Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: nCvUYqDceDpWuJDa8/r+zEGSnkyllmG4rGrk4OBCo+4=
Subject key identifier: D3:5E:E4:30:2A:4A:02:31:69:AB:B5:7C:5D:9D:A4:1B:3A:05:E3:2F
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 29E1E2E70AE4C81CDB0DE42E6160D6C92BCAEC80
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152179.roa
Signing time: Wed 08 Jul 2026 03:52:49 +0000
ROA not before: Wed 08 Jul 2026 03:47:49 +0000
ROA not after: Wed 07 Jul 2027 03:52:49 +0000
asID: 152179
IP address blocks: 193.164.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:e1:e2:e7:0a:e4:c8:1c:db:0d:e4:2e:61:60:d6:c9:2b:ca:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 8 03:47:49 2026 GMT
Not After : Jul 7 03:52:49 2027 GMT
Subject: CN=D35EE4302A4A023169ABB57C5D9DA41B3A05E32F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4b:d4:5a:bb:aa:3b:55:8f:2c:e4:d6:b6:0e:
79:5f:b4:2f:72:b1:5a:45:fa:1b:32:e7:28:b2:ac:
bf:e5:e2:de:23:0a:2e:7d:d8:eb:3c:df:e2:e4:f7:
25:19:bb:cd:11:1e:25:6d:b3:57:6d:5a:3d:a4:cc:
55:87:78:9a:88:37:23:cc:d3:fd:56:28:8f:f1:cf:
bc:ee:67:9b:32:12:56:0c:36:4c:0b:d8:7f:28:83:
12:a5:08:d8:82:56:12:9d:48:6c:a3:7f:1a:c6:f7:
91:8a:ed:e1:93:f6:b3:fa:4e:48:6e:11:4f:03:6c:
0a:1d:ef:37:72:cb:10:91:65:c9:dd:d6:29:b5:4d:
ee:dd:ad:18:5d:da:d5:73:c5:7b:41:2f:d3:3b:47:
3b:f3:b5:97:8d:da:1f:8a:c2:6f:2b:45:d5:6d:5e:
a8:c6:44:6b:e4:3b:d3:a5:28:5d:0f:45:c8:d7:e3:
1f:a6:97:c7:c4:37:78:ce:b7:6b:ae:bb:6d:20:7a:
3d:c6:77:ec:dc:f5:42:f3:31:1b:ed:f7:c8:7c:e9:
05:49:15:ee:03:34:7c:35:55:56:40:86:e7:34:9f:
5d:96:b7:fd:4f:48:20:75:1e:00:08:fe:a6:3f:db:
31:d2:4b:71:ce:20:a7:93:f6:6a:7f:84:61:86:87:
c0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5E:E4:30:2A:4A:02:31:69:AB:B5:7C:5D:9D:A4:1B:3A:05:E3:2F
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.1.0/24
Signature Algorithm: sha256WithRSAEncryption
96:4b:e4:61:0a:a7:cb:3d:87:c9:ff:1f:90:35:40:df:4f:ec:
4c:51:2a:7f:8f:b5:72:33:48:e4:c5:79:3c:f1:53:f3:69:2a:
da:d4:9a:3a:5d:05:81:f7:84:dc:80:ba:1c:f2:71:f0:f1:8b:
b3:18:a7:60:55:24:cc:65:aa:00:a2:8d:1b:22:11:e7:fd:2c:
cc:45:8b:41:ca:b8:92:98:25:18:1a:5c:5a:14:03:77:dd:ae:
b7:d1:76:2c:1b:5d:28:f0:75:6c:49:de:1a:17:6c:61:82:14:
96:60:82:71:88:40:c6:8d:58:e6:d0:22:98:d8:84:4e:27:73:
74:43:44:3b:7e:57:75:64:cf:ab:97:7d:0b:ff:fc:75:4f:fe:
f7:9a:e1:b8:06:6d:65:ed:cf:43:03:42:07:3e:6e:10:12:0f:
45:62:01:02:0b:ef:bb:35:17:13:c8:7a:1a:58:fe:18:b4:e9:
c5:d6:f3:0c:81:93:a9:9d:6c:f6:92:19:0f:4d:96:6a:e3:8b:
28:3a:0f:57:04:5b:2c:31:14:1e:83:20:27:67:c2:47:87:ea:
5c:99:5f:62:64:c5:e3:94:51:17:df:e7:06:eb:86:9b:57:4a:
ca:ea:12:a1:15:8d:50:28:cc:93:78:cc:f6:b3:e0:2c:3f:91:
89:2c:7d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:40:01 2026 by rpki-client