Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS852.roa
File: AS852.roa (raw, json)
Hash identifier: y/9O5TvKBrAtdi8aRyhANxTNlg3vPnxHFmYJAIuyGJQ=
Subject key identifier: 15:2D:EE:ED:9F:76:BD:9E:87:5F:A0:89:47:64:DF:B2:4C:F1:EE:1A
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3AE71B4C0CD46E3ACBAD14FC169864FD388DDB13
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS852.roa
Signing time: Thu 13 Aug 2026 12:40:19 +0000
ROA not before: Thu 13 Aug 2026 12:35:19 +0000
ROA not after: Thu 12 Aug 2027 12:40:19 +0000
asID: 852
IP address blocks: 188.221.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:e7:1b:4c:0c:d4:6e:3a:cb:ad:14:fc:16:98:64:fd:38:8d:db:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 13 12:35:19 2026 GMT
Not After : Aug 12 12:40:19 2027 GMT
Subject: CN=152DEEED9F76BD9E875FA0894764DFB24CF1EE1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2c:0c:6d:38:5a:a3:5e:1c:38:80:b8:60:f5:
17:34:55:6f:24:39:26:3c:00:c5:ed:a7:d5:90:06:
5b:d7:9c:b6:60:00:6d:63:89:5e:29:4b:fc:da:3a:
a7:f0:7d:4d:a5:aa:8b:24:59:a7:ec:51:00:ae:35:
47:ae:69:51:cf:7f:73:21:96:4e:35:e4:76:08:6e:
74:c9:d7:83:6d:01:a7:ef:19:77:06:a8:ec:07:12:
58:50:e0:9c:3e:7c:e7:25:8f:a8:11:84:e5:60:24:
b5:99:a8:81:56:b7:9a:29:f7:d7:14:99:61:2e:89:
48:66:59:d9:2f:83:04:b7:fd:e3:78:4b:47:d5:b7:
ce:7e:b5:ae:44:ee:82:f5:64:a7:be:4a:96:36:62:
6c:0a:70:4f:22:32:81:78:de:b9:c5:eb:b6:82:75:
9b:b2:bb:ef:52:1b:64:6d:9f:ca:67:e1:d1:8f:e5:
bc:ca:b0:31:77:62:78:e0:22:4c:d2:db:5a:4b:bf:
db:16:b5:2d:d1:fd:3b:7d:b6:45:09:e0:7d:ed:54:
88:cf:f9:79:47:c7:69:1b:2e:35:e9:85:08:b4:21:
94:58:64:14:87:3f:42:94:37:93:0c:01:d6:1a:c5:
8f:fd:78:57:0d:6a:23:6a:2a:a1:13:69:dd:52:e5:
c9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2D:EE:ED:9F:76:BD:9E:87:5F:A0:89:47:64:DF:B2:4C:F1:EE:1A
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS852.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.221.232.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:1e:a1:00:a3:38:9d:3d:bb:c8:48:47:58:39:b9:cd:87:78:
ba:38:3b:11:48:64:bc:1d:12:41:b0:cc:5c:ad:18:47:99:f3:
ac:99:22:bf:2c:98:41:f4:e7:23:bc:71:3a:e4:fb:6e:3b:20:
4b:f4:5b:a3:dd:81:22:bd:d9:fa:c5:0a:9d:ee:88:41:82:62:
7a:58:52:19:6b:4b:47:4e:f3:70:ef:e7:84:4c:3f:2a:40:8d:
ef:0a:fe:c1:97:13:b5:26:bb:01:b7:60:c1:10:73:d6:96:ea:
ad:4d:5f:a3:eb:53:42:3d:e2:b7:bf:89:39:b1:68:5f:ad:94:
e2:b2:b1:56:fa:2b:04:13:8d:62:e1:83:52:ae:bc:31:23:54:
41:5b:a3:9e:72:08:5a:82:73:3b:9e:08:a7:4f:f7:9a:68:93:
0e:1b:1d:b7:34:83:56:6a:c1:7e:af:e1:49:b3:94:93:39:b2:
0c:74:7f:3a:df:3f:5c:02:b0:bb:fb:65:bd:a9:8a:97:28:03:
51:c8:c3:9d:c1:45:43:06:df:9d:7a:d4:fd:23:32:1a:9f:23:
98:5f:13:77:66:74:d0:7d:b7:71:ad:5e:25:e3:53:6c:81:8b:
dd:8c:cf:5b:14:73:50:7b:57:a2:bd:23:84:30:6d:c8:cf:95:
1b:18:64:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIUOucbTAzUbjrLrRT8Fphk/TiN2xMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA4MTMxMjM1MTlaFw0yNzA4MTIxMjQwMTlaMDMxMTAvBgNV
BAMTKDE1MkRFRUVEOUY3NkJEOUU4NzVGQTA4OTQ3NjRERkIyNENGMUVFMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwLAxtOFqjXhw4gLhg9Rc0VW8k
OSY8AMXtp9WQBlvXnLZgAG1jiV4pS/zaOqfwfU2lqoskWafsUQCuNUeuaVHPf3Mh
lk415HYIbnTJ14NtAafvGXcGqOwHElhQ4Jw+fOclj6gRhOVgJLWZqIFWt5op99cU
mWEuiUhmWdkvgwS3/eN4S0fVt85+ta5E7oL1ZKe+SpY2YmwKcE8iMoF43rnF67aC
dZuyu+9SG2Rtn8pn4dGP5bzKsDF3YnjgIkzS21pLv9sWtS3R/Tt9tkUJ4H3tVIjP
+XlHx2kbLjXphQi0IZRYZBSHP0KUN5MMAdYaxY/9eFcNaiNqKqETad1S5ck5AgMB
AAGjggIHMIICAzAdBgNVHQ4EFgQUFS3u7Z92vZ6HX6CJR2Tfskzx7howHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTODUyLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvN3oMA0G
CSqGSIb3DQEBCwUAA4IBAQCmHqEAozidPbvISEdYObnNh3i6ODsRSGS8HRJBsMxc
rRhHmfOsmSK/LJhB9OcjvHE65PtuOyBL9Fuj3YEivdn6xQqd7ohBgmJ6WFIZa0tH
TvNw7+eETD8qQI3vCv7BlxO1JrsBt2DBEHPWluqtTV+j61NCPeK3v4k5sWhfrZTi
srFW+isEE41i4YNSrrwxI1RBW6OecghagnM7nginT/eaaJMOGx23NINWasF+r+FJ
s5STObIMdH863z9cArC7+2W9qYqXKANRyMOdwUVDBt+detT9IzIanyOYXxN3ZnTQ
fbdxrV4l41NsgYvdjM9bFHNQe1eivSOEMG3Iz5UbGGTK
-----END CERTIFICATE-----
Generated at Thu Sep 3 09:23:08 2026 by rpki-client