Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS152698.roa
File: AS152698.roa (raw, json)
Hash identifier: I8quN8BgYRoApXKk3QXzhEXZFZcuB4N/4rn8LGEK23Y=
Subject key identifier: 58:83:4C:FA:04:E8:1C:94:36:20:16:E4:AF:AF:4B:F5:57:DD:1F:9A
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 79F65E0D507723ABDAF885BF072A86C899949208
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS152698.roa
Signing time: Tue 25 Aug 2026 11:42:48 +0000
ROA not before: Tue 25 Aug 2026 11:37:48 +0000
ROA not after: Tue 24 Aug 2027 11:42:48 +0000
asID: 152698
IP address blocks: 92.113.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:f6:5e:0d:50:77:23:ab:da:f8:85:bf:07:2a:86:c8:99:94:92:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 25 11:37:48 2026 GMT
Not After : Aug 24 11:42:48 2027 GMT
Subject: CN=58834CFA04E81C94362016E4AFAF4BF557DD1F9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3a:d7:08:35:ea:05:50:bb:70:f2:0c:5e:be:
8e:44:75:28:31:3a:6b:5f:b2:ca:2f:fe:ef:e4:37:
71:75:1e:1e:ca:9e:61:f7:23:07:d1:a7:53:6d:be:
82:12:84:13:7d:15:25:12:42:7d:c8:17:32:b8:28:
d3:19:93:de:e0:a4:4b:a3:1f:ac:48:5b:78:33:6d:
df:f9:4b:9e:58:e7:85:90:f8:d6:be:47:d4:cd:e4:
a5:75:de:ae:fe:b6:41:57:f7:9d:2e:ef:5f:39:4b:
a0:27:3b:95:6e:c9:bf:69:4d:5f:b8:a7:7c:d9:66:
dd:58:b5:66:78:f5:a6:af:96:3f:9a:2e:97:70:24:
1e:e5:de:8e:36:08:3c:b2:88:80:2e:fe:d3:e0:f0:
3d:bb:fa:dc:d9:fd:6b:10:70:b0:e4:0a:d7:59:f2:
10:df:a7:64:9a:67:de:b3:27:0d:b6:7f:5d:e4:74:
6e:f3:4f:77:9e:43:a1:19:ed:97:09:58:38:e1:1e:
1c:16:7d:e1:c3:0a:a7:1a:3f:88:81:2a:c5:59:49:
43:d6:c8:3c:e9:02:1a:3c:df:e1:ba:8b:05:a9:1e:
33:f1:11:e7:80:88:27:c4:5a:ae:1d:a8:4d:5c:7c:
af:39:42:d5:75:10:14:86:1e:70:25:6c:fc:08:11:
30:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:83:4C:FA:04:E8:1C:94:36:20:16:E4:AF:AF:4B:F5:57:DD:1F:9A
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS152698.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.67.0/24
Signature Algorithm: sha256WithRSAEncryption
99:fb:51:7f:bb:d1:3e:67:5a:1f:ee:7b:ab:00:36:81:24:6d:
25:c1:32:25:68:f4:6f:0b:56:b1:f0:5d:c8:f4:a4:e6:34:a2:
30:f5:cd:ca:f8:4e:cf:c6:ae:e9:bb:d9:7e:ff:ab:ad:b7:da:
cf:fc:62:60:e8:92:71:51:d0:d6:05:c6:d5:c8:4b:a9:43:01:
26:75:ca:7e:ae:bf:e5:31:4a:24:94:e3:1e:ff:5d:b9:09:4d:
c3:2d:03:95:d6:8b:46:89:5e:57:15:c6:06:4f:4d:4f:74:0b:
1f:9a:a1:9a:9d:77:1f:23:91:b9:1e:48:ec:91:99:37:c5:59:
45:dd:64:5d:fb:60:d0:60:58:38:04:eb:8a:f0:a4:27:9e:2b:
4d:6c:7e:e8:b1:cc:26:0e:82:de:36:99:d6:ab:86:10:89:8b:
ad:f3:cf:f6:8e:68:4b:65:95:c5:9c:9c:68:e6:2f:e6:54:a5:
49:7d:a9:e4:20:3f:0d:f5:bb:0b:55:ff:9a:b4:22:d0:bb:b7:
71:bb:57:88:a2:c8:8a:78:93:5a:15:db:e0:df:51:1b:f9:15:
bc:43:c2:0b:80:d6:80:b3:8d:be:9d:ab:5e:a5:b0:91:25:b1:
f7:1e:41:b0:2c:ff:ef:1f:5f:9a:2d:66:70:3a:44:44:0c:e6:
46:db:b7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:06:13 2026 by rpki-client