Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152868.roa
File: AS152868.roa (raw, json)
Hash identifier: nJYSLD37xPLvklUZMPw4CJCsKkj1740uKY83lcclp5U=
Subject key identifier: BA:CE:03:B7:A6:F0:A7:C6:D9:38:30:82:70:41:89:1F:2D:15:92:FD
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 679ACD08092BD09716F1A54715117E0384E98CE3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152868.roa
Signing time: Sun 20 Sep 2026 10:30:26 +0000
ROA not before: Sun 20 Sep 2026 10:25:26 +0000
ROA not after: Sun 19 Sep 2027 10:30:26 +0000
asID: 152868
IP address blocks: 64.226.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:9a:cd:08:09:2b:d0:97:16:f1:a5:47:15:11:7e:03:84:e9:8c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 20 10:25:26 2026 GMT
Not After : Sep 19 10:30:26 2027 GMT
Subject: CN=BACE03B7A6F0A7C6D93830827041891F2D1592FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:af:5a:7e:f5:52:8a:fe:91:25:6d:69:8c:5f:
89:9a:24:05:d2:a5:8e:c0:7d:43:15:83:3c:88:a0:
fd:91:18:95:67:aa:a5:bf:65:6b:e9:05:e4:cd:bc:
cc:69:f6:fe:67:a2:da:77:f7:fd:fc:5a:de:56:f9:
95:8f:9f:29:00:1a:d1:dc:26:a0:12:a8:d2:46:b8:
d7:0f:3b:5f:ba:45:26:56:12:b8:74:76:11:d9:48:
cd:72:e9:8c:26:01:ab:20:0d:92:8d:97:92:11:be:
6c:c2:89:b9:9e:2c:85:ed:8e:de:76:e4:4a:7e:19:
4d:4e:67:7e:16:95:89:f8:04:7b:63:60:ee:cb:67:
53:f4:cb:ae:55:6e:e8:8a:bf:5b:4b:87:76:09:7a:
e6:a0:45:3c:26:88:50:82:03:8a:b9:ff:cb:fd:f4:
6e:c4:0b:97:ff:6c:89:8e:7c:bd:01:31:28:bb:f1:
b4:47:21:c3:21:9d:79:fb:27:73:09:a2:fd:97:2b:
d6:f6:d2:b1:ff:fa:5f:48:74:37:17:ef:ae:3c:b5:
b3:f4:6a:ad:ae:93:3f:b1:06:5d:90:82:70:51:e2:
57:f2:48:f2:1c:a7:01:35:f2:99:e6:37:ac:39:8e:
a0:d2:00:e5:13:e0:b7:8e:16:8c:c1:cc:7f:45:ef:
c8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CE:03:B7:A6:F0:A7:C6:D9:38:30:82:70:41:89:1F:2D:15:92:FD
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152868.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.226.206.0/24
Signature Algorithm: sha256WithRSAEncryption
24:ba:3a:4a:5e:86:cc:07:2c:23:ed:c6:e5:34:fa:af:ed:e9:
69:41:33:95:95:64:d5:75:b6:05:25:f7:a8:f8:30:be:08:40:
55:98:a3:24:f9:1c:83:3d:c5:2f:80:6e:b2:4d:d4:c1:9c:d9:
c7:44:ca:3e:02:30:c5:1a:77:d4:04:a7:b8:bb:b3:15:71:1e:
27:3c:dc:41:22:5a:cb:61:87:c5:40:6f:d4:3a:d7:cd:a0:7d:
11:21:e9:28:a6:25:d0:84:b3:0d:fb:a8:4d:fb:31:a6:e4:35:
95:5a:bf:26:8a:5a:d5:73:54:1e:22:8c:dd:b1:6a:d6:69:d2:
d7:d1:72:16:12:6c:14:d2:1a:19:27:d2:8c:9f:51:8e:f1:16:
fa:44:be:08:32:41:3a:49:8e:04:85:0f:fd:0c:bb:b4:8c:6e:
c0:eb:3f:b4:4e:08:3e:a1:a9:6e:64:09:f1:5e:78:0c:fa:4a:
cb:4a:fc:7f:04:26:49:fe:58:73:0a:8f:36:95:a7:25:5b:22:
5f:cf:d4:5e:58:af:5e:24:cf:7c:9b:73:0f:9a:cf:29:28:d7:
b8:7f:58:d0:aa:11:72:eb:5c:90:de:f2:18:e4:f3:9a:9d:4c:
00:8c:a7:57:89:05:5b:85:fd:70:42:93:cd:6c:cf:89:4d:5b:
dc:b5:24:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:02:33 2026 by rpki-client