Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152726.roa
File: AS152726.roa (raw, json)
Hash identifier: KxJz7Nn2C6U2DMVIiez4iRN+QR6cf1X056DpoYHSJMo=
Subject key identifier: A0:87:64:54:D0:85:40:B1:E2:BC:CF:33:14:1B:45:4F:A1:AF:2C:2F
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1E64114466EDEB63FD1EBF626488F0CD5C3BE685
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152726.roa
Signing time: Tue 23 Jun 2026 16:48:25 +0000
ROA not before: Tue 23 Jun 2026 16:43:25 +0000
ROA not after: Tue 22 Jun 2027 16:48:25 +0000
asID: 152726
IP address blocks: 51.146.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:64:11:44:66:ed:eb:63:fd:1e:bf:62:64:88:f0:cd:5c:3b:e6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 23 16:43:25 2026 GMT
Not After : Jun 22 16:48:25 2027 GMT
Subject: CN=A0876454D08540B1E2BCCF33141B454FA1AF2C2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:f3:b6:45:47:80:87:dc:a2:42:ae:1d:85:
64:dd:43:32:47:46:93:8c:fe:0f:6f:46:ca:64:34:
56:10:a1:62:c1:e2:1d:ad:56:ca:44:7a:c6:c0:20:
2a:d2:59:83:cb:e9:cf:a9:88:b0:7f:96:59:aa:9b:
ad:4e:ac:15:17:8f:98:a9:36:83:8b:04:56:cd:df:
f9:4d:4e:cb:73:c8:e2:45:32:98:85:f9:5b:33:29:
9e:c5:b6:63:6a:9a:a0:29:db:40:85:31:29:e4:02:
64:da:36:b6:9d:63:16:78:35:38:d8:25:89:62:13:
c2:91:55:ed:6a:84:4f:e7:39:91:ab:ca:b4:18:88:
ae:5d:79:ac:75:9c:7b:96:78:d8:13:d3:46:13:41:
27:94:97:36:32:a2:36:86:48:90:60:d8:49:dc:9e:
6e:77:ab:ba:45:5d:e4:21:91:b4:77:f0:e8:ab:43:
85:fa:92:bb:61:38:cb:d9:0d:c6:19:c3:d2:a3:54:
35:d8:5b:d4:91:51:2a:7b:79:4a:6e:32:a4:32:4e:
61:b4:c9:6a:81:4a:72:45:36:63:3c:81:16:92:49:
4b:bb:5e:6b:4f:1c:eb:e8:28:be:00:c4:e3:a1:1a:
3b:7a:7d:32:52:ec:bd:c2:10:89:23:48:2b:bb:fb:
4c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:87:64:54:D0:85:40:B1:E2:BC:CF:33:14:1B:45:4F:A1:AF:2C:2F
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152726.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.246.0/24
Signature Algorithm: sha256WithRSAEncryption
46:e7:8a:ba:44:f8:b1:f6:ec:aa:49:35:94:89:7c:e0:7c:6d:
e3:c3:6b:08:be:63:d9:34:a2:d9:a7:1d:ae:9e:fc:c4:15:21:
7a:32:a2:e5:a8:2a:9d:a7:aa:25:3d:0d:d0:4c:2d:5e:6e:9f:
c4:9e:c8:e9:7b:26:25:4e:e8:6f:e1:35:7a:d0:7d:14:f6:3b:
b6:9d:33:99:56:97:80:2a:f6:bb:de:a7:a8:5d:85:df:6d:9a:
59:c1:f4:43:ea:99:10:00:4c:fd:2e:1f:17:c4:f0:0a:d1:90:
0d:55:00:d3:88:e9:eb:d3:ca:dc:65:0d:1b:46:48:4e:47:75:
0b:00:26:77:7d:11:f7:be:95:34:6b:2f:9f:3c:02:11:06:e0:
15:e1:c3:cd:ea:be:77:9b:7d:00:b9:5a:fa:04:72:c4:4a:10:
8a:fb:fe:9b:98:20:d7:93:0d:2f:c4:e4:c3:d9:f2:83:48:f7:
28:3c:0c:de:80:c2:43:b2:04:b3:1d:37:0e:8d:a0:00:6d:e2:
de:31:cd:3d:62:2c:40:a6:ee:24:ee:a4:b7:95:e8:1f:09:cc:
c4:43:5c:98:22:d3:fa:8a:30:e0:35:22:a2:ac:30:ab:81:cb:
a8:59:7b:7d:d8:37:cd:18:15:ff:bc:ea:79:42:ca:1d:8a:91:
bc:b4:d3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 04:07:22 2026 by rpki-client