Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: YAYbktHLZlvMPSIIeQ9TwjWWjayxzzPTRpynHEaYMCs=
Subject key identifier: 9E:DA:36:AA:24:C8:BB:5A:84:62:06:A4:D4:F8:2A:7F:F9:25:5D:8D
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 12512E76E413810217D51E50D7F8C14A4621E2B4
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152179.roa
Signing time: Mon 24 Aug 2026 07:53:28 +0000
ROA not before: Mon 24 Aug 2026 07:48:28 +0000
ROA not after: Mon 23 Aug 2027 07:53:28 +0000
asID: 152179
IP address blocks: 51.194.115.0/24 maxlen: 24
188.220.31.0/24 maxlen: 24
188.220.48.0/24 maxlen: 24
188.220.85.0/24 maxlen: 24
188.220.88.0/24 maxlen: 24
188.220.156.0/24 maxlen: 24
188.220.195.0/24 maxlen: 24
188.220.208.0/24 maxlen: 24
188.221.192.0/24 maxlen: 24
188.221.218.0/24 maxlen: 24
188.221.219.0/24 maxlen: 24
188.221.230.0/24 maxlen: 24
188.221.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:51:2e:76:e4:13:81:02:17:d5:1e:50:d7:f8:c1:4a:46:21:e2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 24 07:48:28 2026 GMT
Not After : Aug 23 07:53:28 2027 GMT
Subject: CN=9EDA36AA24C8BB5A846206A4D4F82A7FF9255D8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:87:15:04:59:d3:39:23:d5:f6:df:ab:71:
dd:37:c7:0c:e3:8e:8d:31:d6:d0:22:d5:1e:0c:c9:
14:b6:d3:1f:92:fa:28:5c:78:0b:85:dc:c4:6b:dd:
9e:5c:8c:40:a8:43:ef:7b:b7:ea:76:f7:62:50:14:
00:f8:1c:5e:66:67:38:44:09:cf:15:1c:00:ea:5d:
74:d5:6a:61:83:9d:6d:e7:1d:c3:4e:bd:b3:9e:58:
f3:cd:d1:03:11:03:25:82:04:d2:6a:27:d5:27:7a:
63:a8:90:67:be:05:b4:41:c2:53:ac:03:52:a0:a5:
44:2f:40:b9:5f:ba:fa:99:f4:4b:f4:c1:3b:1b:46:
d4:ba:06:41:33:24:f5:04:dc:a8:45:7c:3b:20:f2:
76:6c:02:34:51:04:fc:85:25:d4:22:db:cb:0b:e4:
92:73:61:78:0b:c8:fe:04:89:83:10:e2:cc:7f:6b:
79:d0:5a:40:3e:b5:02:bb:ef:91:f6:bb:97:ce:83:
3b:e2:cc:2a:2c:4d:ac:37:b0:ac:15:36:cc:0e:1b:
ba:d6:28:36:2d:84:13:a7:aa:58:aa:e8:78:49:93:
83:49:8a:29:ae:84:f7:41:d5:8e:64:37:7f:d0:38:
cc:bc:a9:eb:41:04:33:25:99:65:2f:a5:38:0b:10:
d1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DA:36:AA:24:C8:BB:5A:84:62:06:A4:D4:F8:2A:7F:F9:25:5D:8D
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.115.0/24
188.220.31.0/24
188.220.48.0/24
188.220.85.0/24
188.220.88.0/24
188.220.156.0/24
188.220.195.0/24
188.220.208.0/24
188.221.192.0/24
188.221.218.0/23
188.221.230.0/23
Signature Algorithm: sha256WithRSAEncryption
51:2e:6d:49:69:2a:7a:f5:31:59:bd:2f:14:3f:92:60:67:05:
50:cc:d7:2e:5c:85:2a:35:72:31:4b:92:44:65:2e:ea:c1:b6:
cc:d4:60:2a:59:6b:ce:d2:a9:2e:fc:de:06:f3:64:5a:c2:e4:
13:1f:cb:3d:bf:f4:59:68:11:75:5c:31:ad:63:23:11:c6:3f:
18:c1:20:f1:77:2c:b3:48:13:e3:37:4e:70:b4:2e:d5:82:3b:
8f:0c:60:a2:86:27:56:f6:e1:9d:ff:5b:32:48:f3:ee:e9:09:
61:9e:83:c1:01:11:03:68:07:ba:90:f4:49:80:5e:7f:d4:03:
17:00:d8:58:12:38:de:a8:a7:40:9c:ff:b9:af:de:ea:57:62:
41:17:b3:9c:13:cc:10:8b:0e:07:c7:da:1c:89:8c:11:3a:dc:
12:ca:e2:e7:7c:26:7c:64:fd:a8:eb:18:0e:4d:66:d8:20:ce:
e6:cf:ab:30:6e:1d:28:62:7d:3b:f3:09:fe:d4:30:83:f2:9a:
6e:79:c1:37:ea:d9:c1:54:13:ad:ca:33:d2:c7:19:a2:50:b8:
04:53:75:f0:50:23:11:38:34:bb:f6:75:bb:8d:05:2d:ed:b1:
8f:fe:14:e4:63:70:6d:c8:eb:dc:66:82:b1:b7:3f:2c:ca:2b:
92:7f:93:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 07:13:09 2026 by rpki-client