Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: jg7+zCXTN5kytlQAYENlewnud+UCjK3blA8CiJ3MlZA=
Subject key identifier: A2:29:FC:4F:9F:85:D6:B8:B0:5A:FF:0B:66:21:18:6D:32:1B:F3:0C
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 42505829CCDC61DCCC8F19F90207F304E9D87955
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS152179.roa
Signing time: Tue 01 Sep 2026 03:18:20 +0000
ROA not before: Tue 01 Sep 2026 03:13:20 +0000
ROA not after: Tue 31 Aug 2027 03:18:20 +0000
asID: 152179
IP address blocks: 143.20.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:50:58:29:cc:dc:61:dc:cc:8f:19:f9:02:07:f3:04:e9:d8:79:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 1 03:13:20 2026 GMT
Not After : Aug 31 03:18:20 2027 GMT
Subject: CN=A229FC4F9F85D6B8B05AFF0B6621186D321BF30C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:87:a9:ad:bf:68:55:d4:da:59:c9:45:1a:
07:f0:c6:8c:ba:94:4e:dd:01:63:5b:80:ce:89:10:
73:e1:7d:29:4d:7c:4d:97:4c:3d:54:b8:b0:3e:7b:
32:e2:6e:90:a8:72:7c:d0:57:0b:63:fb:ac:f6:c8:
54:28:fb:da:dc:5f:9a:63:c9:fe:50:49:4d:40:3e:
37:11:92:1f:22:9c:4d:19:5c:ed:9f:f3:bc:1e:bc:
4b:4e:c5:ec:e0:88:7c:ae:e4:0c:c0:0e:8d:b4:ab:
93:8e:a3:ab:ee:4d:f2:ea:27:ad:e4:5c:e2:75:17:
46:bd:b1:14:ee:8e:36:5e:1e:49:d9:bb:8b:9b:08:
03:7c:c4:74:91:54:1b:b8:b0:4a:05:d3:f7:21:2c:
a2:60:55:57:5e:24:40:ae:e0:5f:87:e4:59:d4:36:
01:0a:d5:7c:6d:1f:73:d0:06:da:eb:42:81:90:26:
db:d6:02:40:ef:ab:60:e1:28:7a:81:e0:ec:ce:a0:
26:16:97:19:80:96:7a:27:a1:8e:c5:47:96:5d:e6:
9f:c6:0a:0d:94:e7:6c:d7:68:8c:1e:e4:28:cb:eb:
30:ca:83:52:d8:f7:24:85:58:61:e9:bd:21:0e:07:
2c:5b:56:2d:cd:4c:b8:17:da:79:57:17:d9:1a:35:
3b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:29:FC:4F:9F:85:D6:B8:B0:5A:FF:0B:66:21:18:6D:32:1B:F3:0C
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.28.0/24
Signature Algorithm: sha256WithRSAEncryption
57:f8:ee:47:de:96:5c:5a:b8:ea:c0:cc:d5:28:f9:bd:69:0b:
13:f2:3b:c9:cc:60:1d:e2:5c:a4:b0:d0:b0:af:c8:9f:d4:78:
cc:3b:ed:9f:04:5d:3c:d6:e8:41:fa:c7:90:a6:75:45:3c:b4:
dd:70:5d:df:e6:96:80:2d:d8:4f:b9:31:88:b8:19:10:35:23:
ff:ba:2f:6d:cd:fb:93:72:42:d7:17:ef:a7:ab:1c:b4:39:f1:
0e:d0:c3:32:40:a6:fb:ba:ae:15:af:76:00:5a:06:d8:50:c1:
f8:2d:6e:10:a8:9b:46:9b:ea:60:95:cc:87:7d:56:a0:9a:da:
19:70:be:6f:26:7b:56:33:5e:ce:fe:53:18:45:2c:7f:00:94:
a8:c0:db:0e:e4:46:f1:f5:e6:94:89:54:8d:ab:65:95:8f:3e:
fe:8d:c8:af:83:76:3c:f5:d6:da:a3:73:0b:a7:a1:a4:34:07:
32:f2:95:a1:74:aa:c2:e6:77:c9:e4:f5:55:ff:29:7c:a8:ea:
34:48:bd:4b:d2:83:11:6a:1d:e0:9c:bf:2c:ff:35:d7:93:25:
e5:39:4a:21:28:82:6b:f2:f7:c5:68:2b:0c:e8:55:d5:8f:99:
25:89:94:27:de:ec:c8:bf:85:97:a2:3d:7e:e7:97:f5:b4:1e:
67:ee:fa:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:59:20 2026 by rpki-client