Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS152606.roa
File: AS152606.roa (raw, json)
Hash identifier: CE9NaVH0OgOM3984nhnxx/Hx1i/y4q9I4nSTYf5f4AY=
Subject key identifier: B5:32:31:27:EC:53:52:C6:74:5F:18:B4:61:39:02:6D:51:12:4F:D5
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 04D63161F89BDAB0A40EA3FC1732C06AF7831D60
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS152606.roa
Signing time: Mon 26 Oct 2026 07:03:39 +0000
ROA not before: Mon 26 Oct 2026 06:58:39 +0000
ROA not after: Mon 25 Oct 2027 07:03:39 +0000
asID: 152606
IP address blocks: 91.124.22.0/24 maxlen: 24
95.135.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:d6:31:61:f8:9b:da:b0:a4:0e:a3:fc:17:32:c0:6a:f7:83:1d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 26 06:58:39 2026 GMT
Not After : Oct 25 07:03:39 2027 GMT
Subject: CN=B5323127EC5352C6745F18B46139026D51124FD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b1:4c:f7:bb:58:61:c1:01:be:20:6f:6a:3b:
ba:74:0c:a5:73:c7:5e:4c:6e:2e:74:8f:62:79:7f:
40:11:fc:8e:e5:84:ad:c1:73:ac:34:92:e4:31:91:
30:f8:f7:be:c7:f5:e9:af:0c:d5:10:70:2e:9e:d7:
9c:bd:54:97:7f:48:78:fc:83:cd:db:09:70:81:6d:
75:55:c1:45:20:fb:1f:4f:8a:99:ab:be:13:e2:e6:
7e:73:01:fc:f9:02:db:37:3f:65:fd:b1:6a:c6:3c:
8d:1b:d0:d9:43:99:7a:a3:32:54:59:cb:99:00:df:
28:21:9a:8c:10:57:ad:74:dc:7e:88:ab:a5:ef:35:
ad:20:28:39:5e:df:99:ba:74:03:ef:60:c7:3f:1a:
94:de:a8:4c:cf:7d:90:62:32:15:f8:6c:07:a2:e1:
79:98:ae:e8:37:29:91:f7:c6:f1:98:fb:15:be:04:
00:48:37:3f:ed:62:cb:4e:2f:54:ac:93:e1:a6:33:
25:28:93:0b:4e:12:c3:b7:50:cc:90:10:49:91:9f:
54:49:17:50:a7:09:18:15:56:7e:47:97:25:f5:72:
77:65:4d:80:5b:93:fb:4f:7c:45:04:9e:11:06:93:
3d:41:6a:af:e3:08:48:71:f9:17:cd:1c:10:5a:85:
19:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:32:31:27:EC:53:52:C6:74:5F:18:B4:61:39:02:6D:51:12:4F:D5
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS152606.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.22.0/24
95.135.199.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ed:ba:d0:88:49:e3:0f:57:72:03:9a:d1:e6:0a:5c:3c:33:
d7:60:c7:c6:12:e3:4c:fb:b7:14:d1:cc:d8:eb:af:bf:80:80:
e5:2e:83:c3:91:f4:41:a6:c1:d2:60:1c:01:05:3d:18:0a:40:
ab:0a:2c:49:a3:74:62:0d:9b:fd:33:9a:ec:55:e7:8d:26:b3:
75:4f:97:19:56:6f:d3:78:d0:bc:15:10:66:e5:86:51:38:4c:
50:31:02:d5:7a:0b:15:8c:2a:6d:7b:59:b8:03:d8:0b:e5:e0:
3c:5b:fd:19:55:90:b9:2d:c4:ff:53:4a:2a:84:69:5a:38:96:
ae:34:4f:41:67:71:68:2f:72:c9:7f:a6:4a:08:80:81:23:9a:
c3:bd:0d:9c:b8:84:e1:a6:18:c2:b8:9c:6f:8e:ec:05:4c:a9:
d4:92:01:b8:cf:44:55:ac:5b:3e:5d:ff:93:4e:11:53:0a:53:
39:1e:5e:0b:97:ac:a7:d7:bc:00:f6:75:10:8a:e5:db:75:78:
5e:6d:c9:cd:ef:c6:4e:7e:d0:10:01:4d:99:b3:a5:d1:27:50:
48:aa:24:a0:d3:e0:bd:4f:22:ac:4a:91:ec:88:3f:87:08:0b:
13:05:93:69:1b:f1:b6:ea:55:93:37:59:c3:5f:af:1e:e6:b8:
17:40:38:68
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUBNYxYfib2rCkDqP8FzLAaveDHWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjEwMjYwNjU4MzlaFw0yNzEwMjUwNzAzMzlaMDMxMTAvBgNV
BAMTKEI1MzIzMTI3RUM1MzUyQzY3NDVGMThCNDYxMzkwMjZENTExMjRGRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0sUz3u1hhwQG+IG9qO7p0DKVz
x15Mbi50j2J5f0AR/I7lhK3Bc6w0kuQxkTD4977H9emvDNUQcC6e15y9VJd/SHj8
g83bCXCBbXVVwUUg+x9PipmrvhPi5n5zAfz5Ats3P2X9sWrGPI0b0NlDmXqjMlRZ
y5kA3yghmowQV6103H6Iq6XvNa0gKDle35m6dAPvYMc/GpTeqEzPfZBiMhX4bAei
4XmYrug3KZH3xvGY+xW+BABINz/tYstOL1Ssk+GmMyUokwtOEsO3UMyQEEmRn1RJ
F1CnCRgVVn5HlyX1cndlTYBbk/tPfEUEnhEGkz1Baq/jCEhx+RfNHBBahRmPAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUtTIxJ+xTUsZ0Xxi0YTkCbVEST9UwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTUyNjA2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW3wW
AwQAX4fHMA0GCSqGSIb3DQEBCwUAA4IBAQAM7brQiEnjD1dyA5rR5gpcPDPXYMfG
EuNM+7cU0czY66+/gIDlLoPDkfRBpsHSYBwBBT0YCkCrCixJo3RiDZv9M5rsVeeN
JrN1T5cZVm/TeNC8FRBm5YZROExQMQLVegsVjCpte1m4A9gL5eA8W/0ZVZC5LcT/
U0oqhGlaOJauNE9BZ3FoL3LJf6ZKCICBI5rDvQ2cuIThphjCuJxvjuwFTKnUkgG4
z0RVrFs+Xf+TThFTClM5Hl4Ll6yn17wA9nUQiuXbdXhebcnN78ZOftAQAU2Zs6XR
J1BIqiSg0+C9TyKsSpHsiD+HCAsTBZNpG/G26lWTN1nDX68e5rgXQDho
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:45:08 2026 by rpki-client