Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS152868.roa
File: AS152868.roa (raw, json)
Hash identifier: Fh+fvwP2PTDdJCBXxskNY1h5RlqI0vsWkUGHwmsOoe4=
Subject key identifier: AF:07:E2:87:29:86:35:65:40:66:7D:DD:A3:84:91:C8:80:3C:82:A9
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 6DC0D58435740D2EF6854ECF868CF79C8C27DF2C
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS152868.roa
Signing time: Tue 04 Aug 2026 04:48:31 +0000
ROA not before: Tue 04 Aug 2026 04:43:31 +0000
ROA not after: Tue 03 Aug 2027 04:48:31 +0000
asID: 152868
IP address blocks: 143.20.39.0/24 maxlen: 24
143.20.41.0/24 maxlen: 24
143.20.117.0/24 maxlen: 24
143.20.192.0/24 maxlen: 24
143.20.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:c0:d5:84:35:74:0d:2e:f6:85:4e:cf:86:8c:f7:9c:8c:27:df:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 4 04:43:31 2026 GMT
Not After : Aug 3 04:48:31 2027 GMT
Subject: CN=AF07E2872986356540667DDDA38491C8803C82A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:77:89:11:3e:68:8c:34:59:6d:33:61:8e:42:
f5:5f:a5:5b:d0:2d:45:aa:c8:8a:f7:97:01:14:0c:
91:5f:49:7d:db:c0:6c:87:c1:79:5c:e6:95:58:73:
1e:59:78:e9:52:bf:a3:a6:98:52:eb:e2:2c:2a:02:
bd:ef:2c:28:21:e0:94:29:47:b0:3d:73:93:42:36:
01:f5:9e:cc:96:ac:45:db:8d:31:f5:6e:c5:b2:63:
53:31:57:cf:8f:cc:a7:02:83:15:cd:1f:66:7c:39:
b0:25:1b:af:fd:30:3f:82:82:ed:ef:40:76:9a:41:
4a:8b:8c:50:77:b3:13:3e:b1:6a:fa:cb:ae:b7:97:
d6:f3:20:fd:25:67:5d:ea:1b:6e:a0:45:f5:31:82:
11:0c:10:14:a2:07:9a:7f:20:1e:f7:ce:9b:8a:48:
a5:1a:50:31:a3:75:e6:65:82:04:74:a9:4a:fd:eb:
3e:a5:89:5c:ef:f5:60:8b:0a:ea:e2:80:db:15:6d:
c3:17:24:2f:0a:32:d8:3d:da:ec:cd:e8:a8:77:46:
85:d1:97:fc:e7:53:66:26:26:36:a3:55:df:26:18:
d5:c9:0d:13:a6:41:4a:bc:0a:82:29:78:be:b6:44:
50:3c:4e:76:3a:80:e3:6e:c9:78:fa:c8:a8:95:2f:
f4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:07:E2:87:29:86:35:65:40:66:7D:DD:A3:84:91:C8:80:3C:82:A9
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS152868.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.39.0/24
143.20.41.0/24
143.20.117.0/24
143.20.192.0/24
143.20.226.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:09:7c:d2:6b:d5:4c:6e:16:f4:71:37:7f:bd:57:b6:9c:fd:
47:48:9f:c8:a0:dd:8b:5f:58:97:f4:ee:73:01:f9:03:42:dc:
76:63:c5:31:9a:82:c1:44:2a:58:fe:71:d5:04:55:4f:3c:b9:
43:ac:42:1e:06:1d:2a:31:e1:62:04:21:7e:7c:15:f5:7d:76:
88:5c:33:b9:30:c7:c6:f9:a8:1c:81:1b:ac:79:e3:56:38:d1:
6a:be:01:ac:a1:00:51:ea:1b:85:49:22:52:12:7b:c8:69:93:
b7:eb:9d:fe:60:89:3b:ec:e5:1a:32:ad:ea:93:d7:b1:0f:4b:
d7:a2:7c:6b:c7:1c:aa:5e:e2:20:2e:85:6c:1a:13:8c:d7:aa:
23:d7:65:2a:76:9d:ff:e3:5a:15:bb:67:b0:0f:b5:20:58:a8:
90:15:23:8e:78:6a:95:a9:dd:0c:80:81:7c:de:63:00:d5:58:
4c:6d:fe:4f:c4:7b:62:f9:d1:6d:59:31:56:01:4e:ae:96:a6:
cb:0e:63:bd:23:27:90:12:c2:65:cc:b6:df:ac:4b:4d:55:3e:
f1:fd:42:1b:38:6b:9d:95:75:80:16:5c:bf:ad:ca:f3:e4:bd:
d6:73:ae:ee:89:3a:1a:27:95:0e:e7:ca:65:98:e1:0d:48:e4:
bc:a0:27:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:22:08 2026 by rpki-client