Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152868.roa
File: AS152868.roa (raw, json)
Hash identifier: yJXu/XCG+kq5AWyZFvsj/ClUceYxAw3gv83qg7lcye0=
Subject key identifier: F4:29:F2:28:E3:99:E7:59:96:BD:7D:CD:6F:FE:A4:20:98:D6:FC:6C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 53A6FC8D2AAC064C397F3ABC16432B8352F1C9A6
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152868.roa
Signing time: Fri 14 Aug 2026 12:12:24 +0000
ROA not before: Fri 14 Aug 2026 12:07:24 +0000
ROA not after: Fri 13 Aug 2027 12:12:24 +0000
asID: 152868
IP address blocks: 82.41.236.0/24 maxlen: 24
82.47.126.0/24 maxlen: 24
82.47.185.0/24 maxlen: 24
178.83.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a6:fc:8d:2a:ac:06:4c:39:7f:3a:bc:16:43:2b:83:52:f1:c9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 14 12:07:24 2026 GMT
Not After : Aug 13 12:12:24 2027 GMT
Subject: CN=F429F228E399E75996BD7DCD6FFEA42098D6FC6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:59:7b:39:92:b4:c4:1b:5e:bb:31:aa:8d:26:
bd:7d:5f:47:ee:15:ad:77:64:b8:ec:c5:9b:4b:a2:
aa:12:14:20:67:1d:6b:7c:d9:8d:4b:20:af:9c:71:
11:c6:a5:73:bd:fc:c4:07:3d:cf:ab:4f:79:ce:36:
58:95:da:16:65:83:43:a7:5b:29:63:40:af:b1:83:
a5:24:76:8a:0f:9c:ab:9e:77:b0:a8:85:71:9b:9a:
d3:c6:22:04:11:c8:54:8d:13:ad:7f:d5:c1:59:af:
1b:7a:af:5e:cd:7d:9e:db:55:d3:a2:4a:82:e8:1a:
a5:22:19:2f:0c:e4:b5:0d:b4:c4:76:db:7f:e0:b2:
45:6a:3f:e2:27:a8:cd:a4:64:59:4d:e6:c6:86:af:
b0:a0:7f:b6:b3:cf:0d:34:ca:2e:53:66:5c:60:95:
9e:13:73:20:f1:37:9e:57:c0:6a:d9:93:ea:b6:97:
b1:a5:a5:05:1a:b3:20:54:b4:5e:53:30:8a:2c:3c:
fc:6a:bf:e7:73:bf:07:b1:af:10:a5:c8:57:7b:0b:
a2:2d:67:3d:95:e5:59:36:45:4c:56:57:77:6c:45:
2b:4b:f5:e4:c6:4d:3b:c0:1a:99:a0:e5:00:00:da:
28:a1:94:17:99:e0:0e:1f:c4:89:84:a0:ee:54:4d:
38:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:29:F2:28:E3:99:E7:59:96:BD:7D:CD:6F:FE:A4:20:98:D6:FC:6C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS152868.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.236.0/24
82.47.126.0/24
82.47.185.0/24
178.83.128.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:f5:00:26:f3:36:40:4f:47:e8:ec:0d:44:5c:66:58:14:14:
2b:5a:21:41:aa:22:64:6c:fc:d5:25:73:75:95:2c:36:c5:9d:
a4:e3:ea:70:70:76:2b:58:ea:47:2d:9e:2b:68:2b:9c:db:a3:
ea:14:0a:c0:ab:bf:e8:7f:ca:d2:66:ed:62:f1:8e:5f:9e:36:
00:b9:a4:58:4d:72:b9:ec:68:c1:41:85:b4:72:f0:25:7a:8b:
81:92:54:cc:3f:db:00:24:b7:e6:dd:50:06:86:7a:af:b5:65:
07:77:10:8a:19:7e:bb:f3:1a:ca:35:3e:c1:aa:43:cc:b2:30:
64:6a:d2:e3:3a:30:40:47:8b:23:f8:0a:60:ce:b5:4c:0d:b1:
92:8f:85:bf:36:93:24:44:e9:8b:a7:c0:67:f6:56:ad:8f:48:
7a:fa:1f:2b:3f:a5:fd:36:5a:66:d9:d1:36:8d:cc:c3:53:97:
84:d2:4e:07:f4:40:06:df:7d:f4:e5:6b:83:f7:58:18:af:58:
86:71:fb:17:46:db:f4:b6:ec:0c:fd:94:a5:1d:4b:67:c7:3b:
a6:08:ae:bf:d6:28:2f:84:f2:26:8e:14:c5:2e:be:19:61:bc:
e1:4d:1a:f8:5e:6c:b9:78:e1:d8:e6:30:7a:44:19:05:8c:c5:
43:fd:d0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:17:46 2026 by rpki-client