Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152726.roa
File: AS152726.roa (raw, json)
Hash identifier: t4qkuJzjdhDpvYuwCTk8T//XxjcGFvn16hzFpzRh794=
Subject key identifier: 2E:E7:DC:09:34:76:AB:61:A4:35:88:FE:00:C0:6A:42:86:78:26:55
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 42566AE1695561C9CBEB6F00F0AE886F1F368F77
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152726.roa
Signing time: Sat 10 Oct 2026 11:32:56 +0000
ROA not before: Sat 10 Oct 2026 11:27:56 +0000
ROA not after: Sat 09 Oct 2027 11:32:56 +0000
asID: 152726
IP address blocks: 188.221.1.0/24 maxlen: 24
188.221.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:56:6a:e1:69:55:61:c9:cb:eb:6f:00:f0:ae:88:6f:1f:36:8f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 10 11:27:56 2026 GMT
Not After : Oct 9 11:32:56 2027 GMT
Subject: CN=2EE7DC093476AB61A43588FE00C06A4286782655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1d:1c:c6:e5:02:86:db:b8:d0:33:b1:e4:81:
47:87:9d:e8:ba:73:c3:fc:f4:ae:07:c3:fc:aa:8b:
1d:54:fd:97:1f:d9:3d:9b:3d:81:bd:b2:6c:83:cd:
27:8c:5b:db:1f:3d:69:35:5e:b7:8c:1e:d3:2a:65:
2f:43:1b:c5:1a:1e:67:d6:4b:be:cf:3a:90:cb:9d:
47:1d:94:e1:5f:b9:6f:1d:13:22:0d:d8:de:d7:9c:
7e:8f:04:9d:8a:a9:f4:a9:a0:b5:41:db:e8:26:cb:
32:d7:7a:e0:c7:b8:63:1b:2e:b6:49:f2:53:34:3e:
78:3e:e2:bc:2a:e6:0a:91:ca:21:37:54:0b:cb:c1:
cc:28:b2:0f:14:95:0c:52:c5:8a:a3:5b:e2:58:d6:
26:95:67:dc:5e:c6:eb:86:a3:38:7a:c1:49:87:2c:
b1:4b:6d:13:bd:78:72:bf:d8:b9:d6:c1:2a:bc:3c:
5d:cc:e0:cc:24:e8:00:30:f9:8c:57:db:da:0e:a7:
29:8c:bc:f9:dc:ee:8c:e3:d9:a6:71:57:3b:45:31:
d1:1c:99:ae:a7:de:ed:55:38:3f:23:99:d5:9c:55:
6e:bd:1f:61:67:a8:15:32:6e:a7:53:1b:56:b2:f9:
85:dc:64:66:97:e5:32:49:52:42:a7:ae:d6:c7:df:
65:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E7:DC:09:34:76:AB:61:A4:35:88:FE:00:C0:6A:42:86:78:26:55
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152726.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.221.1.0/24
188.221.118.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:a3:b0:01:a5:30:fe:76:e1:5a:48:b8:a9:1a:9d:f1:b9:d3:
cf:95:39:fa:b5:6e:b3:05:aa:f4:18:cd:ed:64:e9:67:83:11:
5a:6f:06:d9:5b:bb:a4:c6:b9:7c:f3:9c:7b:4e:be:18:ce:d1:
d6:2f:cc:08:cb:92:d9:d4:68:c6:26:0f:f6:da:5b:04:d1:a4:
c2:f3:16:6b:19:e4:ab:a5:5b:74:98:ed:f5:80:bf:08:3b:44:
ce:6e:d0:b6:25:0b:fe:09:be:1a:eb:b4:00:c0:f2:08:bb:55:
e9:5e:ae:23:aa:38:23:ef:9a:95:34:f5:37:94:a1:6f:d9:5e:
8e:de:45:38:7c:a4:c1:30:ff:c2:1e:9b:52:15:8c:3e:b7:93:
b2:c7:ae:85:62:0e:af:1e:50:e4:3a:cc:ef:59:cb:80:d9:d7:
13:70:09:4d:25:09:9a:e9:c0:eb:39:3c:84:61:11:2c:88:15:
3f:90:84:e7:19:1e:c8:3e:2e:7a:5b:d0:21:ab:95:47:c8:d6:
99:1e:9c:13:90:7a:ac:d1:41:75:16:66:8a:3c:74:24:15:aa:
95:48:e1:41:d0:4c:04:d3:98:db:d9:a2:83:38:b1:75:9e:aa:
c2:07:fa:97:ce:ab:ec:87:f5:c4:83:85:5b:f0:ea:71:80:d4:
30:f7:3c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:15:10 2026 by rpki-client