Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS152726.roa
File: AS152726.roa (raw, json)
Hash identifier: 2xr1y1n5swwrq4eSBkycZkpVrVI+m3fu3NELOE6Dhgc=
Subject key identifier: 12:79:00:B2:F0:F6:75:C8:A4:C8:89:C5:ED:DA:B7:34:81:87:F2:A6
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5511809541EFBF8ECBEAE22C5A2179AC56EEA4A1
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS152726.roa
Signing time: Tue 23 Jun 2026 16:48:23 +0000
ROA not before: Tue 23 Jun 2026 16:43:23 +0000
ROA not after: Tue 22 Jun 2027 16:48:23 +0000
asID: 152726
IP address blocks: 92.112.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Jun 2026 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:11:80:95:41:ef:bf:8e:cb:ea:e2:2c:5a:21:79:ac:56:ee:a4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 23 16:43:23 2026 GMT
Not After : Jun 22 16:48:23 2027 GMT
Subject: CN=127900B2F0F675C8A4C889C5EDDAB7348187F2A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:64:61:f6:8b:8a:e1:d5:18:95:00:35:4a:f4:
36:79:e8:bb:35:f8:da:ec:a3:04:b5:cf:ad:1b:4b:
ce:83:89:06:50:72:2f:da:56:ed:df:77:bc:a0:ec:
91:be:cd:62:a3:a1:84:05:32:27:f7:55:80:60:ba:
89:bf:ab:b7:ed:f9:21:72:8e:28:32:e7:ee:51:8c:
97:1e:38:0b:cf:d7:01:1d:06:77:d8:3f:57:92:43:
d8:4d:cc:25:72:96:8b:a7:c9:47:b1:f4:bf:34:bf:
98:45:14:e9:5e:d7:b2:15:f2:c1:7b:e5:9e:61:34:
68:57:a8:3c:75:79:e7:0d:3c:a5:3c:a2:71:8a:b8:
aa:5c:88:3c:4b:79:18:dd:b0:68:1e:ec:95:55:77:
a9:44:7f:26:ff:b7:83:18:ac:75:fb:94:22:b1:12:
48:38:d1:7e:72:2b:2c:68:53:79:58:99:5c:92:a1:
92:ed:44:83:3e:db:4e:09:0e:bb:49:6d:e9:c1:db:
6c:bb:4a:6f:60:1e:3c:ed:45:e3:38:59:2a:f2:28:
4c:ea:2c:34:b2:dc:88:de:42:d0:f9:65:11:41:8a:
27:6d:8b:70:a6:f3:97:ea:b2:a0:93:b5:85:9a:f0:
a5:38:f3:ec:7b:c0:77:5c:e1:94:1a:8e:5b:2b:a2:
e6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:79:00:B2:F0:F6:75:C8:A4:C8:89:C5:ED:DA:B7:34:81:87:F2:A6
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS152726.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.40.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ef:13:e0:a7:a2:cb:2d:6e:1e:3f:07:18:9a:5b:28:d6:e9:
77:82:76:0c:f6:91:9f:53:f7:97:9c:64:1e:de:8a:b8:e4:14:
d3:80:55:65:46:7b:80:ea:54:1b:5a:46:52:70:7a:a6:43:60:
a3:71:c3:ba:45:c9:af:37:23:9a:d8:f1:ea:e7:a7:30:50:2a:
1c:fb:ee:11:37:53:4c:ed:bf:9e:da:5f:18:96:51:e8:be:f4:
f3:8e:61:3e:36:83:57:44:15:36:dc:c4:e8:00:81:98:ee:5a:
79:b6:d1:e1:4e:6f:8e:9b:bb:3f:a1:25:b1:18:d9:89:9f:49:
28:4c:6f:90:f0:e9:04:b5:e8:59:73:61:e5:5d:f5:c2:7b:4e:
df:38:2a:1d:ca:5a:46:be:cc:0d:03:51:e2:65:47:89:8a:15:
7f:b2:4e:0a:ff:bb:a7:f4:03:70:eb:c8:25:b5:e9:9a:62:2e:
c9:31:b0:fb:98:24:81:47:91:03:48:b2:d7:3b:95:a1:24:0d:
08:ee:73:90:48:5d:bf:fc:2a:84:a2:62:01:73:88:f6:18:a3:
38:c9:a1:b5:91:97:52:be:c9:40:2a:b9:3e:3f:f8:be:63:61:
be:ed:f3:70:62:07:a1:1f:aa:bc:b5:51:11:89:19:e6:64:02:
c6:dc:9d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 07:29:48 2026 by rpki-client