Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152698.roa
File: AS152698.roa (raw, json)
Hash identifier: kKezz3iWmxi012gF4Hnp8c0sSvGJd8SdISrS8ks9iCQ=
Subject key identifier: ED:EA:91:D4:A4:3F:AF:FB:F2:68:0F:DD:9C:7F:40:CA:96:52:67:46
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 393AEB14686555004AFAA8251E85ACE9DBEC32FE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152698.roa
Signing time: Tue 25 Aug 2026 11:42:47 +0000
ROA not before: Tue 25 Aug 2026 11:37:47 +0000
ROA not after: Tue 24 Aug 2027 11:42:47 +0000
asID: 152698
IP address blocks: 82.39.128.0/24 maxlen: 24
82.39.129.0/24 maxlen: 24
82.47.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:3a:eb:14:68:65:55:00:4a:fa:a8:25:1e:85:ac:e9:db:ec:32:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 25 11:37:47 2026 GMT
Not After : Aug 24 11:42:47 2027 GMT
Subject: CN=EDEA91D4A43FAFFBF2680FDD9C7F40CA96526746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:67:dc:7b:c3:b0:67:f5:cd:38:63:92:bb:
83:91:ea:5c:fd:73:ec:9e:54:f9:80:d4:b1:a4:18:
4f:0d:0b:bc:4d:2e:db:be:29:ea:18:c4:ef:1e:d6:
d6:ba:8a:c8:87:19:29:93:35:45:31:3f:5b:13:45:
3d:14:9e:5b:94:c1:52:d3:60:4f:d1:de:66:42:fa:
cf:0e:2d:d4:a7:fa:c9:61:5d:ef:81:d6:7d:6b:9c:
cf:32:66:55:4c:c2:a7:d3:cb:14:f3:8b:32:60:c3:
f6:6f:de:1f:e3:bc:0e:3f:3c:5b:1d:dc:16:64:94:
9c:58:72:f4:c4:0d:69:59:03:4a:2a:2a:58:f2:8c:
19:fc:2b:a3:59:d4:38:1d:7a:f7:6d:68:56:57:65:
20:0c:e3:95:2c:3b:3d:ad:ab:22:92:c0:82:8f:c8:
dc:f1:e5:8a:e4:68:f9:d2:7f:bd:b7:07:82:e5:fb:
e4:b6:a3:97:9e:c9:38:c6:93:4b:a9:5e:15:4a:c8:
48:c7:e8:df:6d:11:80:0c:39:2f:12:ed:47:50:be:
56:f9:3d:9d:57:82:ba:b0:a6:b4:38:3a:f9:08:7e:
d1:c5:01:6b:7a:fa:19:1d:c8:38:a0:f6:67:56:66:
dd:c7:06:e8:b3:d9:05:e1:7a:0c:de:db:d5:b8:de:
c0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:EA:91:D4:A4:3F:AF:FB:F2:68:0F:DD:9C:7F:40:CA:96:52:67:46
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152698.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.128.0/23
82.47.31.0/24
Signature Algorithm: sha256WithRSAEncryption
37:ec:b8:4f:8b:20:6b:27:57:81:ad:31:40:22:ec:cc:7a:6f:
8e:67:54:88:02:3e:ae:83:c6:fe:3f:64:c9:40:6d:89:a5:37:
bb:83:71:7d:fd:0a:85:35:57:8e:e2:53:fd:df:58:cf:d1:3f:
b3:a2:8c:54:11:1d:fc:82:dc:b1:46:e7:9e:ca:01:81:44:8a:
36:8c:40:e2:45:9d:43:cc:80:79:b0:d4:70:35:ff:3d:72:7f:
04:78:3c:52:fc:c6:ee:3b:d3:c2:0c:ad:bf:44:93:14:6e:f0:
aa:80:66:3a:52:0a:32:8d:f1:92:68:a5:08:5f:f5:f9:28:3e:
7c:e9:02:8d:c6:5a:b2:0a:d8:39:d9:5d:23:0f:00:74:92:a2:
19:34:95:c9:e8:21:54:28:4b:9c:4b:40:85:82:ee:d5:b1:a6:
82:6b:23:37:2d:2c:80:34:8b:32:ce:f3:c1:df:38:e3:08:6a:
9b:b7:29:a4:3b:d5:e7:77:db:55:8c:ce:1a:32:7a:2d:b1:15:
f4:4d:57:42:97:17:62:40:49:d8:26:bc:2e:9a:a4:f2:3c:47:
25:01:05:a3:36:4f:c2:ec:93:3d:39:e2:32:fb:65:51:1d:5d:
5f:d4:04:85:61:1a:05:b6:24:04:66:c8:b2:cf:d5:bb:3c:b4:
3a:4e:72:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:30:30 2026 by rpki-client