Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152672.roa
File: AS152672.roa (raw, json)
Hash identifier: SvNsQHPmWds0TUExiew7U38EQEmH6ApRxqlkZ9ECXko=
Subject key identifier: FF:C9:52:F7:E9:79:F9:D0:BE:3D:61:27:73:C3:2A:EF:C7:E0:9E:B3
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 40083E766E69C0F2CAD847F13B54D9BEAF9B0565
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152672.roa
Signing time: Fri 28 Aug 2026 00:02:10 +0000
ROA not before: Thu 27 Aug 2026 23:57:10 +0000
ROA not after: Fri 27 Aug 2027 00:02:10 +0000
asID: 152672
IP address blocks: 45.146.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 19:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:08:3e:76:6e:69:c0:f2:ca:d8:47:f1:3b:54:d9:be:af:9b:05:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Aug 27 23:57:10 2026 GMT
Not After : Aug 27 00:02:10 2027 GMT
Subject: CN=FFC952F7E979F9D0BE3D612773C32AEFC7E09EB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:83:ef:10:4e:a2:b0:03:b8:b7:e8:e4:dd:
fa:4e:78:4a:28:d8:cf:2b:7f:d1:2d:24:2e:f5:17:
ed:34:4b:ef:3e:23:d7:4d:60:52:02:ad:65:72:c4:
17:83:8d:7a:3e:d3:95:1c:cf:1f:2d:33:5b:81:5c:
d0:31:33:c1:0c:cd:75:06:c8:34:8a:76:27:24:89:
9b:8b:0d:05:e2:9e:5d:13:e0:25:06:f5:19:fe:f7:
82:f8:10:af:ae:79:a4:f0:6c:03:2c:70:2d:e0:80:
16:a7:e9:27:80:11:90:30:b3:0a:42:af:b2:69:89:
64:1c:eb:9d:c9:62:5e:ad:d6:9f:b0:bf:fd:09:3d:
2d:e5:f7:33:39:a4:5c:c8:6e:c0:05:09:32:0f:73:
9c:d4:3c:23:65:d9:5f:b2:28:bf:68:f6:57:a5:cc:
bb:a4:f5:f8:be:f4:87:f6:5b:64:6a:48:62:e0:8c:
a5:a0:4a:79:cc:3a:3b:1f:b3:54:1f:75:1b:d2:46:
86:c9:e6:0b:3f:89:e4:ea:8b:ad:8b:7d:2d:b3:6d:
c2:5f:e3:2b:0e:bd:af:4a:ec:7b:11:26:1a:fd:b7:
f3:60:9b:15:bc:3d:c4:3c:76:96:7e:f0:71:ce:7b:
38:c3:81:89:3a:99:38:10:ba:b9:fa:13:92:fc:76:
9a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C9:52:F7:E9:79:F9:D0:BE:3D:61:27:73:C3:2A:EF:C7:E0:9E:B3
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152672.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.82.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ab:f6:a4:b7:a4:c7:18:6d:ea:85:88:31:77:8f:b6:07:d8:
9c:5b:4f:e7:dd:38:3a:d3:b2:76:ad:12:ee:bd:14:9a:08:f2:
a7:01:65:34:77:e8:25:1f:7e:7c:c3:56:00:92:75:ea:51:f6:
c8:9c:04:6e:ab:ee:13:ce:8e:b8:e4:81:4a:13:81:cf:d0:1f:
cf:ff:9c:a2:1b:47:65:40:de:ce:b1:eb:09:cb:d9:f2:a2:6f:
34:6e:5a:c8:e0:31:e0:5b:a4:3c:1b:f4:e7:73:3a:97:42:76:
39:39:38:33:d6:a8:f0:20:b0:b5:db:94:92:d1:a3:cb:af:53:
b8:f0:25:2b:a2:24:34:04:89:00:3b:f5:4a:b1:9e:9a:e6:11:
54:3b:e0:fb:a7:ae:1f:f4:66:17:cd:d2:c7:96:83:e0:25:4f:
37:01:86:a9:ad:01:46:d5:69:bc:3d:38:66:3d:b3:a4:9b:20:
dc:c9:5b:9f:ef:cd:5e:d4:38:49:aa:cb:72:e4:b5:2c:86:79:
78:a4:61:11:50:ca:da:bb:a1:17:f7:2d:21:86:a1:b8:c6:bc:
59:c4:e3:92:07:f3:0f:80:9c:41:7f:a9:56:b8:3c:f4:e4:4b:
bd:b5:e2:a6:37:df:fe:82:90:2a:d9:de:17:bb:d7:80:93:15:
a1:48:57:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 05:04:05 2026 by rpki-client