Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152698.roa
File: AS152698.roa (raw, json)
Hash identifier: 0oPrJ9ycLpKjwrsY2RXaARI0VuoN5LyTa9foj4p1Cy8=
Subject key identifier: 6C:A6:6E:8D:14:1E:C9:9C:75:D8:3A:02:F8:82:A0:BE:2B:54:C1:46
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6EFB971B4B42E69AEE5B7CDD066FE3ABCA556225
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152698.roa
Signing time: Tue 06 Oct 2026 13:42:24 +0000
ROA not before: Tue 06 Oct 2026 13:37:24 +0000
ROA not after: Tue 05 Oct 2027 13:42:24 +0000
asID: 152698
IP address blocks: 51.241.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:fb:97:1b:4b:42:e6:9a:ee:5b:7c:dd:06:6f:e3:ab:ca:55:62:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 6 13:37:24 2026 GMT
Not After : Oct 5 13:42:24 2027 GMT
Subject: CN=6CA66E8D141EC99C75D83A02F882A0BE2B54C146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ad:6a:46:cf:26:90:f4:62:98:26:19:0c:32:
20:2f:b4:5d:b8:42:ca:b9:d1:28:0e:de:f4:10:8e:
f2:b0:ac:17:1c:8c:36:66:c3:95:74:bf:5e:6d:e7:
8d:32:da:bf:50:b4:87:38:c7:16:71:d5:51:2a:b2:
d0:61:09:0f:7c:f5:f7:8a:23:38:33:18:dd:e1:18:
64:87:4a:64:dc:99:33:03:26:cc:6a:fe:dd:82:2b:
d4:6f:81:44:a0:ce:2f:a1:d3:d8:80:97:90:f4:3a:
86:3d:9f:ae:73:26:4f:cc:7a:0f:ae:a2:cf:e0:c2:
f1:94:34:ec:bd:03:c2:3e:8c:06:3d:9f:9a:75:64:
7c:8b:e5:84:06:58:13:6e:03:77:05:9b:53:7c:b0:
44:26:85:2f:a8:d4:81:11:aa:d6:cb:32:05:ab:fd:
34:04:4a:81:b9:7e:3a:75:b7:ba:1f:72:b2:e5:ab:
c5:25:55:43:ce:5a:7f:24:90:a7:0b:d1:7b:ec:24:
3f:d2:95:15:b4:74:4e:b9:45:20:6b:69:2a:8b:c9:
71:c7:66:36:71:96:ab:76:b1:27:0c:23:27:e5:5a:
fa:64:e1:59:88:3d:10:bf:5c:ed:4e:47:d4:71:b5:
fc:58:1f:4d:aa:e6:ab:f6:ef:df:e0:db:af:aa:70:
df:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A6:6E:8D:14:1E:C9:9C:75:D8:3A:02:F8:82:A0:BE:2B:54:C1:46
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152698.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.11.0/24
Signature Algorithm: sha256WithRSAEncryption
78:c2:36:0d:f3:da:17:74:a7:a6:27:b5:38:6d:66:eb:a7:9b:
53:3a:8b:60:f7:80:eb:be:8f:0a:3c:f3:cd:fd:24:db:0a:70:
9e:aa:59:e7:6d:0c:84:77:02:42:64:0e:e9:c7:e7:b3:71:15:
0b:ed:14:98:95:5e:d9:d5:48:b7:5d:2a:28:ba:16:f2:af:a2:
fa:1b:21:16:bd:47:80:62:cf:55:7f:68:77:7e:0a:37:87:db:
0f:ec:8b:fa:92:dd:d6:c8:c4:06:d7:d3:02:3a:10:ad:c5:48:
e3:17:a1:a2:c2:1c:ae:ba:d8:0d:fb:a8:10:38:8a:73:f5:88:
4c:7e:a4:a1:8e:f6:99:bb:a6:a7:db:2d:42:a2:68:c9:94:b6:
77:fb:fc:fb:b7:b8:88:4f:c1:ee:30:02:e4:46:4d:bd:d9:e4:
a2:dc:de:c6:57:28:79:c5:74:d3:47:0c:9c:f7:a4:e9:a5:f4:
8b:13:35:e7:13:47:74:af:23:ba:e5:88:82:cd:37:16:6a:d0:
65:d6:f7:d5:10:43:b6:3f:04:93:29:92:d0:30:4a:90:5c:d9:
69:d8:5d:e3:07:fb:2d:43:49:7c:a0:af:83:88:a3:13:af:c5:
df:60:21:c1:f6:9e:8d:72:55:55:b1:a1:54:c8:98:d8:24:58:
73:a9:f6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:37:51 2026 by rpki-client