Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152868.roa
File: AS152868.roa (raw, json)
Hash identifier: QO32UgLxOiKDL7IGcmGH8X6JCYATd1El0jsUSzIh8xI=
Subject key identifier: 9E:67:DC:B2:46:EC:4F:11:54:3D:63:A6:ED:C0:77:BA:44:5D:1A:73
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0BCED608D240B1566804716CAF0ABC87906C62B7
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152868.roa
Signing time: Wed 12 Aug 2026 11:18:33 +0000
ROA not before: Wed 12 Aug 2026 11:13:33 +0000
ROA not after: Wed 11 Aug 2027 11:18:33 +0000
asID: 152868
IP address blocks: 51.146.151.0/24 maxlen: 24
51.146.249.0/24 maxlen: 24
51.194.88.0/24 maxlen: 24
51.194.93.0/24 maxlen: 24
51.194.127.0/24 maxlen: 24
51.241.56.0/24 maxlen: 24
51.241.212.0/24 maxlen: 24
51.241.213.0/24 maxlen: 24
188.220.201.0/24 maxlen: 24
188.220.203.0/24 maxlen: 24
188.221.204.0/24 maxlen: 24
188.221.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ce:d6:08:d2:40:b1:56:68:04:71:6c:af:0a:bc:87:90:6c:62:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 12 11:13:33 2026 GMT
Not After : Aug 11 11:18:33 2027 GMT
Subject: CN=9E67DCB246EC4F11543D63A6EDC077BA445D1A73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6f:d7:7b:42:73:82:ce:77:5d:a4:0a:b3:a8:
4d:cc:6f:2d:86:49:32:01:7a:01:d0:b7:eb:6a:b3:
5a:65:a5:6b:18:e5:25:c3:f6:77:dc:dc:7c:00:5e:
f0:fa:2e:12:3f:0f:cf:88:89:47:fa:52:b8:88:58:
69:2a:4a:84:19:a4:22:61:17:8b:0d:1b:40:5a:63:
64:cb:08:4c:03:a2:5c:d0:f9:ca:87:bc:56:e8:82:
d0:04:c8:f2:7e:84:83:dc:7d:dc:63:d0:92:89:64:
1b:3a:16:82:07:80:b2:00:60:52:fa:b5:25:b1:8b:
3c:10:1e:a0:3e:69:93:e2:08:3c:01:2a:1d:d4:45:
c7:4f:8b:f4:0c:a4:78:fc:29:c0:4f:35:2b:50:48:
c4:39:1e:9d:0e:2b:33:72:ce:97:69:41:e3:87:cf:
fe:c0:35:2c:79:ec:a5:2e:5f:b0:20:04:e2:a7:9f:
d2:cc:46:22:5a:03:18:68:fe:4b:b0:de:b2:8a:0f:
59:c5:ab:b3:df:df:2e:34:e7:8e:ed:81:f5:0d:fe:
43:28:e5:1f:cd:4f:e5:7b:06:c4:77:33:1a:ff:8a:
bb:11:32:14:b0:75:ab:4c:93:b1:bf:c5:23:04:2b:
3c:a4:50:aa:e3:fc:74:d6:48:57:b7:2a:7b:c9:2c:
e7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:67:DC:B2:46:EC:4F:11:54:3D:63:A6:ED:C0:77:BA:44:5D:1A:73
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152868.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.151.0/24
51.146.249.0/24
51.194.88.0/24
51.194.93.0/24
51.194.127.0/24
51.241.56.0/24
51.241.212.0/23
188.220.201.0/24
188.220.203.0/24
188.221.204.0/24
188.221.228.0/24
Signature Algorithm: sha256WithRSAEncryption
91:6a:35:73:71:b3:2c:37:9b:14:79:a9:b6:ee:06:a8:a0:e0:
8a:f7:47:4d:7e:23:88:4e:06:e7:37:dd:34:29:2b:24:3c:c3:
26:4a:bd:0b:8e:92:7d:18:0c:e5:c3:8d:6c:07:36:0a:ca:11:
9f:f7:05:52:0a:59:97:68:8a:ab:95:2d:5b:a2:4d:b0:84:42:
de:13:56:4e:a0:37:80:f5:f7:d6:c8:fe:c9:fd:73:35:86:01:
db:f4:6a:9b:bc:91:66:5d:8a:75:6a:ed:65:5c:3c:ab:df:9b:
5a:1c:e6:02:07:42:7b:07:ff:ab:7a:25:90:50:c5:24:5f:5b:
d2:73:98:03:f5:12:4b:2d:93:99:05:9a:93:af:3b:6f:72:be:
20:15:b2:58:b2:db:29:1d:ca:ff:76:50:c0:1b:49:7e:a9:5c:
37:9f:67:04:bc:e0:bd:44:bf:03:8f:09:76:3c:ad:21:74:2f:
cf:11:36:c4:cd:b7:59:22:39:1e:a5:0b:c4:46:ad:4a:dc:37:
37:6c:40:a4:3a:e1:08:c3:b5:41:64:09:d1:11:dc:a0:03:64:
b4:c6:24:10:1b:53:83:ee:9b:cc:7e:13:8e:36:94:7a:13:f8:
ee:f9:ea:86:e6:15:c0:9b:16:77:84:e0:c4:a9:eb:06:a8:a8:
07:6b:33:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:33 2026 by rpki-client