Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152726.roa
File: AS152726.roa (raw, json)
Hash identifier: Q6YYx9cguVnKNEIsJGwHWQ7F9zOI647tHZbmIfii0xM=
Subject key identifier: A9:73:DF:E3:95:D5:C3:B1:F9:B0:65:1B:EC:2A:4D:7F:2B:67:69:BF
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 5C9E91B58A3055163194269D4C854CDD8D1754A2
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152726.roa
Signing time: Fri 09 Oct 2026 18:13:00 +0000
ROA not before: Fri 09 Oct 2026 18:08:00 +0000
ROA not after: Fri 08 Oct 2027 18:13:00 +0000
asID: 152726
IP address blocks: 212.80.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:9e:91:b5:8a:30:55:16:31:94:26:9d:4c:85:4c:dd:8d:17:54:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 9 18:08:00 2026 GMT
Not After : Oct 8 18:13:00 2027 GMT
Subject: CN=A973DFE395D5C3B1F9B0651BEC2A4D7F2B6769BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:22:bf:b8:a0:d9:b2:e4:f6:7d:14:0e:64:29:
4c:07:30:3f:1b:3f:2e:e3:f7:96:4a:f5:64:b7:bb:
85:cc:b7:cc:ce:6f:c6:16:15:1a:1e:0b:cd:94:ed:
46:77:19:80:56:ac:ac:fd:60:1b:25:56:70:f4:d2:
75:e8:ee:7e:52:e5:42:ed:5d:66:9f:38:3a:ad:34:
ea:ed:49:a2:94:b1:df:0d:46:62:0e:d2:83:e9:8b:
6a:4c:39:69:7f:26:c5:24:c7:40:23:97:f1:5c:e5:
87:33:41:d0:6c:05:db:aa:83:46:71:fd:e3:24:e2:
2c:d7:21:c8:b0:d1:d0:b7:ee:74:bb:97:89:9c:4c:
6f:b6:e8:50:2d:ea:fb:4a:6a:55:2c:f6:6c:98:40:
f7:ac:a3:2c:80:58:18:81:b6:93:29:c6:34:d6:24:
57:f0:a4:12:fc:e1:7c:59:6a:07:d6:06:b1:47:52:
b0:b6:20:3f:42:5f:64:f5:48:ac:cc:44:ab:ff:19:
be:bc:3d:bb:65:ed:01:0d:2a:a5:16:60:22:0f:7e:
43:e7:8c:25:b5:91:c8:8e:4b:a9:99:bc:0d:ba:53:
9a:fe:26:a0:ec:76:1c:3a:1e:6a:c9:5b:e6:11:2f:
f4:b3:d0:53:9c:5a:9f:a4:85:13:9f:25:bc:ec:61:
26:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:73:DF:E3:95:D5:C3:B1:F9:B0:65:1B:EC:2A:4D:7F:2B:67:69:BF
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152726.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.192.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:8b:a0:1c:d4:15:09:00:4e:b2:50:e9:3d:01:e8:86:7d:82:
92:cb:fe:80:ed:d3:8f:5b:4a:7c:74:c4:76:60:79:d0:ce:5f:
94:27:0a:08:a5:e4:da:56:38:7a:f7:3e:bc:04:b1:25:5a:43:
92:74:f3:e9:b5:b7:bf:29:b0:3b:b2:83:5e:45:1e:d4:9d:39:
7a:56:df:1c:2b:37:b4:88:61:16:6d:e9:37:84:35:0b:dd:bb:
6b:8d:3f:76:c7:6b:02:d0:19:35:d6:9f:78:d8:0b:00:ec:21:
b4:54:83:e2:f4:06:ba:b8:22:21:75:52:9d:c7:45:8c:9a:f8:
ac:59:75:90:4d:f0:cc:d1:2b:37:68:88:d1:57:7f:2e:97:15:
bf:0e:af:4d:60:c5:54:01:90:af:01:64:63:6b:c1:ca:e4:11:
de:6e:ef:08:6d:36:3f:a7:fb:88:67:2e:1e:f9:e1:c4:87:0c:
e5:23:fe:83:09:fa:98:48:69:bf:92:1a:28:b1:b5:c0:d8:fd:
af:86:dc:5b:f0:b0:b0:f7:e9:c6:e4:e5:57:55:60:9f:b3:be:
4c:07:aa:c9:50:6f:5f:0d:3d:95:73:7c:f1:58:3f:c0:bd:f7:
bf:b2:d7:46:95:56:c9:eb:51:2f:76:20:77:e1:58:28:57:53:
51:a0:07:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:41:33 2026 by rpki-client