Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: jLQ0SStCgCZ7J3z2+ijWDgfeG4wJBkqsb/Sk6sm4KWQ=
Subject key identifier: 8D:EF:66:50:AB:22:1C:FB:36:DB:EF:EA:BD:D8:93:41:AE:41:5C:BA
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 3505C333FDDA7C69CA09839EB1D72DCC08BFADB8
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS152179.roa
Signing time: Mon 05 Oct 2026 00:00:37 +0000
ROA not before: Sun 04 Oct 2026 23:55:37 +0000
ROA not after: Mon 04 Oct 2027 00:00:37 +0000
asID: 152179
IP address blocks: 141.11.31.0/24 maxlen: 24
141.11.134.0/23 maxlen: 24
194.60.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:05:c3:33:fd:da:7c:69:ca:09:83:9e:b1:d7:2d:cc:08:bf:ad:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 4 23:55:37 2026 GMT
Not After : Oct 4 00:00:37 2027 GMT
Subject: CN=8DEF6650AB221CFB36DBEFEABDD89341AE415CBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e9:82:20:8f:56:8e:68:ea:4c:99:e9:5e:c5:
09:9d:8a:e7:bf:49:42:43:4d:f5:c0:13:4d:e5:82:
e1:ea:df:ca:5c:49:cf:b9:b7:06:b6:ba:d5:ea:6e:
b9:46:a1:07:d2:fc:73:f9:6f:19:52:e9:b8:24:57:
69:c4:f1:cc:3c:63:45:eb:36:8f:04:d4:83:ec:5f:
c0:76:35:ec:4f:e0:01:99:e5:b7:0a:1a:f0:76:fe:
0b:5f:46:b1:d2:04:73:6a:23:9a:b2:8f:e1:52:38:
83:39:b3:66:58:5c:30:97:88:80:16:65:db:28:9b:
28:86:0d:29:3d:f5:88:c2:3c:71:0a:3a:01:0f:f2:
ba:13:aa:a3:a6:10:07:7f:ed:bd:b5:95:40:21:cf:
06:78:48:49:bc:ee:36:0c:dc:60:8e:15:cf:a7:5d:
bf:b1:ba:cb:a7:87:0e:0d:73:1c:2c:74:06:cd:49:
d6:24:36:d2:84:1a:3a:22:ba:25:ec:13:89:16:01:
39:22:0c:b1:9b:b3:10:07:c0:b0:0c:db:f2:ea:70:
55:4c:80:f3:74:63:8b:ec:45:e4:09:c2:a8:a7:60:
6a:d9:c3:cf:bb:3f:1c:96:15:01:33:8d:df:95:2a:
46:67:ae:30:88:73:2a:7a:3f:5a:19:98:7e:13:9d:
f2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EF:66:50:AB:22:1C:FB:36:DB:EF:EA:BD:D8:93:41:AE:41:5C:BA
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.31.0/24
141.11.134.0/23
194.60.95.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:cd:65:72:c7:7b:16:31:a1:41:d2:41:81:e6:39:6e:4a:c0:
18:e2:1e:be:13:10:0f:97:79:0d:62:85:10:2e:13:b9:f7:8c:
72:4b:e1:f3:0e:6a:8c:0c:df:2f:61:04:d1:d6:45:23:60:d7:
9c:1a:64:1f:78:c5:63:73:67:aa:4a:41:15:75:d8:c9:6b:e9:
29:d6:cc:0b:45:dd:6f:ac:27:fc:ea:ff:83:03:6a:36:c4:e5:
3e:03:fc:64:da:1c:63:99:03:9e:88:08:f1:b5:51:31:fd:69:
9a:83:96:60:ed:47:95:98:d2:95:0e:9e:43:4e:f8:7e:a3:e6:
da:a8:2c:85:51:fe:ce:7d:49:47:0e:31:41:a9:27:fb:27:4c:
5c:64:97:98:ce:13:e5:53:1b:03:4d:24:fe:ae:77:d7:3a:c4:
ab:07:6b:c8:0e:cf:83:7b:14:b6:a8:62:36:96:23:0a:ac:c7:
cc:e3:53:9d:a6:74:81:e6:1c:6f:75:69:a0:9f:d9:d0:1f:8a:
65:52:14:70:35:8a:2a:d3:0e:b8:d3:e0:9a:da:7b:3f:f3:83:
bf:73:68:c2:cc:ac:b8:89:3a:ba:da:49:19:aa:0e:2d:be:ff:
f8:bf:85:be:94:26:01:a1:4c:18:2a:9f:50:8b:7f:bf:f8:70:
99:e0:f2:15
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUNQXDM/3afGnKCYOesdctzAi/rbgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjEwMDQyMzU1MzdaFw0yNzEwMDQwMDAwMzdaMDMxMTAvBgNV
BAMTKDhERUY2NjUwQUIyMjFDRkIzNkRCRUZFQUJERDg5MzQxQUU0MTVDQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP6YIgj1aOaOpMmelexQmdiue/
SUJDTfXAE03lguHq38pcSc+5twa2utXqbrlGoQfS/HP5bxlS6bgkV2nE8cw8Y0Xr
No8E1IPsX8B2NexP4AGZ5bcKGvB2/gtfRrHSBHNqI5qyj+FSOIM5s2ZYXDCXiIAW
ZdsomyiGDSk99YjCPHEKOgEP8roTqqOmEAd/7b21lUAhzwZ4SEm87jYM3GCOFc+n
Xb+xusunhw4NcxwsdAbNSdYkNtKEGjoiuiXsE4kWATkiDLGbsxAHwLAM2/LqcFVM
gPN0Y4vsReQJwqinYGrZw8+7PxyWFQEzjd+VKkZnrjCIcyp6P1oZmH4TnfLHAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUje9mUKsiHPs22+/qvdiTQa5BXLowHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMTUyMTc5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAjQsf
AwQBjQuGAwQAwjxfMA0GCSqGSIb3DQEBCwUAA4IBAQB/zWVyx3sWMaFB0kGB5jlu
SsAY4h6+ExAPl3kNYoUQLhO594xyS+HzDmqMDN8vYQTR1kUjYNecGmQfeMVjc2eq
SkEVddjJa+kp1swLRd1vrCf86v+DA2o2xOU+A/xk2hxjmQOeiAjxtVEx/Wmag5Zg
7UeVmNKVDp5DTvh+o+baqCyFUf7OfUlHDjFBqSf7J0xcZJeYzhPlUxsDTST+rnfX
OsSrB2vIDs+DexS2qGI2liMKrMfM41OdpnSB5hxvdWmgn9nQH4plUhRwNYoq0w64
0+Ca2ns/84O/c2jCzKy4iTq62kkZqg4tvv/4v4W+lCYBoUwYKp9Qi3+/+HCZ4PIV
-----END CERTIFICATE-----
Generated at Tue Oct 20 22:10:25 2026 by rpki-client