Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS152868.roa
File: AS152868.roa (raw, json)
Hash identifier: UaNHNJM8NZZOSv85zewHn5wNgwQT6sVr5jCVWYTNFUM=
Subject key identifier: EA:51:60:D8:61:20:26:2B:4A:70:AC:51:94:B4:39:22:5E:5B:CB:48
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 179BE903F3AC6205F3363A178AB6FD1F89EAFFCC
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS152868.roa
Signing time: Wed 05 Aug 2026 03:57:26 +0000
ROA not before: Wed 05 Aug 2026 03:52:26 +0000
ROA not after: Wed 04 Aug 2027 03:57:26 +0000
asID: 152868
IP address blocks: 178.94.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:9b:e9:03:f3:ac:62:05:f3:36:3a:17:8a:b6:fd:1f:89:ea:ff:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 5 03:52:26 2026 GMT
Not After : Aug 4 03:57:26 2027 GMT
Subject: CN=EA5160D86120262B4A70AC5194B439225E5BCB48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:12:74:e3:11:61:d8:b0:19:c9:58:20:24:bf:
48:44:7f:fc:b0:45:3a:c0:38:08:08:47:a8:94:32:
65:8b:d2:e6:9a:12:6d:44:51:73:53:ac:79:48:e1:
3d:73:01:8b:a7:aa:ce:00:1f:ea:fb:a3:f8:5b:d0:
4b:89:39:96:bd:9e:b4:7a:eb:42:e0:7d:f6:bb:7c:
92:22:8b:a0:e6:56:d6:ec:2b:dc:eb:f6:b2:b5:7a:
91:0c:ba:48:57:08:8c:c8:f5:1d:68:78:44:17:c7:
a6:31:c9:e7:e0:2f:5f:dd:87:d5:2a:3f:6f:91:20:
17:87:91:3e:ed:0f:a9:32:f4:50:ca:73:33:b9:49:
52:55:f6:fc:4b:41:12:8d:bb:bf:5f:81:18:61:f1:
b0:65:a6:86:b3:59:a5:27:0f:b0:e4:cd:62:2c:ef:
76:f4:ca:b0:22:98:c4:c1:6f:e0:82:c9:f2:9f:85:
ef:c7:b3:72:aa:6d:29:7b:74:24:8b:ea:c7:ea:b8:
c5:9c:eb:bb:d6:0f:f9:75:b5:af:d2:4c:9e:ff:59:
24:e2:b5:5d:5e:fa:1b:52:d9:30:ba:78:eb:96:87:
e8:a6:ac:73:4a:3f:d9:f8:56:c0:82:cc:88:1b:2f:
94:f6:1d:ff:ca:b1:a4:b9:13:20:6f:e8:40:23:bf:
7d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:51:60:D8:61:20:26:2B:4A:70:AC:51:94:B4:39:22:5E:5B:CB:48
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS152868.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.94.205.0/24
Signature Algorithm: sha256WithRSAEncryption
19:73:d2:02:0a:91:20:d5:07:ca:df:71:d0:69:1f:ee:94:57:
bd:df:ad:8e:b1:3e:c9:65:3c:54:90:0d:67:50:28:e5:d6:76:
ae:f4:a7:2c:b1:6b:5b:34:d0:91:0f:d2:17:f4:bb:f6:b8:1a:
82:53:93:e3:80:62:c2:95:5d:6d:79:43:1c:5b:6e:e2:c5:32:
9f:12:28:bb:09:ec:74:a8:31:a6:a6:d5:f7:b1:30:0b:bb:1b:
9a:c4:2c:4a:c3:e7:2a:62:2a:53:ba:93:20:e6:fd:0f:01:3b:
ba:b8:92:48:68:b2:0f:74:2a:2c:01:aa:07:58:fe:69:fc:de:
48:14:36:a9:a1:00:8e:ff:7f:f4:2d:40:c8:de:a3:47:87:b7:
1f:b3:0d:0c:fe:27:06:09:3e:e3:88:65:62:e7:06:a6:c8:74:
8f:f1:27:02:e2:a7:a9:a5:b3:85:a9:02:6a:4b:8e:1d:54:bc:
2a:72:7e:91:11:c0:c3:f8:fc:71:7f:3e:da:bd:ab:91:93:11:
a5:44:2a:37:e8:1c:05:70:38:9c:50:ce:c9:de:2d:b1:a6:52:
49:7b:c6:39:44:4d:f5:b6:75:6b:81:42:63:2c:ae:0c:e0:df:
10:50:f4:c1:cf:fb:b9:52:74:68:21:b0:a6:6c:58:82:de:c1:
cc:bb:09:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 07:53:07 2026 by rpki-client