Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: HJIlE6MGCNJIV5z9e/WL+RpyB+JRxljp+hlFpaepMq0=
Subject key identifier: F4:FB:61:87:C8:28:94:88:53:8D:88:28:9E:3A:50:93:31:80:58:7B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4216539F57FEFC18FFB3660AC3571B483AD47570
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152179.roa
Signing time: Sun 20 Sep 2026 14:45:15 +0000
ROA not before: Sun 20 Sep 2026 14:40:15 +0000
ROA not after: Sun 19 Sep 2027 14:45:15 +0000
asID: 152179
IP address blocks: 64.239.68.0/24 maxlen: 24
66.132.155.0/24 maxlen: 24
66.132.184.0/24 maxlen: 24
66.132.192.0/24 maxlen: 24
66.132.193.0/24 maxlen: 24
66.234.11.0/24 maxlen: 24
69.90.116.0/24 maxlen: 24
143.14.76.0/24 maxlen: 24
146.103.16.0/23 maxlen: 24
147.79.63.0/24 maxlen: 24
148.135.173.0/24 maxlen: 24
150.241.129.0/24 maxlen: 24
155.117.86.0/24 maxlen: 24
155.117.118.0/24 maxlen: 24
155.117.119.0/24 maxlen: 24
155.117.168.0/24 maxlen: 24
155.117.202.0/24 maxlen: 24
155.117.220.0/24 maxlen: 24
162.141.130.0/24 maxlen: 24
167.148.189.0/24 maxlen: 24
167.148.197.0/24 maxlen: 24
168.222.91.0/24 maxlen: 24
168.222.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:16:53:9f:57:fe:fc:18:ff:b3:66:0a:c3:57:1b:48:3a:d4:75:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 20 14:40:15 2026 GMT
Not After : Sep 19 14:45:15 2027 GMT
Subject: CN=F4FB6187C8289488538D88289E3A50933180587B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f9:82:68:4f:3d:02:05:a9:7a:8a:8b:fd:ac:
13:9a:2b:05:e5:2c:07:da:2c:90:fb:11:8c:2d:f0:
40:45:47:73:fa:95:0d:4a:f0:12:a9:77:b4:2f:5b:
82:3d:cb:56:fc:3d:28:67:ec:09:a5:e0:58:14:bf:
12:c4:d2:fa:a5:69:bd:03:d7:20:a8:d6:7c:80:22:
d4:7b:98:b6:8d:be:c0:64:bb:02:7e:d8:b0:92:66:
81:ed:7d:51:ff:1f:b0:39:a8:57:51:29:8d:40:1d:
9e:13:c8:b5:f4:4f:8d:86:7a:ee:41:48:78:05:ce:
44:10:9f:53:64:a4:85:5d:ee:6c:70:ed:22:cd:7c:
46:10:83:0d:3f:d9:ad:b8:ad:46:dd:5d:62:e4:3e:
3c:0d:4f:f8:c0:63:ef:99:e1:1c:0f:51:ca:97:c8:
33:24:34:aa:90:b9:19:ea:7b:bf:0e:1c:fa:b2:02:
b8:4f:85:7d:64:bf:71:e6:88:ae:bb:15:1d:bf:6d:
f1:e4:ea:38:24:21:6b:3f:21:8d:70:e2:f0:4f:70:
91:f7:9a:22:39:78:b8:28:ca:cf:18:6c:fe:1b:7c:
f8:45:96:06:26:ca:24:3f:69:c6:5b:e5:a1:1d:25:
a5:1e:f3:37:a6:e9:14:a7:92:62:e0:d9:be:d2:3c:
c4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FB:61:87:C8:28:94:88:53:8D:88:28:9E:3A:50:93:31:80:58:7B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.239.68.0/24
66.132.155.0/24
66.132.184.0/24
66.132.192.0/23
66.234.11.0/24
69.90.116.0/24
143.14.76.0/24
146.103.16.0/23
147.79.63.0/24
148.135.173.0/24
150.241.129.0/24
155.117.86.0/24
155.117.118.0/23
155.117.168.0/24
155.117.202.0/24
155.117.220.0/24
162.141.130.0/24
167.148.189.0/24
167.148.197.0/24
168.222.91.0/24
168.222.119.0/24
Signature Algorithm: sha256WithRSAEncryption
64:43:f3:df:88:f3:71:18:72:9b:fd:fc:b7:50:a7:d2:8a:8e:
72:15:a6:73:c9:7c:c4:8c:a5:f1:60:64:e8:2a:91:6a:a7:e7:
be:14:05:5e:2a:b7:c6:12:b6:db:d8:bb:c6:86:86:93:cd:a3:
19:86:f1:f8:ce:27:e1:4e:e3:03:b9:ec:74:ec:a3:48:92:3d:
2d:41:df:dc:20:97:cc:39:ad:02:b4:e9:22:f8:53:15:38:48:
5f:22:79:75:7a:84:c9:71:12:5f:77:a6:d9:86:b5:3a:7e:54:
91:28:eb:c6:0a:55:a4:36:c8:c3:2f:bb:d0:a4:8f:da:27:cb:
9d:bb:d1:57:c1:d4:5c:58:bf:29:4b:1a:0e:b8:7b:9d:b0:e1:
fb:5c:66:c1:b8:9f:73:f2:c8:7f:01:7a:68:a5:84:08:3b:0e:
0e:38:6d:74:98:4c:05:8a:2c:d4:27:ca:b8:14:af:bc:20:04:
e7:85:39:56:bb:1f:fb:7f:9a:e6:c7:0a:54:2b:64:b3:ce:d6:
ed:22:55:c8:c3:bb:f9:f3:c5:1c:ae:96:2b:42:78:27:c1:5e:
44:d7:32:2c:57:c7:cf:8f:49:f0:6d:85:97:dd:43:ca:41:bc:
71:83:b5:8c:80:ac:31:f6:85:b9:e8:9e:11:7e:a3:3f:8f:e1:
b7:77:00:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:14:06 2026 by rpki-client