6e:b5:f6:36:d6:54:d8:2f:6e:7d:82:
a0:77:88:db:2e:bb:12:8e:af:1e:1f:c6:33:e0:e9:0c:fb:13:
09:41:60:5f:33:0a:a8:05:08:c2:1c:57:b6:5d:7b:1c:8a:35:
d6:cb:0e:4e:89:4c:80:98:58:84:c6:2a:58:c8:51:ce:a1:91:
2a:e3:55:da:db:4f:93:52:b2:1c:b7:a7:53:c6:7b:48:b2:b0:
04:d2:14:b5:05:8b:f3:17:ed:92:f1:9b:5f:0f:bd:52:38:86:
0f:42:98:03:40:4a:9e:06:a1:90:63:6a:0d:58:77:ca:c8:5f:
ed:7e:fa:ac:34:4e:be:9e:a2:1a:fa:5e:f2:95:80:58:6a:14:
70:a8:c8:4f:ed:a0:49:f9:b7:1d:37:6a:06:fe:a4:5f:c0:c0:
de:71:e0:8a:35:32:6c:72:95:61:06:c2:95:ee:68:f4:eb:00:
90:f9:6f:b5:0c:50:76:11:d2:04:a0:2e:f8:5b:a4:f5:e3:44:
03:27:29:17:58:3e:59:d4:a9:0b:32:9c:2d:e5:6f:46:31:43:
cc:04:3d:d2:19:96:77:57:e2:ed:c4:95:05:c5:79:9b:96:d3:
7d:d9:eb:47:7f:e4:1b:fd:02:45:d1:47:35:a7:b8:84:d0:f3:
2b:6d:30:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:33 2026 by rpki-client