Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS152698.roa
File: AS152698.roa (raw, json)
Hash identifier: FgSKJaCAAHPE1yFB4l2OPfM4RqIbwNlzvyXBSnXf4V8=
Subject key identifier: 2E:B4:3A:E3:E5:F3:5D:2E:63:07:E6:0F:F2:1E:A5:39:5D:7F:73:F1
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 652A79327E6EE368287666E01337FC97790D6DE1
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS152698.roa
Signing time: Fri 21 Aug 2026 06:01:47 +0000
ROA not before: Fri 21 Aug 2026 05:56:47 +0000
ROA not after: Fri 20 Aug 2027 06:01:47 +0000
asID: 152698
IP address blocks: 141.11.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:55:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:2a:79:32:7e:6e:e3:68:28:76:66:e0:13:37:fc:97:79:0d:6d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 21 05:56:47 2026 GMT
Not After : Aug 20 06:01:47 2027 GMT
Subject: CN=2EB43AE3E5F35D2E6307E60FF21EA5395D7F73F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:f8:6b:f5:8d:61:11:42:10:6d:37:e7:0b:
1c:66:0c:7e:4c:6c:2b:84:20:45:ba:fb:33:3d:01:
43:03:92:5f:5c:84:1f:78:58:9a:c3:7e:27:d1:80:
b1:ec:7a:21:e5:3c:f8:93:b9:76:53:01:b7:cb:60:
54:88:3a:90:6f:30:1d:9e:4c:7b:d3:01:a3:ea:78:
0a:fa:e3:0d:d0:25:ea:f3:6b:c4:70:4c:cf:14:0d:
e5:68:3f:16:c6:91:e2:07:34:20:b0:e5:b8:ad:7f:
1c:69:f5:9f:fb:ea:18:84:7a:30:b8:52:ae:51:3f:
3f:36:f2:b7:09:aa:8a:5c:6d:db:99:42:cd:25:19:
ae:fe:30:f0:48:67:d4:15:d9:22:ca:d5:fc:b8:15:
fb:2c:f4:02:b6:69:90:90:fe:17:30:ba:82:9c:f7:
08:a8:ee:e7:11:d2:32:c4:01:35:56:08:92:db:ff:
40:54:f4:c4:0b:22:71:04:0d:70:00:37:88:43:e6:
ed:6b:5b:64:df:26:48:97:fe:fe:45:b5:5e:4f:5b:
36:1b:98:f8:40:b5:f2:6b:f7:65:fd:8e:da:1f:eb:
46:96:54:9d:8b:a9:30:63:d3:6c:5f:bb:4d:15:f3:
69:bb:0c:0e:34:da:d7:d7:ba:d1:36:f0:7f:c6:4f:
a5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B4:3A:E3:E5:F3:5D:2E:63:07:E6:0F:F2:1E:A5:39:5D:7F:73:F1
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS152698.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.240.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:11:6a:a0:60:2f:10:e7:dc:90:2f:fe:cb:ee:26:ed:54:d9:
7e:c8:09:3f:44:bf:84:a2:0e:ab:bc:8d:2d:12:38:d4:f6:3d:
d5:63:9d:7d:a8:fb:7e:c5:e2:54:9d:0e:ae:6e:53:0a:74:88:
29:f3:0c:b2:9c:20:16:f9:4b:3d:a7:0e:94:fc:f3:aa:16:b8:
bf:d1:6a:80:a2:c9:d2:eb:ca:39:a5:b5:91:39:94:a1:8d:4b:
ff:6d:52:c2:00:ff:15:63:9c:62:88:23:88:c1:3f:e3:8e:71:
f2:06:a8:ce:78:69:61:d0:6a:21:46:94:00:d2:be:61:6a:de:
77:91:07:7f:15:43:27:5e:26:d5:69:c9:57:f5:18:7f:30:cc:
01:77:f3:6c:ca:e1:57:f0:cb:f7:f8:ef:60:3d:7e:9b:34:fd:
9d:57:8b:12:30:d0:03:91:b2:15:d2:9f:3e:9a:d9:af:88:8f:
da:62:27:45:f9:d6:54:ca:57:90:45:6e:bc:ef:51:2a:d0:04:
8f:89:d4:8f:52:74:54:83:ac:2c:ee:fb:3e:25:97:62:16:d1:
70:ec:9e:cd:8e:24:9f:b2:6b:88:4f:a9:71:89:4f:05:be:e8:
76:24:ae:c3:8a:1a:e5:7e:1d:77:9d:3e:b2:c4:49:90:e8:1c:
f0:83:8d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:09:53 2026 by rpki-client