Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS152460.roa
File: AS152460.roa (raw, json)
Hash identifier: 4L1TSw0b4l69whVk97z1U6Y4sK2UsM7uw+EHK7meC90=
Subject key identifier: A4:AE:81:4E:BD:D6:60:32:96:64:96:C4:18:4D:66:DF:EA:38:99:CC
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 71D54085B9CBD61C50C57FC997BEA1DEDC547DBB
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS152460.roa
Signing time: Fri 25 Sep 2026 10:03:45 +0000
ROA not before: Fri 25 Sep 2026 09:58:45 +0000
ROA not after: Fri 24 Sep 2027 10:03:45 +0000
asID: 152460
IP address blocks: 141.11.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:d5:40:85:b9:cb:d6:1c:50:c5:7f:c9:97:be:a1:de:dc:54:7d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 25 09:58:45 2026 GMT
Not After : Sep 24 10:03:45 2027 GMT
Subject: CN=A4AE814EBDD66032966496C4184D66DFEA3899CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:33:07:02:49:0f:a7:1d:ce:24:08:39:10:
4d:06:86:3a:a0:eb:23:1d:e0:a5:61:de:cd:c0:1e:
db:44:1f:5b:a3:16:ac:9c:7d:ff:f4:3d:01:83:ab:
f9:cd:b2:3a:bc:60:31:50:34:0b:5d:90:5b:2c:fa:
44:f5:4d:de:e2:36:30:1c:eb:f2:48:71:86:4c:8b:
14:33:54:4b:41:a0:a6:3d:9b:3d:a1:8e:58:6a:45:
75:25:bb:54:d8:77:83:de:2e:9c:a8:64:d9:78:4f:
60:69:52:c0:d1:b0:e0:41:63:09:dd:10:bf:36:7e:
8a:a3:40:85:81:f3:26:41:0f:96:40:e1:63:78:88:
9d:18:f3:d5:45:92:be:da:b3:9f:0b:62:83:83:5e:
c6:4d:55:a8:c6:79:b2:57:6b:f7:e0:f9:68:65:04:
96:5d:86:3d:48:0a:15:6e:86:a5:2d:11:ef:0a:08:
00:2c:3b:8c:b5:2d:b7:46:1e:69:7a:b3:74:78:7c:
8b:02:e4:de:99:ff:d7:2d:e8:ad:cb:af:59:b4:c9:
c7:7a:2c:d9:d7:4b:19:6c:9d:84:80:a1:2b:fb:5a:
eb:bf:9c:13:05:da:49:33:ec:ef:b3:7f:6d:ae:2d:
46:da:fd:f0:0f:3a:5d:70:0f:2b:ac:d0:a4:b0:b8:
76:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AE:81:4E:BD:D6:60:32:96:64:96:C4:18:4D:66:DF:EA:38:99:CC
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS152460.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.142.0/24
Signature Algorithm: sha256WithRSAEncryption
af:34:f6:39:ed:af:2b:b4:98:61:4d:d8:a6:f4:e9:e9:23:d5:
23:50:ca:53:89:39:c4:ba:8d:86:ca:ec:15:13:60:24:14:40:
f2:18:61:17:3f:20:ef:98:f8:9f:dd:8a:8a:84:70:72:91:88:
43:23:f3:52:23:09:1b:97:f1:63:43:f2:6b:86:2b:a8:f8:d6:
3c:d7:f2:94:71:a2:bc:4d:87:f7:bb:61:d9:3b:33:f8:b6:db:
2e:0d:97:d0:d2:b3:ed:8f:50:aa:46:34:c9:72:57:c4:eb:22:
03:5d:61:19:8a:a0:5b:db:ed:64:ac:3c:1f:96:83:82:7a:b6:
a7:7f:5c:41:e9:b6:1a:fa:7a:67:35:38:e2:36:05:eb:b6:81:
15:3b:9a:eb:d6:c2:7e:2f:8b:a0:17:61:9e:2c:84:da:bf:1c:
1e:11:5d:56:e7:47:f7:b5:06:3e:74:9d:c2:7b:10:d1:8b:a7:
22:78:94:6e:c4:c5:85:1c:49:8f:ec:f7:9a:a7:13:e1:00:04:
12:77:0e:33:19:39:e9:31:19:9d:70:75:ef:9d:97:b6:01:76:
14:e7:51:97:94:b4:e5:cb:ba:b6:8a:b4:ed:17:39:a6:1a:6b:
6d:d8:dc:45:eb:79:44:16:e8:17:ce:79:b9:d1:36:e0:38:9d:
a2:d9:5e:62
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUcdVAhbnL1hxQxX/Jl76h3txUfbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjA5MjUwOTU4NDVaFw0yNzA5MjQxMDAzNDVaMDMxMTAvBgNV
BAMTKEE0QUU4MTRFQkRENjYwMzI5NjY0OTZDNDE4NEQ2NkRGRUEzODk5Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1gDMHAkkPpx3OJAg5EE0Ghjqg
6yMd4KVh3s3AHttEH1ujFqycff/0PQGDq/nNsjq8YDFQNAtdkFss+kT1Td7iNjAc
6/JIcYZMixQzVEtBoKY9mz2hjlhqRXUlu1TYd4PeLpyoZNl4T2BpUsDRsOBBYwnd
EL82foqjQIWB8yZBD5ZA4WN4iJ0Y89VFkr7as58LYoODXsZNVajGebJXa/fg+Whl
BJZdhj1IChVuhqUtEe8KCAAsO4y1LbdGHml6s3R4fIsC5N6Z/9ct6K3Lr1m0ycd6
LNnXSxlsnYSAoSv7Wuu/nBMF2kkz7O+zf22uLUba/fAPOl1wDyus0KSwuHatAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUpK6BTr3WYDKWZJbEGE1m3+o4mcwwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMTUyNDYwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQuO
MA0GCSqGSIb3DQEBCwUAA4IBAQCvNPY57a8rtJhhTdim9OnpI9UjUMpTiTnEuo2G
yuwVE2AkFEDyGGEXPyDvmPif3YqKhHBykYhDI/NSIwkbl/FjQ/Jrhiuo+NY81/KU
caK8TYf3u2HZOzP4ttsuDZfQ0rPtj1CqRjTJclfE6yIDXWEZiqBb2+1krDwfloOC
eranf1xB6bYa+npnNTjiNgXrtoEVO5rr1sJ+L4ugF2GeLITavxweEV1W50f3tQY+
dJ3CexDRi6cieJRuxMWFHEmP7PeapxPhAAQSdw4zGTnpMRmdcHXvnZe2AXYU51GX
lLTly7q2irTtFzmmGmtt2NxF63lEFugXznm50TbgOJ2i2V5i
-----END CERTIFICATE-----
Generated at Tue Oct 20 22:20:19 2026 by rpki-client