Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS152868.roa
File: AS152868.roa (raw, json)
Hash identifier: GrO2pd/g85FxsiUY0YyMrr9h9RBsiagjDuy529rR0Ps=
Subject key identifier: 1A:DC:5C:ED:6A:F0:B9:02:52:BD:3B:35:AC:A9:03:C6:AD:A2:4F:54
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 3A4C8A7D0C954793E20780EF1294DA59E45A3D96
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS152868.roa
Signing time: Sun 23 Aug 2026 17:05:32 +0000
ROA not before: Sun 23 Aug 2026 17:00:32 +0000
ROA not after: Sun 22 Aug 2027 17:05:32 +0000
asID: 152868
IP address blocks: 201.4.29.0/24 maxlen: 24
201.50.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:4c:8a:7d:0c:95:47:93:e2:07:80:ef:12:94:da:59:e4:5a:3d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Aug 23 17:00:32 2026 GMT
Not After : Aug 22 17:05:32 2027 GMT
Subject: CN=1ADC5CED6AF0B90252BD3B35ACA903C6ADA24F54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c9:de:49:3a:b4:ba:43:8a:6d:fc:90:eb:33:
67:e4:4d:57:09:d0:fb:9c:0a:c4:4d:5f:50:c9:3c:
88:fd:5f:1a:da:22:78:72:15:b3:cd:b0:28:47:c2:
8c:f9:5d:a2:d6:b9:d8:45:e3:fa:a4:0b:11:4e:51:
f8:47:7f:bd:67:3c:30:45:61:68:1a:aa:13:38:d1:
49:8e:34:a5:c8:57:54:83:2c:d6:ee:84:4d:0c:66:
87:0a:2c:e2:e6:98:a5:61:bf:d6:b8:cd:77:cb:77:
aa:16:7d:8c:94:f7:83:68:c7:8d:f6:1c:9d:02:e9:
3a:b3:4d:00:00:9c:e3:3a:22:b3:ab:ef:d3:81:44:
7c:e6:b6:1b:ed:4b:b9:ce:b7:e9:8c:a7:39:a6:eb:
3d:f6:e7:5d:66:c0:e7:73:cc:e4:2f:87:f0:43:f2:
14:fe:aa:74:f9:d6:f2:1a:88:f3:30:20:e9:ba:a8:
7b:1f:74:67:c5:21:4d:6b:75:78:ef:4a:ce:0f:4b:
e9:61:68:18:51:3c:93:d7:8b:fe:00:15:c5:42:d1:
ce:7c:47:c9:1e:c1:a4:c0:6e:f3:4d:b6:4b:fa:b7:
ac:c4:02:bd:88:4d:24:74:6c:74:4f:ac:8a:9d:48:
49:e2:3a:72:a8:81:07:87:5e:90:74:88:cd:ad:27:
39:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DC:5C:ED:6A:F0:B9:02:52:BD:3B:35:AC:A9:03:C6:AD:A2:4F:54
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS152868.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.29.0/24
201.50.30.0/24
Signature Algorithm: sha256WithRSAEncryption
12:8f:fb:7e:23:ce:06:08:48:21:d3:5f:e8:67:02:3c:2e:d5:
5d:01:00:b5:b4:a5:88:06:10:83:95:8d:60:d9:c7:0d:3b:6a:
a7:6e:02:3f:d3:59:37:d5:ea:b4:19:fe:a7:89:a7:62:3b:3d:
75:cb:8b:3e:f2:1a:83:6d:e5:9a:70:5c:70:83:3d:44:49:94:
fe:fe:8c:83:f9:ea:4a:be:4c:d4:70:e3:81:27:95:72:f0:20:
06:96:82:d2:9e:36:bb:ec:9b:aa:c3:99:06:b0:31:6d:46:59:
52:65:ad:2b:26:ab:c3:f9:30:70:50:3c:47:1b:d3:45:53:8b:
49:3e:ad:bb:fd:00:97:6c:b5:31:30:8f:3b:34:24:7c:4a:42:
a8:e3:ce:71:38:cb:7b:da:22:33:7c:1c:15:71:ea:07:e0:8d:
f7:c7:a6:d6:29:28:77:ad:b1:cc:3e:55:ac:7d:9c:4d:1d:87:
b6:a6:2a:57:c5:2f:2b:28:e7:12:18:44:40:4e:6d:74:44:82:
1c:bd:8c:a4:3a:03:3f:09:e2:f9:5c:16:6e:72:0b:87:3b:5f:
9c:ce:95:c8:77:ff:d4:df:51:69:f4:47:cb:34:2d:7a:e7:f3:
bb:4f:b6:ca:70:79:6e:10:92:74:78:27:34:61:65:31:df:f0:
8b:24:2f:6d
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUOkyKfQyVR5PiB4DvEpTaWeRaPZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA4MjMxNzAwMzJaFw0yNzA4MjIxNzA1MzJaMDMxMTAvBgNV
BAMTKDFBREM1Q0VENkFGMEI5MDI1MkJEM0IzNUFDQTkwM0M2QURBMjRGNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUyd5JOrS6Q4pt/JDrM2fkTVcJ
0PucCsRNX1DJPIj9XxraInhyFbPNsChHwoz5XaLWudhF4/qkCxFOUfhHf71nPDBF
YWgaqhM40UmONKXIV1SDLNbuhE0MZocKLOLmmKVhv9a4zXfLd6oWfYyU94Nox432
HJ0C6TqzTQAAnOM6IrOr79OBRHzmthvtS7nOt+mMpzmm6z32511mwOdzzOQvh/BD
8hT+qnT51vIaiPMwIOm6qHsfdGfFIU1rdXjvSs4PS+lhaBhRPJPXi/4AFcVC0c58
R8kewaTAbvNNtkv6t6zEAr2ITSR0bHRPrIqdSEniOnKogQeHXpB0iM2tJzm/AgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUGtxc7WrwuQJSvTs1rKkDxq2iT1QwHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcyNjk0NWVhLTA3Yjkt
NDI4Yy1hZjc0LTk2MTQ5ZTg5MTg4NC8wL0FTMTUyODY4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAyQQd
AwQAyTIeMA0GCSqGSIb3DQEBCwUAA4IBAQASj/t+I84GCEgh01/oZwI8LtVdAQC1
tKWIBhCDlY1g2ccNO2qnbgI/01k31eq0Gf6niadiOz11y4s+8hqDbeWacFxwgz1E
SZT+/oyD+epKvkzUcOOBJ5Vy8CAGloLSnja77Juqw5kGsDFtRllSZa0rJqvD+TBw
UDxHG9NFU4tJPq27/QCXbLUxMI87NCR8SkKo485xOMt72iIzfBwVceoH4I33x6bW
KSh3rbHMPlWsfZxNHYe2pipXxS8rKOcSGERATm10RIIcvYykOgM/CeL5XBZucguH
O1+czpXId//U31Fp9EfLNC165/O7T7bKcHluEJJ0eCc0YWUx3/CLJC9t
-----END CERTIFICATE-----
Generated at Wed Aug 26 20:33:12 2026 by rpki-client