Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: w4uSKHiYLdO81Wi+ZG1/2ihF/n0/rRCXcaLBiv5uweA=
Subject key identifier: 8C:92:1D:06:20:28:AF:BA:17:19:58:CF:08:BD:98:09:4D:2A:84:51
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 21ABAB33A54EF7858C639CBFDB8CCED16A134BE0
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152179.roa
Signing time: Wed 24 Jun 2026 02:38:16 +0000
ROA not before: Wed 24 Jun 2026 02:33:16 +0000
ROA not after: Wed 23 Jun 2027 02:38:16 +0000
asID: 152179
IP address blocks: 51.241.142.0/24 maxlen: 24
78.105.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ab:ab:33:a5:4e:f7:85:8c:63:9c:bf:db:8c:ce:d1:6a:13:4b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 24 02:33:16 2026 GMT
Not After : Jun 23 02:38:16 2027 GMT
Subject: CN=8C921D062028AFBA171958CF08BD98094D2A8451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:91:97:34:f3:b7:bd:48:93:87:c1:fa:a5:d0:
68:bc:9f:c7:b7:cb:b4:d5:1f:9b:9f:ce:b1:93:dc:
ad:00:34:80:a6:8b:f8:a5:6f:78:9b:db:9f:a6:c5:
bf:ce:03:2a:4b:4c:ef:3f:08:e5:12:c7:16:0e:fb:
24:2a:f9:b9:8b:1e:4b:fa:1f:b6:0e:b9:a7:03:1a:
bd:1f:9e:77:8e:0e:80:05:80:45:da:fe:f3:d5:c4:
2d:bb:00:79:92:48:6a:24:e7:93:37:82:ac:fd:89:
84:43:91:42:c9:b4:b8:29:0f:ac:78:c9:e8:06:40:
e1:89:96:87:8e:13:fe:a3:ed:8a:0a:65:88:af:4f:
59:e3:26:12:63:88:6b:0c:ac:12:c0:0d:47:46:41:
fd:2a:a5:71:63:b2:6c:fd:e3:c8:9a:5f:67:40:74:
4c:ee:a6:d7:cf:33:82:91:90:7a:e6:f1:92:9a:51:
19:63:dd:67:c0:f6:f4:9b:b6:f0:6c:78:20:48:b8:
90:05:ec:fb:8e:f5:fe:e2:2b:24:e7:0e:c6:03:d7:
87:05:6d:ab:45:9f:77:e2:8b:59:c9:69:83:5b:66:
f3:7c:39:13:0a:b3:c2:7f:42:37:95:92:3d:a3:f9:
66:ba:a1:42:09:cf:12:38:9b:35:e4:5d:22:ab:c6:
60:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:92:1D:06:20:28:AF:BA:17:19:58:CF:08:BD:98:09:4D:2A:84:51
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.142.0/24
78.105.206.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:58:1c:8e:ca:c5:a6:ba:4f:2f:76:57:12:ea:f0:fb:38:41:
c7:ec:21:08:a2:05:c0:7a:ad:71:f6:09:eb:a6:49:af:01:f5:
36:0f:68:07:d6:1e:b9:b0:c6:ce:1f:9a:be:b9:4e:c2:49:b3:
fe:24:b9:84:30:9a:94:89:fa:a4:87:d7:d1:45:60:a1:ab:81:
70:9f:d0:fa:78:e7:dc:95:5c:cc:f2:e4:ef:51:39:c0:de:c5:
e1:a8:9e:53:0a:9c:6a:b9:f4:89:1d:4e:e9:80:96:dc:86:37:
e5:77:bf:f5:3d:f0:94:06:a3:15:ef:9d:e1:98:df:3b:12:c2:
06:05:ed:9c:80:06:80:66:56:dc:15:c3:04:94:98:b6:82:1f:
bd:e7:4e:ba:6b:ec:aa:ea:13:66:32:7e:30:0f:27:70:43:5d:
70:1f:1f:7a:86:69:c3:6c:fa:ab:a2:bb:0f:da:b7:bb:0d:46:
88:d8:ce:49:f5:51:65:39:b1:5f:e8:b5:85:18:49:87:1f:f0:
84:5b:38:98:dc:3e:db:f5:3f:95:9b:5a:5e:b8:e5:fe:0d:7b:
d5:c1:e8:03:5a:ff:f2:5d:88:fc:2e:cd:51:e1:e8:e8:ef:ab:
78:5e:8e:c0:e8:c3:e5:27:75:b2:6e:53:af:53:b1:fc:f6:eb:
77:87:02:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:43:21 2026 by rpki-client