Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152726.roa
File: AS152726.roa (raw, json)
Hash identifier: 4hSA7KzLGNjgDjIH5C9QV5cjdOacu3Ms6pfaxz7QQIQ=
Subject key identifier: 30:12:C1:7B:7F:F8:95:49:DC:C9:57:E4:D0:33:17:B2:03:B2:A2:43
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2872EDED0A123BFB54168242D97CC01412ED281D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152726.roa
Signing time: Sat 10 Oct 2026 11:32:54 +0000
ROA not before: Sat 10 Oct 2026 11:27:54 +0000
ROA not after: Sat 09 Oct 2027 11:32:54 +0000
asID: 152726
IP address blocks: 82.39.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:72:ed:ed:0a:12:3b:fb:54:16:82:42:d9:7c:c0:14:12:ed:28:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 10 11:27:54 2026 GMT
Not After : Oct 9 11:32:54 2027 GMT
Subject: CN=3012C17B7FF89549DCC957E4D03317B203B2A243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c8:da:93:f2:7e:1c:a8:c1:44:cd:d8:5c:3b:
b5:c4:51:49:12:29:34:65:d1:c7:cd:c0:c0:27:d6:
b7:d8:35:15:5b:2a:49:6a:d2:d9:7c:da:8c:34:07:
ef:06:cd:b0:21:dc:be:26:87:62:7b:1d:45:f6:7c:
8e:7c:fe:67:4b:da:57:70:83:49:db:bc:5a:a2:af:
27:0d:3c:63:f9:21:d7:8d:00:b2:d4:41:f5:24:00:
42:e3:71:75:7c:a7:73:c4:9b:9f:38:3e:7b:da:3b:
08:7a:b2:f9:10:28:3a:d4:23:27:37:cb:d4:8d:b9:
e8:2e:34:8a:2b:51:ea:00:a8:d6:7c:be:38:66:0a:
0a:57:69:c6:59:6c:fe:9a:50:bc:9b:47:4c:a7:2c:
ad:04:a5:b9:f0:2a:16:cb:fe:b2:fd:13:e5:5a:25:
7c:fc:80:ad:cd:f2:33:10:52:54:a2:e0:52:35:0b:
dd:9b:ae:df:d3:da:46:f8:4d:a7:c4:b8:ea:28:52:
5e:75:1c:36:b9:89:52:8d:86:a6:e9:35:17:f7:f0:
a5:ba:cd:e3:ce:ea:c0:b6:52:98:bc:4d:eb:0a:b3:
86:ab:03:c2:5e:ba:08:1f:fd:ce:17:ae:ad:41:d0:
d5:f2:61:14:9a:1b:61:0f:4e:b9:81:fc:a9:be:43:
65:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:12:C1:7B:7F:F8:95:49:DC:C9:57:E4:D0:33:17:B2:03:B2:A2:43
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152726.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.139.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:04:d0:14:9c:bc:4f:2d:38:b8:80:80:72:37:6a:ab:84:ab:
df:74:e5:8a:80:ec:7c:10:5c:8c:a9:95:c7:44:a0:34:0b:92:
63:07:48:da:d0:c8:9f:2d:2d:f8:91:75:3b:5c:b8:6f:9d:22:
b3:3a:7e:21:68:f7:5c:fd:d6:5a:3c:65:7e:e5:f5:a2:d9:b6:
76:a5:b3:f2:ff:4b:e9:22:b9:d7:03:28:4a:17:54:5c:21:12:
33:95:9b:87:ff:90:20:c3:7a:06:3b:06:fc:94:b6:6c:30:b0:
35:ee:51:c1:4b:b8:04:82:46:b2:6d:c8:45:1f:6d:76:3d:e4:
79:5c:82:27:fa:f1:16:5f:c8:9f:1f:b5:b8:7e:52:06:be:ac:
14:a5:e2:56:1d:48:4a:71:ab:6f:96:7c:57:4f:a1:be:0f:6f:
07:f9:ca:80:1c:de:87:7d:be:1d:36:5e:b7:23:9a:4b:ad:b1:
3b:6e:b0:d8:45:13:ca:46:bf:aa:c3:a4:5a:68:64:33:26:60:
1e:d5:a1:2b:e5:55:e2:d1:fc:0f:35:8a:90:e9:09:17:db:58:
ad:a6:eb:8f:b1:c6:1a:6a:fe:05:e9:34:91:9e:a3:dc:7d:2f:
bc:11:a8:4f:93:87:4e:4a:46:cb:0d:ab:ec:aa:be:7b:be:eb:
ff:75:f8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:41:35 2026 by rpki-client