Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS152698.roa
File: AS152698.roa (raw, json)
Hash identifier: eY4RNu7yGRwZ+tyvc1pZb9/s8TuW+NNxGde9d5TnP3M=
Subject key identifier: 02:57:CE:44:B9:D6:45:33:A3:FD:EE:E9:8F:75:C4:B0:FD:2F:AA:73
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 611F9DD691A6F56D4C9B1DD94F79FF43E8C0300F
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS152698.roa
Signing time: Thu 03 Sep 2026 06:21:54 +0000
ROA not before: Thu 03 Sep 2026 06:16:54 +0000
ROA not after: Thu 02 Sep 2027 06:21:54 +0000
asID: 152698
IP address blocks: 143.20.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:1f:9d:d6:91:a6:f5:6d:4c:9b:1d:d9:4f:79:ff:43:e8:c0:30:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 3 06:16:54 2026 GMT
Not After : Sep 2 06:21:54 2027 GMT
Subject: CN=0257CE44B9D64533A3FDEEE98F75C4B0FD2FAA73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:7a:d3:45:af:43:c2:1e:ee:ba:c2:4a:15:
9b:a6:e2:0f:2a:07:e4:bf:02:fb:3e:60:ac:bb:fa:
25:61:9b:25:59:8b:b8:72:1e:9d:50:96:ba:e5:e8:
7e:d0:be:91:99:46:38:b8:fb:6d:68:f5:b1:a0:45:
68:5d:a8:bc:29:c4:e7:2e:d9:35:b5:59:85:0a:d6:
12:64:2d:f2:6e:17:49:49:6d:af:65:b1:e0:5d:e6:
9e:19:cf:90:8e:cb:0b:cf:7a:47:a7:6f:73:bc:fe:
88:c5:0b:c7:62:d8:42:74:66:58:3d:9e:4b:f9:a4:
ca:17:d0:9e:15:71:a9:13:10:1b:a9:e4:71:46:8b:
e8:74:e3:7e:20:35:20:fe:29:f9:7b:6a:14:2b:c4:
60:6c:b3:f0:14:41:a7:02:34:f0:41:21:07:34:12:
04:e9:6c:87:24:e3:a6:5d:3d:fd:34:09:a7:ae:e2:
ed:04:d7:87:85:b9:5d:0e:33:82:26:36:be:5f:b4:
c7:cd:f4:7e:61:72:70:ae:10:e9:6f:b5:83:2c:31:
43:c0:2a:e2:68:67:96:54:cc:b4:d7:b1:e5:b9:3d:
28:de:f1:18:fc:cd:0e:86:68:8a:b6:11:1b:71:ec:
33:62:f0:3e:d2:59:88:85:ef:d6:84:fb:47:9f:b5:
d5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:57:CE:44:B9:D6:45:33:A3:FD:EE:E9:8F:75:C4:B0:FD:2F:AA:73
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS152698.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.18.0/24
Signature Algorithm: sha256WithRSAEncryption
41:fa:0e:b7:20:22:d4:8f:f0:d2:de:13:97:0f:44:de:f3:d5:
9f:76:fd:ce:53:ce:ad:f4:06:32:20:0a:91:d8:1d:ef:c2:28:
25:18:cb:fe:e0:02:60:4d:7e:50:4c:f2:eb:27:f6:72:3c:7e:
95:ca:b7:c4:39:12:9f:8b:46:67:ff:cd:85:0f:f5:41:fc:00:
10:6f:c6:1b:dd:39:1c:bd:87:b4:ad:81:86:a5:9e:5f:67:17:
30:e9:b9:85:bf:d0:a2:44:c7:8e:42:9d:14:2f:56:03:43:96:
a3:83:b1:5f:c9:53:21:05:78:46:a4:a0:5c:b3:31:d1:d0:88:
47:7b:34:70:4e:af:51:f5:1d:fb:a4:78:0e:cf:17:a9:63:45:
ba:75:64:74:87:8b:73:2c:5a:62:95:74:24:98:0f:96:16:bd:
83:5c:c2:ee:bb:7e:bd:5f:cb:f9:13:75:3c:9c:e9:5b:89:6e:
b4:61:d3:58:16:63:c2:e1:10:27:63:40:62:1e:ca:2f:62:64:
8e:26:ad:23:29:6f:db:c3:8c:78:76:94:fc:68:cd:23:c0:7c:
7a:81:84:59:19:ab:76:b7:67:c3:bc:d0:88:10:13:0d:dc:01:
4c:ae:81:1e:71:41:43:06:99:e6:c0:4c:57:78:28:43:9a:a0:
07:16:cc:4d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUYR+d1pGm9W1Mmx3ZT3n/Q+jAMA8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA5MDMwNjE2NTRaFw0yNzA5MDIwNjIxNTRaMDMxMTAvBgNV
BAMTKDAyNTdDRTQ0QjlENjQ1MzNBM0ZERUVFOThGNzVDNEIwRkQyRkFBNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHOXrTRa9Dwh7uusJKFZum4g8q
B+S/Avs+YKy7+iVhmyVZi7hyHp1Qlrrl6H7QvpGZRji4+21o9bGgRWhdqLwpxOcu
2TW1WYUK1hJkLfJuF0lJba9lseBd5p4Zz5COywvPekenb3O8/ojFC8di2EJ0Zlg9
nkv5pMoX0J4VcakTEBup5HFGi+h0434gNSD+Kfl7ahQrxGBss/AUQacCNPBBIQc0
EgTpbIck46ZdPf00Caeu4u0E14eFuV0OM4ImNr5ftMfN9H5hcnCuEOlvtYMsMUPA
KuJoZ5ZUzLTXseW5PSje8Rj8zQ6GaIq2ERtx7DNi8D7SWYiF79aE+0eftdWBAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUAlfORLnWRTOj/e7pj3XEsP0vqnMwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMTUyNjk4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjxQS
MA0GCSqGSIb3DQEBCwUAA4IBAQBB+g63ICLUj/DS3hOXD0Te89Wfdv3OU86t9AYy
IAqR2B3vwiglGMv+4AJgTX5QTPLrJ/ZyPH6VyrfEORKfi0Zn/82FD/VB/AAQb8Yb
3TkcvYe0rYGGpZ5fZxcw6bmFv9CiRMeOQp0UL1YDQ5ajg7FfyVMhBXhGpKBcszHR
0IhHezRwTq9R9R37pHgOzxepY0W6dWR0h4tzLFpilXQkmA+WFr2DXMLuu369X8v5
E3U8nOlbiW60YdNYFmPC4RAnY0BiHsovYmSOJq0jKW/bw4x4dpT8aM0jwHx6gYRZ
Gat2t2fDvNCIEBMN3AFMroEecUFDBpnmwExXeChDmqAHFsxN
-----END CERTIFICATE-----
Generated at Fri Sep 4 07:24:49 2026 by rpki-client