Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS152868.roa
File: AS152868.roa (raw, json)
Hash identifier: EwDz2MdfjMW9+/f99cyRewANckG01cz9UzKRqZ/VOmk=
Subject key identifier: 5E:8D:41:86:85:F6:A0:F5:2B:7A:AA:DF:FB:BC:32:46:DC:F9:0D:48
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 1EAF3484AAC2DEFFD5F00A5B3489409DB82A5C43
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS152868.roa
Signing time: Tue 11 Aug 2026 02:41:22 +0000
ROA not before: Tue 11 Aug 2026 02:36:22 +0000
ROA not after: Tue 10 Aug 2027 02:41:22 +0000
asID: 152868
IP address blocks: 141.11.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 12:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:af:34:84:aa:c2:de:ff:d5:f0:0a:5b:34:89:40:9d:b8:2a:5c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 11 02:36:22 2026 GMT
Not After : Aug 10 02:41:22 2027 GMT
Subject: CN=5E8D418685F6A0F52B7AAADFFBBC3246DCF90D48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b6:14:2c:52:f5:7c:f4:14:c7:de:6d:45:e6:
dc:1c:6d:59:f7:8d:ea:a6:f2:ba:9a:89:f9:b1:b5:
74:75:d9:64:59:cb:7c:c8:05:32:2b:4c:9f:25:87:
d3:1e:f0:ae:bb:08:88:09:33:07:f5:3a:bb:2c:1a:
02:00:e1:ce:98:87:1a:e9:dd:f5:be:6c:61:9c:8f:
0b:f8:f6:e3:af:2b:aa:5e:83:bc:95:76:8e:dc:9f:
eb:8e:fc:51:8e:af:17:ba:18:98:8d:a5:4d:fd:64:
f8:ec:fa:1f:92:6e:65:97:de:b9:cb:88:44:02:81:
58:4f:d2:73:f5:c8:08:c9:8d:59:d0:4a:91:c2:26:
9a:ca:3b:b6:1b:f2:ec:ca:4f:fd:d8:ba:45:ef:b1:
13:fe:fc:59:a9:fd:26:f1:8d:a7:7f:a8:fd:d9:fe:
f6:4b:5d:8d:77:1f:68:b6:5e:4d:51:db:5e:78:49:
7e:53:e2:3a:ff:f2:13:2f:75:bd:7a:69:8b:93:ae:
c8:2d:d7:67:55:e1:ec:6d:e0:5b:42:61:90:c0:7f:
24:30:d5:4b:82:3b:4a:d4:26:97:e8:87:34:44:b7:
39:e8:56:f7:97:e6:d2:e4:11:43:2f:75:f1:9c:69:
d6:d4:1d:2e:30:78:d7:4b:f7:f4:53:02:39:2a:0b:
2f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8D:41:86:85:F6:A0:F5:2B:7A:AA:DF:FB:BC:32:46:DC:F9:0D:48
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS152868.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.198.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:43:21:a7:47:dd:24:5f:12:56:31:0d:59:f1:75:5e:8f:34:
66:57:31:66:57:08:9a:5d:30:9b:3c:04:eb:8f:6c:c0:1d:fa:
0d:4c:cc:7e:15:c1:0f:00:32:4e:b0:65:e0:18:6f:36:ee:99:
99:c3:33:7a:d7:0a:7a:61:49:58:af:64:7c:f8:05:78:1e:cf:
4d:85:d8:1b:4a:b1:b0:e6:b2:f5:ec:a6:f5:60:12:27:d6:1a:
89:02:26:b5:32:73:b3:30:2a:52:3b:61:d0:3f:e6:b5:93:64:
30:90:41:89:47:43:87:fd:c4:f4:be:4a:aa:7d:4c:cc:04:54:
74:8e:58:b7:65:c9:88:0d:1e:90:74:13:e3:aa:d3:bf:ac:eb:
dc:ee:44:7b:8b:cc:37:d5:a7:55:24:49:5b:17:6b:0e:10:cd:
b1:d9:66:42:eb:ae:65:1f:74:ad:85:01:49:bc:c7:22:40:50:
dd:1f:08:e4:e5:3c:2b:16:d4:0b:70:cd:3a:91:93:8d:ca:97:
00:d2:dc:d1:f5:6a:fe:c2:1b:38:36:fb:67:d6:bd:2f:f5:c0:
9a:ca:d6:40:75:fe:9a:81:c9:f4:9e:32:b3:a2:9d:1a:78:a3:
ec:f2:4b:aa:e3:48:ed:40:0a:f4:e5:81:41:dc:ed:27:02:d3:
30:be:1b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:24 2026 by rpki-client