Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152698.roa
File: AS152698.roa (raw, json)
Hash identifier: 5hGgQq3UOl63D+qen/U6o9XmDd8Igt7X02A8J05ntU0=
Subject key identifier: 94:AF:AA:6E:7F:20:25:A2:2F:8D:D7:02:EB:9C:F0:28:1D:0E:25:92
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 10EDB7AE668A00D4ECD6E0561CA11F011BB6AB3A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152698.roa
Signing time: Thu 10 Sep 2026 11:20:12 +0000
ROA not before: Thu 10 Sep 2026 11:15:12 +0000
ROA not after: Thu 09 Sep 2027 11:20:12 +0000
asID: 152698
IP address blocks: 162.141.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ed:b7:ae:66:8a:00:d4:ec:d6:e0:56:1c:a1:1f:01:1b:b6:ab:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 10 11:15:12 2026 GMT
Not After : Sep 9 11:20:12 2027 GMT
Subject: CN=94AFAA6E7F2025A22F8DD702EB9CF0281D0E2592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d5:28:64:df:7b:d8:46:9b:16:f9:81:c1:dd:
0e:bb:6c:db:5e:3e:65:b7:ec:d8:9f:a5:9b:43:4a:
d0:7d:2d:63:b0:3a:9f:22:bc:26:8e:2c:8c:63:92:
9a:ed:49:50:d2:89:f9:6d:4e:bf:00:65:ec:42:8a:
fe:cb:bd:cb:0e:98:15:a1:b8:fa:d0:36:b9:0e:56:
33:ce:d9:fb:3e:57:15:24:f9:30:e7:46:19:18:3e:
ca:6e:4e:4b:40:6d:1d:dc:d8:f8:67:35:51:c1:d3:
ab:8d:af:e8:51:20:a9:62:01:76:f9:1e:32:f1:14:
a4:b1:2d:31:49:f2:cd:ee:c7:72:d1:45:2f:9b:83:
ac:ad:85:6a:9f:aa:e9:26:f9:56:29:b2:f1:e8:59:
8a:c3:ae:ae:2c:e8:a6:a7:9b:96:b3:16:d9:0e:8e:
a7:44:59:c6:e2:bc:00:e9:fa:56:62:cc:39:11:bc:
50:41:ce:c9:64:83:7f:17:ca:e0:57:68:13:1f:c7:
e2:c9:75:18:77:e5:2b:d9:f9:f1:3d:b4:b9:c9:df:
0b:9b:9e:50:ba:a5:c5:0f:a9:5a:30:e9:5e:ad:c9:
5f:54:0d:6f:c5:04:0e:ec:5c:44:37:06:0c:87:54:
71:65:2e:90:ef:ed:38:16:6c:85:a1:9e:c1:6a:f9:
78:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AF:AA:6E:7F:20:25:A2:2F:8D:D7:02:EB:9C:F0:28:1D:0E:25:92
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152698.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.69.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:36:3f:96:c2:54:74:78:f7:0b:c4:1d:27:f9:32:3c:4f:f2:
b6:58:a2:96:10:99:e7:7c:7d:1e:41:94:3b:ec:75:c5:ae:f2:
94:f4:f3:75:9d:5e:5a:04:45:62:60:53:2e:78:ef:e0:51:57:
2f:12:8a:40:c4:4b:78:97:13:93:46:14:58:95:9c:e1:20:0f:
af:7f:99:78:f3:a8:ff:e7:3d:92:cc:e6:70:62:ff:cd:fc:61:
c9:df:7f:55:77:12:c3:2b:b1:7e:4e:07:6a:90:95:d0:df:dc:
f7:7a:fd:17:9f:70:18:da:b0:ef:cf:f2:71:ed:4d:9c:84:cc:
a5:ea:cd:11:7b:db:20:1d:0a:69:cd:c0:ca:02:4c:4c:02:30:
5c:e7:c0:1b:af:48:81:27:49:07:32:50:2c:90:66:b3:3a:43:
08:f2:34:3b:5a:5d:d7:20:8b:77:74:a0:a6:5c:07:7a:45:f8:
1b:0d:8e:7f:27:43:b6:bd:96:de:28:20:89:55:d1:65:25:1a:
1b:6f:f3:c5:5c:a1:7b:b3:e5:97:ab:b2:15:a1:9f:fc:fe:16:
5f:89:5f:d2:1a:62:4d:43:25:2b:ce:c0:4c:44:3a:24:8b:74:
a3:dc:94:e8:1e:28:59:8d:bd:33:22:ad:2b:6e:03:fb:21:77:
e5:ad:a7:41
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUEO23rmaKANTs1uBWHKEfARu2qzowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA5MTAxMTE1MTJaFw0yNzA5MDkxMTIwMTJaMDMxMTAvBgNV
BAMTKDk0QUZBQTZFN0YyMDI1QTIyRjhERDcwMkVCOUNGMDI4MUQwRTI1OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD1Shk33vYRpsW+YHB3Q67bNte
PmW37NifpZtDStB9LWOwOp8ivCaOLIxjkprtSVDSifltTr8AZexCiv7LvcsOmBWh
uPrQNrkOVjPO2fs+VxUk+TDnRhkYPspuTktAbR3c2PhnNVHB06uNr+hRIKliAXb5
HjLxFKSxLTFJ8s3ux3LRRS+bg6ythWqfqukm+VYpsvHoWYrDrq4s6Kanm5azFtkO
jqdEWcbivADp+lZizDkRvFBBzslkg38XyuBXaBMfx+LJdRh35SvZ+fE9tLnJ3wub
nlC6pcUPqVow6V6tyV9UDW/FBA7sXEQ3BgyHVHFlLpDv7TgWbIWhnsFq+XjPAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUlK+qbn8gJaIvjdcC65zwKB0OJZIwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTUyNjk4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoo1F
MA0GCSqGSIb3DQEBCwUAA4IBAQBMNj+WwlR0ePcLxB0n+TI8T/K2WKKWEJnnfH0e
QZQ77HXFrvKU9PN1nV5aBEViYFMueO/gUVcvEopAxEt4lxOTRhRYlZzhIA+vf5l4
86j/5z2SzOZwYv/N/GHJ339VdxLDK7F+TgdqkJXQ39z3ev0Xn3AY2rDvz/Jx7U2c
hMyl6s0Re9sgHQppzcDKAkxMAjBc58Abr0iBJ0kHMlAskGazOkMI8jQ7Wl3XIIt3
dKCmXAd6RfgbDY5/J0O2vZbeKCCJVdFlJRobb/PFXKF7s+WXq7IVoZ/8/hZfiV/S
GmJNQyUrzsBMRDoki3Sj3JToHihZjb0zIq0rbgP7IXflradB
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:46:15 2026 by rpki-client