Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS852.roa
File: AS852.roa (raw, json)
Hash identifier: R60h1S++8m7FEkxUUUgs6KZCkHiEXJFIQlR5147D6/g=
Subject key identifier: 58:21:F9:5F:27:5E:7F:F0:87:3E:98:99:95:57:F5:FC:25:47:BC:B3
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1506E0ECA471BE1549ABF0D1BEA9C6D4C7F9270D
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS852.roa
Signing time: Fri 17 Jul 2026 12:48:34 +0000
ROA not before: Fri 17 Jul 2026 12:43:34 +0000
ROA not after: Fri 16 Jul 2027 12:48:34 +0000
asID: 852
IP address blocks: 188.221.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:06:e0:ec:a4:71:be:15:49:ab:f0:d1:be:a9:c6:d4:c7:f9:27:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 17 12:43:34 2026 GMT
Not After : Jul 16 12:48:34 2027 GMT
Subject: CN=5821F95F275E7FF0873E98999557F5FC2547BCB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:bd:a0:bf:2f:b4:54:5e:aa:ed:46:e4:79:
7b:9d:82:88:92:94:98:c7:f9:20:d7:bb:1b:a9:be:
b3:79:74:55:73:0d:3b:17:8c:f4:96:82:b6:04:fc:
91:a5:58:81:80:7c:91:b3:04:19:e7:28:36:1c:0a:
e0:03:34:ba:36:97:35:16:fd:16:a6:81:6f:7a:38:
43:15:05:c2:21:32:05:2b:b3:2b:66:72:fd:29:c4:
f7:56:0f:cd:7c:bd:aa:e0:d7:65:d0:5c:c3:b9:7b:
41:90:de:7f:a9:59:d3:86:01:26:cf:0a:4c:e6:e6:
99:01:d5:30:46:fa:e9:a8:23:55:d6:9a:03:1b:ed:
e4:06:e8:c0:0a:d6:66:52:ef:28:77:6e:4e:5c:37:
c6:20:46:cf:5f:eb:82:1e:7e:f6:52:44:da:ae:e6:
70:06:6d:87:ae:c5:38:1b:e3:bd:de:3e:9d:d6:17:
58:42:d2:c5:a3:0e:25:33:b2:25:d7:67:53:ff:7a:
cd:d4:b1:ce:2b:fc:ec:24:58:97:08:df:95:b7:26:
90:45:54:ed:59:2a:5c:80:7c:a7:f4:2c:5a:0a:cc:
68:20:aa:b6:99:37:fe:e0:a6:1e:7f:01:38:52:e6:
08:ee:02:d9:79:9d:a0:f8:34:7d:36:73:0d:5f:3a:
e7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:21:F9:5F:27:5E:7F:F0:87:3E:98:99:95:57:F5:FC:25:47:BC:B3
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS852.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.221.232.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:b2:dd:5f:20:d0:90:8f:c1:c2:ef:83:28:f6:f5:69:44:b2:
42:cc:ea:79:ba:3b:4f:90:2c:37:bd:23:d1:f2:2e:df:ba:cb:
9e:00:e4:c1:75:71:ef:74:da:12:f0:12:93:78:98:3b:7b:94:
58:79:85:03:9f:92:c4:61:af:c2:4b:96:cc:34:39:e1:ab:a5:
9c:e7:18:bb:43:d8:c3:6c:5d:bb:6e:a4:27:e0:f2:3d:86:2c:
9c:60:70:06:16:2a:cb:51:80:36:95:5f:ba:cc:8f:8b:46:14:
e0:97:54:e6:ad:b7:ba:3d:c7:8a:03:b8:53:c3:4d:f8:fb:51:
59:e3:65:30:c7:d6:56:83:f8:1e:8f:cc:05:a8:f7:92:2d:4f:
5a:25:79:9a:90:2a:55:34:6a:5d:2a:9f:29:74:19:c2:ee:13:
12:79:73:71:ab:74:50:a0:c9:5f:ab:4a:13:08:1c:de:e3:66:
35:a0:c9:5e:de:06:9f:74:94:e2:73:4f:57:6d:55:05:2b:8d:
a8:7d:6e:25:dc:73:a3:e2:61:c6:2b:06:40:1a:c3:ae:d4:6c:
cf:46:ee:be:a3:e5:e0:2a:ca:f8:65:b8:fa:c5:ea:89:1b:c5:
5a:57:6d:c9:bd:87:bb:c9:39:a9:97:c6:f9:5e:8a:34:02:a2:
f2:ea:a9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:42:23 2026 by rpki-client