Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152598.roa
File: AS152598.roa (raw, json)
Hash identifier: 3IpmMxnRUplYFY/OliUsUUa3FH6LExfSZEE3raZvofc=
Subject key identifier: 90:8B:E3:8B:82:D1:39:F7:49:92:69:AA:93:30:A6:A6:CE:DE:DD:0B
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 13719806554C10D2A1F17FB8989AB6899041315B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152598.roa
Signing time: Thu 25 Jun 2026 02:12:48 +0000
ROA not before: Thu 25 Jun 2026 02:07:48 +0000
ROA not after: Thu 24 Jun 2027 02:12:48 +0000
asID: 152598
IP address blocks: 51.146.241.0/24 maxlen: 24
51.146.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:71:98:06:55:4c:10:d2:a1:f1:7f:b8:98:9a:b6:89:90:41:31:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 25 02:07:48 2026 GMT
Not After : Jun 24 02:12:48 2027 GMT
Subject: CN=908BE38B82D139F7499269AA9330A6A6CEDEDD0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e3:f6:2d:27:ec:3f:6e:87:67:67:06:e1:f9:
7b:6e:6e:1e:08:83:c5:e5:57:5d:c3:d9:88:4b:3c:
48:13:eb:2a:ae:73:cb:78:15:e4:d9:de:ad:65:7a:
38:10:ef:d4:2c:f5:a5:66:b8:c0:22:e8:75:b2:40:
00:df:73:01:fc:00:55:01:a2:42:c4:4d:9a:f9:92:
46:23:75:4e:c7:91:f0:22:8d:c8:1e:72:cd:34:c7:
10:1e:aa:ec:27:db:f7:e3:1d:3c:7a:7d:91:a3:74:
46:98:bf:f4:e2:bb:05:98:00:af:1a:75:04:cd:3b:
25:f5:e1:90:c0:bf:3b:71:d5:8f:89:6c:0f:05:c9:
5a:da:f2:94:70:53:41:29:68:13:f2:a3:0b:72:2b:
4b:eb:47:d6:2d:95:e1:14:c2:13:e9:43:13:14:02:
ce:74:9b:28:eb:8b:ae:41:ea:45:00:87:b7:e1:04:
0b:99:57:6f:53:f3:a1:a2:ae:4c:d4:dc:e9:03:00:
a9:89:d2:91:7a:b6:a0:72:fe:6e:13:27:f7:bb:d0:
be:98:55:18:a6:45:b7:4d:c8:34:80:84:fc:2e:97:
45:11:8e:9d:e9:0b:bb:a3:03:fb:31:12:b1:9d:5e:
51:e4:e7:ce:de:7c:00:10:cc:61:80:4f:81:b5:80:
6c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8B:E3:8B:82:D1:39:F7:49:92:69:AA:93:30:A6:A6:CE:DE:DD:0B
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152598.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.241.0-51.146.242.255
Signature Algorithm: sha256WithRSAEncryption
3e:eb:cd:51:17:62:d1:dd:7a:bd:34:d9:a1:13:2e:f5:65:89:
68:70:d9:29:f1:45:14:84:00:38:20:21:bf:f1:8f:ed:bf:7f:
57:79:d5:70:1b:67:6e:d8:5b:fd:b4:dc:f3:7a:e3:67:cf:cc:
91:12:02:91:ad:30:6d:10:2c:3c:78:74:d1:08:46:19:55:00:
4f:2c:72:53:12:69:dc:7e:db:f6:13:f8:1f:35:ac:1b:3e:ac:
7a:a1:21:9a:3d:08:ef:64:e4:ad:04:fe:8e:31:ff:f2:2a:87:
8e:7f:55:ce:00:9a:da:2a:d6:89:9c:0e:cc:31:6f:bb:80:0a:
3f:3a:f1:ba:f5:64:c1:93:43:31:ee:21:fd:6d:63:20:2d:3f:
6b:06:cc:36:ec:17:0a:a4:82:43:c2:09:c9:49:37:09:09:3c:
4f:93:85:f3:c9:47:7c:fb:4a:f8:84:a6:c9:ce:f5:4d:d2:f2:
33:dd:78:2e:ed:33:be:d5:8c:ef:42:06:d2:93:41:d4:9c:ad:
ba:fa:e4:23:16:52:f3:42:2c:52:be:7f:d9:77:ec:0e:c7:ce:
1d:80:39:62:41:63:4d:78:b0:e5:bb:69:d4:21:33:b3:e9:1e:
c2:be:6d:96:e9:44:21:72:e0:fa:96:74:7a:c0:89:ea:cf:f7:
50:33:06:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:42:32 2026 by rpki-client