Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: yI5Mkc4mTkf3GzqubCamP9+gKK9MsVKDs3LZ/AhAiOM=
Subject key identifier: 5C:C6:CF:6C:52:43:57:CA:C2:9A:81:30:9A:7D:36:50:5C:E2:CD:C0
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 68E065769172D908D956B7F59CD48A547F54E3E6
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS152179.roa
Signing time: Tue 01 Sep 2026 03:18:20 +0000
ROA not before: Tue 01 Sep 2026 03:13:20 +0000
ROA not after: Tue 31 Aug 2027 03:18:20 +0000
asID: 152179
IP address blocks: 141.11.37.0/24 maxlen: 24
141.11.47.0/24 maxlen: 24
141.11.93.0/24 maxlen: 24
141.11.134.0/23 maxlen: 24
194.60.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:e0:65:76:91:72:d9:08:d9:56:b7:f5:9c:d4:8a:54:7f:54:e3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 1 03:13:20 2026 GMT
Not After : Aug 31 03:18:20 2027 GMT
Subject: CN=5CC6CF6C524357CAC29A81309A7D36505CE2CDC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:da:3e:d5:b0:65:22:0e:c7:06:94:c5:02:
2d:19:85:a5:0f:6c:aa:a4:f7:60:e9:20:9e:8a:ee:
b5:f3:fb:e8:a5:3d:55:d0:b3:33:32:0d:bc:07:41:
27:a7:e6:af:37:d5:6c:c8:c2:12:dd:22:dc:ad:a3:
03:63:99:ac:02:fb:5c:97:b6:74:ee:1d:81:71:8b:
1b:52:74:d3:d8:c5:56:10:cc:ce:4f:42:23:fb:e5:
e1:14:52:03:3c:0f:0a:01:0b:f8:72:9f:b6:c2:5a:
f2:88:6e:d6:f0:d3:e3:a7:76:16:43:2e:85:5b:11:
05:9a:eb:95:52:9b:63:4d:fa:bb:3f:a6:4a:bb:28:
03:d5:24:c2:66:98:75:d4:8f:e1:4b:a3:88:94:2a:
de:cf:47:17:9a:f8:b1:5b:60:af:f6:22:4c:32:9e:
d5:7f:f9:bf:6e:7f:61:55:d3:5f:55:6a:2e:63:13:
5b:0b:4d:f5:52:c5:9f:a8:2d:2a:b6:80:b0:8d:ad:
7d:84:b6:37:7c:6e:92:11:88:f5:e0:a0:cc:8b:de:
6e:e6:ca:43:f6:d4:0c:62:05:85:b4:a7:6d:ee:e4:
14:a1:e7:65:1d:86:e7:b3:66:7e:2d:26:41:89:ac:
01:71:2a:dd:38:5e:28:d5:ac:6a:78:e9:35:53:d0:
77:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C6:CF:6C:52:43:57:CA:C2:9A:81:30:9A:7D:36:50:5C:E2:CD:C0
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.37.0/24
141.11.47.0/24
141.11.93.0/24
141.11.134.0/23
194.60.95.0/24
Signature Algorithm: sha256WithRSAEncryption
54:16:34:ab:0e:11:7b:28:5f:8f:7a:10:d3:b9:c2:fe:58:0c:
9e:ac:3b:c5:e8:bb:d1:77:65:8f:a3:a4:ed:1b:b5:9f:1b:12:
ec:80:59:77:1d:9c:56:d0:87:c3:ae:fb:d4:24:a3:ec:9e:4a:
46:57:1b:86:7c:1f:50:da:56:14:b1:33:5e:52:32:ec:f1:92:
e4:e7:45:f6:3f:90:41:ba:12:88:a5:a3:e4:9b:57:fe:f7:6a:
62:f3:ca:21:08:fd:62:66:7d:ce:ef:ce:cb:3f:c9:0f:4d:c2:
3c:6a:7d:cc:21:da:cc:82:26:72:26:34:c2:67:af:62:46:ae:
b2:59:f1:b3:f8:fb:2e:36:4a:c2:ab:aa:42:bd:fb:58:93:df:
4a:83:3b:69:2e:4a:89:b1:8e:ef:a6:04:73:5b:69:84:29:54:
00:56:c1:ff:b2:da:9a:4a:42:02:46:1a:92:dd:a4:ea:a7:fc:
7f:d0:f0:cb:bd:6b:c6:d8:b4:07:be:a1:90:16:cc:ff:de:03:
52:8c:c4:a7:a1:10:2b:57:7f:55:cf:7e:27:02:fd:56:20:f8:
88:0a:6e:01:e6:29:2f:b9:3b:9a:d8:0e:e3:28:ee:8a:60:0b:
b0:58:22:22:5f:38:90:21:c6:38:7e:df:8c:c8:48:3b:2a:fd:
37:eb:a9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:27:05 2026 by rpki-client