Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: 1DLaDutdTlE4HbUkxHU+AyjWswoflIXZzolQICmui4w=
Subject key identifier: 64:1E:92:66:C1:A7:E3:9D:0F:31:3E:00:7C:00:13:DA:00:12:59:8D
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 39EB346CB5214D00C6504006C8CC1EB066DA3952
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS152179.roa
Signing time: Sat 25 Apr 2026 19:09:07 +0000
ROA not before: Sat 25 Apr 2026 19:04:07 +0000
ROA not after: Sat 24 Apr 2027 19:09:07 +0000
asID: 152179
IP address blocks: 95.134.240.0/22 maxlen: 24
95.134.244.0/22 maxlen: 24
95.134.248.0/23 maxlen: 24
95.134.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Apr 2026 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:eb:34:6c:b5:21:4d:00:c6:50:40:06:c8:cc:1e:b0:66:da:39:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 25 19:04:07 2026 GMT
Not After : Apr 24 19:09:07 2027 GMT
Subject: CN=641E9266C1A7E39D0F313E007C0013DA0012598D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9d:1b:8d:f8:2f:ef:0d:d0:9d:cd:ab:21:10:
00:c3:32:aa:ad:7e:ab:df:75:70:3b:09:87:bf:79:
e8:0e:f4:5d:4e:2d:5b:06:e0:7d:17:17:6c:c5:bf:
3e:b0:ad:11:24:52:d5:2a:21:f7:6c:98:fa:e8:c4:
e8:ee:d1:7f:54:86:e8:14:35:4a:66:d9:df:50:2c:
17:bf:d5:96:f4:04:cb:98:c4:f6:6b:41:7e:37:58:
73:f1:e8:6d:ac:fa:fd:b5:7e:ed:5d:7c:83:32:05:
5d:be:7b:29:8a:6c:1b:7f:5a:af:72:a7:39:81:10:
18:4a:5f:d0:bd:59:61:aa:25:07:6c:37:e4:cb:3c:
ce:53:e8:eb:f4:26:7a:28:80:bf:ee:5c:9d:90:dc:
30:19:f7:30:57:83:e5:3b:11:d0:c9:2c:76:72:db:
a0:47:1a:fd:4f:ff:cc:57:f3:04:54:4a:7a:d4:f6:
31:80:33:43:db:1a:12:77:5c:3e:e7:f0:dd:10:be:
46:53:2b:06:52:a6:fe:0f:bb:6c:1e:4f:ce:10:cf:
ab:41:52:d2:7a:e8:6d:2c:01:cb:20:6c:7d:5c:95:
89:80:8d:90:70:86:5f:dd:1b:f4:25:81:eb:79:58:
d1:7c:b6:75:e7:2f:0c:69:47:e3:84:3c:db:0d:81:
da:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1E:92:66:C1:A7:E3:9D:0F:31:3E:00:7C:00:13:DA:00:12:59:8D
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.240.0-95.134.251.255
Signature Algorithm: sha256WithRSAEncryption
1f:b0:5b:0e:e9:41:f9:a0:af:1f:7e:06:bc:a6:52:d7:fd:5d:
58:8f:dc:68:43:c7:27:58:38:5b:78:57:47:36:7e:52:db:d9:
33:51:0a:57:fc:74:a2:f7:8d:9b:4a:b6:0b:37:b2:22:5e:b2:
a3:e6:7b:0e:6e:b1:a8:81:dc:ce:c4:f8:31:fe:c9:9e:55:b0:
66:6b:8d:1e:09:46:7a:4c:1f:e7:80:7c:76:3c:43:44:cf:6f:
5a:1e:b7:51:1a:99:10:9d:87:f5:c1:56:c6:2b:16:d6:ec:bc:
f4:05:41:88:37:63:10:6f:f0:0e:ee:08:cb:33:c3:8e:e1:20:
33:0d:94:a5:b3:63:18:f9:21:69:30:fc:03:5e:3a:b6:3b:70:
55:36:67:1d:ae:eb:a5:94:7b:37:29:2f:bc:80:d1:df:33:e6:
7c:16:1a:bf:d9:d2:d8:9f:17:04:8f:b9:b4:df:40:78:15:ff:
81:7a:23:d3:fa:b2:2f:b0:99:ff:11:b0:fc:2b:d7:7a:b6:a6:
d2:7d:c7:4b:e7:b4:6b:d1:3b:e2:3e:1c:2e:95:49:7c:b9:cc:
99:ff:c4:04:c7:28:48:7d:68:7a:75:61:61:45:45:a8:2e:29:
b4:dc:5f:d7:ee:28:78:1b:65:08:b6:b4:d1:9d:a2:c3:c6:2a:
e9:e2:7d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 26 04:45:26 2026 by rpki-client