Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS152734.roa
File: AS152734.roa (raw, json)
Hash identifier: SvH2IxdppAc7JhtGeL/lIgeYMEXf/RJHPbQNIjj1xFM=
Subject key identifier: 35:06:3D:56:98:64:77:30:D1:6B:38:CE:65:47:B9:C7:A0:E0:03:56
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 0F7E8FD3702A698C396FC8E384AB6EEAEBFAB9A8
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS152734.roa
Signing time: Wed 24 Jun 2026 05:48:39 +0000
ROA not before: Wed 24 Jun 2026 05:43:39 +0000
ROA not after: Wed 23 Jun 2027 05:48:39 +0000
asID: 152734
IP address blocks: 143.20.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:7e:8f:d3:70:2a:69:8c:39:6f:c8:e3:84:ab:6e:ea:eb:fa:b9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 24 05:43:39 2026 GMT
Not After : Jun 23 05:48:39 2027 GMT
Subject: CN=35063D5698647730D16B38CE6547B9C7A0E00356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:49:f1:c9:94:6c:dd:b4:0c:fa:0c:b5:fa:03:
c2:88:56:fb:06:20:7e:58:5c:26:6d:d3:4e:52:c1:
f1:aa:d2:fa:20:96:92:3a:77:6e:62:ea:fb:58:cf:
6d:d1:e8:a1:a4:16:73:9c:77:c6:4f:41:94:c7:e1:
2d:9e:8a:4a:4a:a2:f2:92:08:89:a6:0f:e7:95:6a:
7d:e6:5f:3a:ea:04:71:62:85:16:b4:0f:24:8a:7d:
ad:61:0b:13:18:19:17:bc:d9:cc:2a:40:73:e8:60:
82:5a:1c:e9:d7:e0:ea:67:f2:24:b9:e3:d6:98:26:
7a:5d:b2:cb:82:c9:46:4d:2c:e0:51:ac:b7:e7:c1:
9c:bc:f1:03:e2:e7:82:b0:6a:9c:9c:02:5b:1a:6f:
35:c0:32:e1:05:23:8d:0c:5b:fd:46:f4:ab:9e:de:
63:39:a8:ad:14:a9:f6:f9:c5:97:36:1a:c6:7d:e6:
ac:a4:7a:54:1c:dc:f5:a7:42:27:a0:45:7f:9d:96:
b0:3d:b8:80:9b:d2:a7:35:0b:f6:71:c1:5d:c5:c8:
f8:6e:ab:a5:cf:d1:0d:f1:a2:87:51:d6:1d:1b:22:
e8:3d:cf:d7:55:5d:2e:90:cc:da:bd:6d:1e:8c:d6:
09:b5:63:b2:6c:a0:2c:6c:d4:94:28:97:da:57:47:
3e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:06:3D:56:98:64:77:30:D1:6B:38:CE:65:47:B9:C7:A0:E0:03:56
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS152734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.142.0/24
Signature Algorithm: sha256WithRSAEncryption
10:a6:dc:3d:c6:75:93:76:b5:02:7b:93:c9:ac:16:dc:95:c5:
fc:f0:2c:6e:81:16:e1:cd:84:b5:3c:ab:39:31:00:29:6e:f3:
67:da:cc:8c:df:ae:03:d7:36:37:98:d0:0a:61:d2:60:62:32:
4e:67:b2:83:19:62:3d:78:21:47:ba:ab:95:b1:df:f3:df:a7:
91:81:42:b2:71:4d:69:87:17:0d:39:8b:93:07:12:1a:e7:f7:
d6:69:37:6c:2a:57:15:3b:e5:f7:f2:fd:bb:de:83:47:e7:b1:
2d:9f:b2:e4:e0:7c:b4:74:be:4b:1f:24:d9:8c:4e:64:1a:87:
f8:27:1e:d6:f0:62:34:ad:1a:f2:30:bb:c7:b0:a9:c3:a0:d8:
32:a3:2c:3d:ad:24:66:2b:15:f7:8d:b8:af:33:46:4b:8b:a9:
7a:56:e3:96:d9:0d:93:55:d2:4a:2b:f0:c2:22:31:b5:64:5a:
c9:9d:13:de:aa:4a:f3:79:e0:75:64:f1:8e:ec:55:e1:78:6a:
87:81:74:98:94:cb:60:2b:74:21:f7:23:fc:e7:81:52:9e:e6:
63:68:c1:84:fb:99:c2:0d:6f:51:a2:ba:fe:ed:58:6a:0a:6a:
d4:b5:d2:67:15:f7:83:22:49:a2:96:3d:b5:72:71:8e:fa:32:
9d:27:10:a5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUD36P03AqaYw5b8jjhKtu6uv6uagwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA2MjQwNTQzMzlaFw0yNzA2MjMwNTQ4MzlaMDMxMTAvBgNV
BAMTKDM1MDYzRDU2OTg2NDc3MzBEMTZCMzhDRTY1NDdCOUM3QTBFMDAzNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8SfHJlGzdtAz6DLX6A8KIVvsG
IH5YXCZt005SwfGq0voglpI6d25i6vtYz23R6KGkFnOcd8ZPQZTH4S2eikpKovKS
CImmD+eVan3mXzrqBHFihRa0DySKfa1hCxMYGRe82cwqQHPoYIJaHOnX4Opn8iS5
49aYJnpdssuCyUZNLOBRrLfnwZy88QPi54KwapycAlsabzXAMuEFI40MW/1G9Kue
3mM5qK0Uqfb5xZc2GsZ95qykelQc3PWnQiegRX+dlrA9uICb0qc1C/ZxwV3FyPhu
q6XP0Q3xoodR1h0bIug9z9dVXS6QzNq9bR6M1gm1Y7JsoCxs1JQol9pXRz4bAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUNQY9VphkdzDRazjOZUe5x6DgA1YwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMTUyNzM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjxSO
MA0GCSqGSIb3DQEBCwUAA4IBAQAQptw9xnWTdrUCe5PJrBbclcX88CxugRbhzYS1
PKs5MQApbvNn2syM364D1zY3mNAKYdJgYjJOZ7KDGWI9eCFHuquVsd/z36eRgUKy
cU1phxcNOYuTBxIa5/fWaTdsKlcVO+X38v273oNH57Etn7Lk4Hy0dL5LHyTZjE5k
Gof4Jx7W8GI0rRryMLvHsKnDoNgyoyw9rSRmKxX3jbivM0ZLi6l6VuOW2Q2TVdJK
K/DCIjG1ZFrJnRPeqkrzeeB1ZPGO7FXheGqHgXSYlMtgK3Qh9yP854FSnuZjaMGE
+5nCDW9Rorr+7VhqCmrUtdJnFfeDIkmilj21cnGO+jKdJxCl
-----END CERTIFICATE-----
Generated at Tue Jul 21 10:59:05 2026 by rpki-client