Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS152726.roa
File: AS152726.roa (raw, json)
Hash identifier: BXA75XLzM6Q04kJrsikvMbPfis//b8AzyYCqsyHiylo=
Subject key identifier: ED:8C:4B:84:02:97:2C:4A:BB:0A:3D:F9:7C:C8:51:C6:7B:8C:34:A9
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 135F5C520C487917DB1C6F34CD9ED813519FE294
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS152726.roa
Signing time: Fri 16 Oct 2026 09:32:47 +0000
ROA not before: Fri 16 Oct 2026 09:27:47 +0000
ROA not after: Fri 15 Oct 2027 09:32:47 +0000
asID: 152726
IP address blocks: 91.124.21.0/24 maxlen: 24
95.135.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:5f:5c:52:0c:48:79:17:db:1c:6f:34:cd:9e:d8:13:51:9f:e2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 16 09:27:47 2026 GMT
Not After : Oct 15 09:32:47 2027 GMT
Subject: CN=ED8C4B8402972C4ABB0A3DF97CC851C67B8C34A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f2:c3:8c:df:32:f9:7f:ba:d3:02:be:c9:68:
44:bc:19:6b:ca:b6:09:8f:1d:2c:84:00:b7:db:23:
0b:11:38:f3:5d:d6:c3:fe:f7:55:43:bd:50:b9:52:
53:3e:ed:a4:e6:61:f3:a0:ca:32:22:ff:a4:4d:69:
36:41:21:b9:9f:c8:70:64:07:26:c8:76:f6:55:47:
43:2b:c0:78:95:9a:79:24:1d:bc:0d:51:d1:9a:d3:
40:75:57:0e:13:f6:de:36:fb:e9:f6:7d:bf:e3:29:
d9:dd:07:d9:0d:8c:11:ea:f3:9c:c5:a8:4d:4a:56:
bf:92:1b:26:55:72:cf:13:b9:4a:f0:20:13:5c:12:
01:c1:dc:74:9b:af:d8:94:de:57:ff:79:9d:35:15:
b0:1d:57:c9:44:2a:25:66:6b:27:d1:e7:ac:4e:6d:
01:83:31:75:6a:bb:f0:08:75:ce:f3:51:58:05:69:
1e:a6:a1:68:0a:96:4c:c1:1a:29:88:c1:05:6a:93:
82:a6:ec:fc:83:c6:8d:af:d1:82:ca:63:95:99:b4:
3d:42:72:c7:3f:40:04:61:0a:f8:1d:2f:a0:f7:53:
78:a5:88:1f:5e:28:06:8b:fe:9f:ac:8c:a0:03:03:
d0:75:cc:11:03:ce:04:fe:37:bd:bb:65:00:14:d2:
c3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8C:4B:84:02:97:2C:4A:BB:0A:3D:F9:7C:C8:51:C6:7B:8C:34:A9
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS152726.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.21.0/24
95.135.203.0/24
Signature Algorithm: sha256WithRSAEncryption
78:92:8a:0d:f2:46:10:f0:5a:d7:7b:86:a1:b9:1b:56:b1:8e:
de:02:72:53:d8:2d:45:54:b6:ba:30:0a:c6:1d:7a:b4:4f:07:
a5:16:c4:bb:10:63:53:87:92:e1:8c:b6:85:36:b5:da:b7:0e:
04:9c:4a:a2:be:d1:b1:e3:fc:5e:52:ae:27:77:7c:de:38:ec:
a6:79:bc:f4:87:02:6c:5e:5a:b0:f2:4b:b6:b7:be:34:5c:f4:
a9:2a:11:35:f2:31:4c:13:09:84:8d:5b:fb:9f:cc:76:6c:32:
68:79:ff:ee:db:b3:69:9b:69:2d:1b:81:09:eb:a4:8b:a3:d4:
26:65:96:37:ed:fe:28:0e:be:0a:51:8a:f3:d3:fe:21:b5:fe:
fb:db:c9:56:16:94:d2:ca:a9:f4:93:60:a7:8e:94:3a:16:e5:
15:40:81:d9:7a:1b:b1:e2:3e:60:3a:06:3a:2e:65:91:93:05:
40:f6:cc:83:6e:42:9e:ab:4b:40:a8:29:23:63:7a:59:eb:fa:
5b:72:04:8c:a7:ce:aa:0e:9f:8c:35:9e:29:70:a9:3d:8c:63:
48:cc:f3:72:14:3a:b2:d3:70:cb:04:8f:73:92:c1:df:84:0a:
3a:a1:d9:86:00:da:4c:d2:76:95:23:ad:f4:f7:59:3e:04:53:
1e:4e:09:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 10:32:39 2026 by rpki-client