Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: J6zLYGvFp5A+37wbQ2/kAW2ZqL4yE4XEDdiwpfMpAZM=
Subject key identifier: 8B:17:54:A5:B4:5C:64:6C:56:57:ED:5E:90:06:4B:49:1B:26:E7:02
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 62A76160CFF14896921C6573054253A28A1545A5
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152179.roa
Signing time: Mon 17 Aug 2026 09:10:03 +0000
ROA not before: Mon 17 Aug 2026 09:05:03 +0000
ROA not after: Mon 16 Aug 2027 09:10:03 +0000
asID: 152179
IP address blocks: 91.198.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:a7:61:60:cf:f1:48:96:92:1c:65:73:05:42:53:a2:8a:15:45:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Aug 17 09:05:03 2026 GMT
Not After : Aug 16 09:10:03 2027 GMT
Subject: CN=8B1754A5B45C646C5657ED5E90064B491B26E702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:1b:6d:1b:e9:30:f1:c6:9e:d5:0a:0f:55:
43:6b:a9:44:c4:7a:a7:28:58:c6:a4:b7:3c:7a:80:
11:cc:ef:b1:9f:c6:fd:00:61:d4:39:92:87:99:82:
f9:fa:ab:6c:6d:10:5b:f4:5a:2a:b9:f3:ad:bd:5f:
35:da:4e:63:c0:80:3f:77:c7:ba:3a:cd:73:4e:02:
1d:96:ed:6e:75:b8:60:cd:01:bd:2d:54:f2:dc:d1:
75:88:96:cc:01:76:b3:67:57:3f:d6:35:77:bf:aa:
fc:77:72:cc:d8:57:c4:c6:0d:06:99:3d:d6:39:01:
a5:5c:64:54:d1:a7:24:9f:ee:78:d7:9c:ce:97:db:
b8:b1:1e:d9:6f:b6:a5:1f:28:94:5e:0f:db:2b:44:
d1:ea:b0:72:99:cc:a5:b3:dd:84:e0:41:dc:da:da:
7d:88:c6:09:e9:14:33:55:52:68:6d:61:c2:ed:f6:
cd:e2:2d:fa:92:c7:b9:73:1d:9c:b1:77:3d:bd:a4:
e1:f6:b1:ee:ca:a5:5f:d5:04:8f:bd:8f:49:23:83:
a8:62:e5:c1:82:b3:04:13:7d:f4:56:76:fb:e2:f1:
66:24:ad:47:31:2c:0c:72:28:d5:0c:d5:e0:de:66:
5e:f6:d8:35:17:cd:ff:4b:a5:1f:64:88:e9:11:19:
52:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:17:54:A5:B4:5C:64:6C:56:57:ED:5E:90:06:4B:49:1B:26:E7:02
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.115.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:64:e4:a0:83:38:37:96:99:bb:4b:c5:0a:79:f9:89:28:7a:
1f:67:00:18:b2:86:45:19:42:9a:84:d0:78:43:b8:1f:c0:ee:
67:1e:a6:61:7b:7b:be:a2:9d:08:41:1f:3b:6d:35:32:19:4a:
c2:43:0d:8f:ee:a1:ab:9c:2d:58:14:b0:0b:59:5d:d5:74:66:
e8:80:73:25:fc:c9:3c:c2:fa:71:21:7f:0b:85:11:c4:37:15:
70:c6:a9:52:47:a6:b7:01:c0:43:5a:3f:e4:4e:9e:8b:27:f6:
e0:c9:5c:58:2c:86:25:1d:c9:ac:77:06:a4:86:08:a8:c8:b3:
e9:3d:3c:62:c7:a4:52:6c:3f:5e:d5:6e:dd:39:5f:36:e8:c1:
88:77:a3:0b:1c:27:56:77:e0:9c:ae:44:61:d9:cf:1e:a9:06:
1c:d3:1b:9c:cb:74:43:b9:7e:80:8d:29:94:a1:0d:93:93:cc:
7d:45:71:4c:b4:99:ae:18:1f:99:4c:b2:5e:5d:db:eb:9a:ad:
94:06:84:1a:ba:59:53:e4:f8:37:55:e7:47:64:21:89:51:c6:
cd:9d:7e:26:3d:ff:91:da:a6:0d:fb:5e:27:19:f2:33:38:21:
8c:51:a4:e7:42:49:2f:f6:50:86:30:75:75:31:f5:40:c0:49:
14:48:a5:f6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUYqdhYM/xSJaSHGVzBUJToooVRaUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNjA4MTcwOTA1MDNaFw0yNzA4MTYwOTEwMDNaMDMxMTAvBgNV
BAMTKDhCMTc1NEE1QjQ1QzY0NkM1NjU3RUQ1RTkwMDY0QjQ5MUIyNkU3MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcGRttG+kw8cae1QoPVUNrqUTE
eqcoWMaktzx6gBHM77Gfxv0AYdQ5koeZgvn6q2xtEFv0Wiq58629XzXaTmPAgD93
x7o6zXNOAh2W7W51uGDNAb0tVPLc0XWIlswBdrNnVz/WNXe/qvx3cszYV8TGDQaZ
PdY5AaVcZFTRpySf7njXnM6X27ixHtlvtqUfKJReD9srRNHqsHKZzKWz3YTgQdza
2n2IxgnpFDNVUmhtYcLt9s3iLfqSx7lzHZyxdz29pOH2se7KpV/VBI+9j0kjg6hi
5cGCswQTffRWdvvi8WYkrUcxLAxyKNUM1eDeZl722DUXzf9LpR9kiOkRGVIfAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUixdUpbRcZGxWV+1ekAZLSRsm5wIwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMTUyMTc5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8Zz
MA0GCSqGSIb3DQEBCwUAA4IBAQB+ZOSggzg3lpm7S8UKefmJKHofZwAYsoZFGUKa
hNB4Q7gfwO5nHqZhe3u+op0IQR87bTUyGUrCQw2P7qGrnC1YFLALWV3VdGbogHMl
/Mk8wvpxIX8LhRHENxVwxqlSR6a3AcBDWj/kTp6LJ/bgyVxYLIYlHcmsdwakhgio
yLPpPTxix6RSbD9e1W7dOV826MGId6MLHCdWd+CcrkRh2c8eqQYc0xucy3RDuX6A
jSmUoQ2Tk8x9RXFMtJmuGB+ZTLJeXdvrmq2UBoQaullT5Pg3VedHZCGJUcbNnX4m
Pf+R2qYN+14nGfIzOCGMUaTnQkkv9lCGMHV1MfVAwEkUSKX2
-----END CERTIFICATE-----
Generated at Fri Sep 4 15:21:35 2026 by rpki-client