Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: R4dIypT8bBXsfAVu+C/qK5zHq81AvzOk2ecVg3M0QAc=
Subject key identifier: ED:48:3E:04:9E:F5:91:24:E9:3A:B6:09:65:80:A7:C5:94:EE:56:73
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 71E90747712E719911CE9E965E3E5D0A37CE6269
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS152179.roa
Signing time: Mon 12 Oct 2026 13:34:36 +0000
ROA not before: Mon 12 Oct 2026 13:29:36 +0000
ROA not after: Mon 11 Oct 2027 13:34:36 +0000
asID: 152179
IP address blocks: 46.202.116.0/24 maxlen: 24
91.124.42.0/24 maxlen: 24
91.124.178.0/24 maxlen: 24
92.112.218.0/24 maxlen: 24
92.112.233.0/24 maxlen: 24
95.134.7.0/24 maxlen: 24
95.134.119.0/24 maxlen: 24
95.134.122.0/24 maxlen: 24
95.134.181.0/24 maxlen: 24
95.134.230.0/24 maxlen: 24
95.134.240.0/22 maxlen: 24
95.134.244.0/22 maxlen: 24
95.134.248.0/23 maxlen: 24
95.134.250.0/23 maxlen: 24
95.135.251.0/24 maxlen: 24
178.92.83.0/24 maxlen: 24
178.92.130.0/24 maxlen: 24
178.94.202.0/24 maxlen: 24
178.94.248.0/24 maxlen: 24
178.95.91.0/24 maxlen: 24
178.95.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:e9:07:47:71:2e:71:99:11:ce:9e:96:5e:3e:5d:0a:37:ce:62:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 12 13:29:36 2026 GMT
Not After : Oct 11 13:34:36 2027 GMT
Subject: CN=ED483E049EF59124E93AB6096580A7C594EE5673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:09:7f:41:c4:7d:12:d5:0d:ea:04:a1:27:ed:
da:ba:53:8b:cf:1c:4d:15:16:1b:64:06:dd:06:3d:
5a:23:4c:58:26:3d:05:92:f3:1c:33:07:01:a1:6d:
4f:e3:be:ca:08:ee:22:18:b7:4a:59:80:d6:6d:95:
8a:5f:d0:a4:ae:92:9a:be:8d:28:b5:9b:94:a1:ad:
e5:c4:02:b2:72:6a:b2:6e:23:44:89:50:23:8a:17:
4c:40:4a:36:65:e8:b0:9e:df:a3:50:f5:d7:b9:10:
b5:ba:64:6e:13:c3:9c:f4:c7:fd:39:45:a3:d5:25:
cc:6e:64:04:ee:79:1b:16:c8:e2:fe:64:86:30:e1:
c5:d5:b3:01:de:39:cd:dd:c1:0a:b6:9c:67:d9:f3:
fc:b1:bc:89:b5:02:b3:6c:bd:46:15:33:26:4a:8e:
7c:50:64:9d:34:89:2d:1f:da:db:00:23:7f:5c:64:
e4:a0:05:fe:b3:ad:9c:56:cf:15:97:bc:a7:09:2b:
62:04:95:89:af:97:fb:2e:ce:c7:eb:fd:31:e3:5d:
e6:d3:a9:7f:35:f2:15:b0:b0:ad:a1:5c:3a:c7:e1:
26:84:02:ae:65:96:55:f0:6f:91:2d:b9:8d:87:68:
6c:41:ae:9d:4c:7e:42:6a:5d:68:49:9f:7c:22:d0:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:48:3E:04:9E:F5:91:24:E9:3A:B6:09:65:80:A7:C5:94:EE:56:73
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.116.0/24
91.124.42.0/24
91.124.178.0/24
92.112.218.0/24
92.112.233.0/24
95.134.7.0/24
95.134.119.0/24
95.134.122.0/24
95.134.181.0/24
95.134.230.0/24
95.134.240.0-95.134.251.255
95.135.251.0/24
178.92.83.0/24
178.92.130.0/24
178.94.202.0/24
178.94.248.0/24
178.95.91.0/24
178.95.175.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ff:7e:18:5a:87:32:1a:08:9a:b8:01:ba:1c:d1:08:e5:85:
50:67:f8:e3:9b:1d:39:f6:e0:7e:fc:37:48:c8:d1:51:ba:f1:
1f:92:0a:65:0c:ef:1f:3a:77:a0:0b:d2:b4:02:51:40:c7:f9:
28:85:10:08:cc:c5:8c:30:06:ea:e5:bb:bf:65:9d:81:c3:75:
16:d2:2c:cd:da:99:a4:e0:d0:6f:19:2a:bc:ba:ee:0e:a3:e9:
1c:9d:bb:1c:b5:70:c2:c5:ce:a6:1c:3d:86:09:40:89:ad:92:
b4:5f:80:75:b6:fe:1e:69:f8:37:f5:55:38:1c:f1:86:38:64:
91:7d:fc:7a:b2:1a:54:60:ae:56:00:b4:e6:2b:33:f9:e2:09:
af:af:18:c6:ac:59:6e:99:17:b3:09:13:14:bb:83:d3:c2:b3:
be:21:c2:e3:ee:89:92:ec:eb:fa:89:97:81:ef:80:aa:19:20:
3b:59:66:6a:d1:d4:92:b9:40:cf:38:5e:21:3d:be:8b:db:f4:
a8:07:18:a7:b5:3a:fe:37:9d:2e:d8:b5:c6:39:59:c8:aa:13:
c9:7c:3c:f1:86:b3:f3:0d:75:4c:90:76:1c:60:ba:a4:a5:76:
d9:81:ed:7c:e2:33:da:ac:f7:e1:6e:41:0b:8e:7f:01:9a:3e:
e2:ed:a7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:58:09 2026 by rpki-client