Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS152606.roa
File: AS152606.roa (raw, json)
Hash identifier: iGI1Np/M1TBDls+iFTUy6+k8iT/zadCGcsjw/ryRFss=
Subject key identifier: 83:2D:7F:F1:DA:5A:B0:B5:8C:19:4D:FD:04:C7:D7:5D:DF:18:D7:B4
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 06422D4D640AFB7A3A67624CF08942B40ABC314A
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS152606.roa
Signing time: Wed 28 Oct 2026 11:11:30 +0000
ROA not before: Wed 28 Oct 2026 11:06:30 +0000
ROA not after: Wed 27 Oct 2027 11:11:30 +0000
asID: 152606
IP address blocks: 212.17.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:42:2d:4d:64:0a:fb:7a:3a:67:62:4c:f0:89:42:b4:0a:bc:31:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Oct 28 11:06:30 2026 GMT
Not After : Oct 27 11:11:30 2027 GMT
Subject: CN=832D7FF1DA5AB0B58C194DFD04C7D75DDF18D7B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5f:64:57:ca:7a:1d:a5:db:e6:92:e9:92:97:
8f:d1:55:d7:87:0a:a2:b9:bd:a2:bd:f4:d8:64:5a:
56:19:ac:d9:dc:00:5e:ce:bb:d6:c7:4e:11:2c:a3:
c0:ed:07:0d:15:90:66:7f:c3:30:42:ed:38:8c:a7:
7c:ff:e3:26:93:c1:42:45:3d:b5:ab:bb:f2:c7:50:
1a:87:67:b2:c9:22:34:cc:80:f2:dc:8f:80:31:c9:
8f:e7:dc:09:9e:17:12:0c:b3:0f:5e:b9:fd:a9:c1:
79:ff:c4:76:d2:4a:2b:fc:9f:81:83:26:0b:f0:61:
77:50:98:00:bc:ec:2d:a0:fb:44:d8:87:51:94:2a:
9d:48:2a:1f:42:a1:9b:fb:46:a2:96:15:e5:db:1b:
ba:f5:63:99:44:77:29:75:c3:a9:3f:fc:3b:fa:68:
43:28:02:13:61:6b:77:43:70:84:54:50:8c:27:2d:
81:cc:01:63:1a:fa:4a:64:9f:e1:ba:8d:c8:aa:fc:
cd:14:47:a8:f5:2b:de:51:a7:6d:6f:8e:f1:1a:60:
92:e6:b4:d6:25:d0:de:e4:10:0e:ba:01:7e:03:6e:
28:c5:18:0a:7a:87:a6:20:91:49:da:ee:e1:f3:56:
34:e1:f3:33:d3:d8:31:ec:05:04:d3:a8:be:79:cf:
b6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2D:7F:F1:DA:5A:B0:B5:8C:19:4D:FD:04:C7:D7:5D:DF:18:D7:B4
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS152606.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.17.234.0/24
Signature Algorithm: sha256WithRSAEncryption
41:74:63:bc:79:aa:06:e3:8f:0c:0e:b9:71:e7:c6:bd:1b:97:
07:91:99:3e:ba:aa:21:11:c8:a7:7b:c8:5c:fa:e5:3c:9d:ae:
6c:75:5e:ec:7d:65:3f:d2:7d:e5:de:5e:ac:18:fb:00:a0:a5:
bd:4a:27:d3:a2:71:7d:fa:e6:52:1a:61:f4:07:9c:1e:ed:38:
6b:2e:5b:52:c2:ce:5a:ff:ef:82:e5:e6:d0:7d:a7:b0:b0:bf:
8e:e2:a2:c3:78:72:58:d8:b5:75:73:85:18:c1:70:2c:33:39:
25:9f:27:7e:1e:33:68:1a:bf:0b:07:fe:5f:e0:c6:96:3c:12:
15:ff:f4:93:85:cf:43:24:45:cc:5f:6b:a1:7e:b8:9e:6d:4e:
e5:cb:bd:ef:1f:0d:15:7d:4a:29:20:59:10:d7:83:04:61:72:
3d:d1:6d:d1:f2:9f:34:c9:e1:b1:aa:d5:71:c9:e1:93:26:6e:
06:32:3e:68:ac:bf:21:fb:af:cd:bb:61:f3:43:71:c5:5c:91:
eb:91:11:97:ac:7c:8d:40:ce:97:76:84:24:cc:63:d2:1a:0a:
cf:e9:08:a8:a0:c6:2f:e2:41:96:cf:3b:11:81:3e:cc:76:bf:
c3:6c:7b:54:f9:56:b0:8e:94:e9:4f:e9:3e:ed:98:a2:0f:6c:
19:09:72:b1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUBkItTWQK+3o6Z2JM8IlCtAq8MUowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNjEwMjgxMTA2MzBaFw0yNzEwMjcxMTExMzBaMDMxMTAvBgNV
BAMTKDgzMkQ3RkYxREE1QUIwQjU4QzE5NERGRDA0QzdENzVEREYxOEQ3QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBX2RXynodpdvmkumSl4/RVdeH
CqK5vaK99NhkWlYZrNncAF7Ou9bHThEso8DtBw0VkGZ/wzBC7TiMp3z/4yaTwUJF
PbWru/LHUBqHZ7LJIjTMgPLcj4AxyY/n3AmeFxIMsw9euf2pwXn/xHbSSiv8n4GD
JgvwYXdQmAC87C2g+0TYh1GUKp1IKh9CoZv7RqKWFeXbG7r1Y5lEdyl1w6k//Dv6
aEMoAhNha3dDcIRUUIwnLYHMAWMa+kpkn+G6jciq/M0UR6j1K95Rp21vjvEaYJLm
tNYl0N7kEA66AX4DbijFGAp6h6YgkUna7uHzVjTh8zPT2DHsBQTTqL55z7b9AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUgy1/8dpasLWMGU39BMfXXd8Y17QwHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt
NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMTUyNjA2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BHq
MA0GCSqGSIb3DQEBCwUAA4IBAQBBdGO8eaoG448MDrlx58a9G5cHkZk+uqohEcin
e8hc+uU8na5sdV7sfWU/0n3l3l6sGPsAoKW9SifTonF9+uZSGmH0B5we7ThrLltS
ws5a/++C5ebQfaewsL+O4qLDeHJY2LV1c4UYwXAsMzklnyd+HjNoGr8LB/5f4MaW
PBIV//SThc9DJEXMX2uhfriebU7ly73vHw0VfUopIFkQ14MEYXI90W3R8p80yeGx
qtVxyeGTJm4GMj5orL8h+6/Nu2HzQ3HFXJHrkRGXrHyNQM6XdoQkzGPSGgrP6Qio
oMYv4kGWzzsRgT7Mdr/DbHtU+VawjpTpT+k+7ZiiD2wZCXKx
-----END CERTIFICATE-----
Generated at Thu Nov 5 16:46:26 2026 by rpki-client