Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: 0IdZCeVACY0XNPGnV6D6vZTe6oRSPyFW3XyJrSlbSxk=
Subject key identifier: EA:F5:E0:C2:06:EA:E2:6F:12:CC:B4:9D:9F:E3:43:14:D8:55:65:37
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7D477DEE0FBC791B5F26F3C3EBDF5817D861B4BF
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152179.roa
Signing time: Fri 18 Sep 2026 12:40:09 +0000
ROA not before: Fri 18 Sep 2026 12:35:09 +0000
ROA not after: Fri 17 Sep 2027 12:40:09 +0000
asID: 152179
IP address blocks: 130.185.127.0/24 maxlen: 24
179.61.173.0/24 maxlen: 24
181.214.2.0/24 maxlen: 24
181.214.33.0/24 maxlen: 24
181.214.75.0/24 maxlen: 24
181.214.132.0/24 maxlen: 24
181.214.185.0/24 maxlen: 24
181.214.205.0/24 maxlen: 24
181.214.250.0/24 maxlen: 24
181.215.127.0/24 maxlen: 24
181.215.136.0/24 maxlen: 24
181.215.148.0/24 maxlen: 24
181.215.154.0/24 maxlen: 24
181.215.239.0/24 maxlen: 24
185.173.27.0/24 maxlen: 24
194.53.142.0/24 maxlen: 24
2a03:fbc0::/29 maxlen: 48
2a0e:1c00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:24:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:47:7d:ee:0f:bc:79:1b:5f:26:f3:c3:eb:df:58:17:d8:61:b4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 18 12:35:09 2026 GMT
Not After : Sep 17 12:40:09 2027 GMT
Subject: CN=EAF5E0C206EAE26F12CCB49D9FE34314D8556537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:d7:02:09:54:f3:52:9a:85:dc:f0:24:c6:
3d:4e:e6:fa:01:16:93:4f:62:2c:79:b3:19:84:49:
75:60:5a:a8:11:97:1a:22:7f:0f:6e:4d:7b:4b:e9:
65:9e:af:0e:76:5e:0c:46:12:82:f7:d4:60:2a:de:
2b:8b:84:e4:3a:46:eb:a0:ce:50:80:c7:66:e9:7c:
34:ff:56:3c:bf:11:4e:4c:e4:74:7b:da:6e:6b:83:
e4:71:56:21:7c:1f:70:54:07:4a:14:9e:aa:88:9a:
6e:f6:7a:d1:d7:f2:2c:de:fa:90:75:59:d2:5f:a7:
a1:28:56:d9:31:bc:d8:b4:91:5d:54:df:bd:07:03:
1d:a1:76:39:0a:85:52:32:4c:f3:d6:f3:22:84:54:
b4:d5:57:d6:ea:ba:1a:a4:6b:8e:01:fd:5c:52:d8:
78:90:f7:52:cf:e0:d5:ed:01:86:09:f5:01:ab:8a:
5d:b4:34:0c:99:2c:1e:93:cc:07:40:3c:ca:68:8f:
4e:fa:cd:72:d0:05:3b:01:d0:50:d8:d3:89:c2:bb:
8d:bb:49:40:50:d0:90:56:4f:89:2d:52:d8:ee:bd:
98:d1:b8:01:a4:e2:e6:69:d7:e9:d7:3e:93:5a:d9:
ea:88:36:59:50:c4:cf:75:ab:5f:8e:a8:5f:d2:c3:
00:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F5:E0:C2:06:EA:E2:6F:12:CC:B4:9D:9F:E3:43:14:D8:55:65:37
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.127.0/24
179.61.173.0/24
181.214.2.0/24
181.214.33.0/24
181.214.75.0/24
181.214.132.0/24
181.214.185.0/24
181.214.205.0/24
181.214.250.0/24
181.215.127.0/24
181.215.136.0/24
181.215.148.0/24
181.215.154.0/24
181.215.239.0/24
185.173.27.0/24
194.53.142.0/24
IPv6:
2a03:fbc0::/29
2a0e:1c00::/29
Signature Algorithm: sha256WithRSAEncryption
9a:ca:5a:38:f5:6d:2f:dc:cf:02:87:c4:4d:5e:f3:bd:7c:ac:
60:20:de:02:73:08:f7:56:a1:29:21:29:02:60:fd:69:e8:70:
9d:3c:37:37:f4:cc:c7:bc:90:e7:21:6e:88:bc:60:31:84:cf:
e4:82:11:e8:78:19:00:e1:98:ff:01:54:40:bc:92:77:3e:92:
88:51:d6:17:20:d5:eb:a4:dd:40:1e:d0:2d:7a:a8:e6:ca:dc:
8d:5c:d0:8e:0a:00:44:e3:7c:4c:38:38:b4:aa:73:ad:ba:c4:
2c:58:ea:07:e9:19:67:eb:43:9f:2b:f5:cc:e5:1b:4f:d2:89:
f9:b8:98:fa:b8:c9:7f:13:c6:ef:0f:13:de:6a:9f:80:09:0f:
55:72:9a:7d:f2:de:7a:bd:18:62:ad:5d:39:11:aa:39:26:d1:
93:7e:20:77:cd:06:33:9c:af:3f:f3:73:d7:47:82:79:0b:81:
3b:63:b3:07:29:65:15:60:ec:a6:1e:a0:4f:d1:c5:c0:9c:a2:
c2:bc:24:b4:c0:f5:44:47:4f:00:c7:c1:4b:ee:6b:14:70:45:
a5:d6:5b:df:ac:de:98:d9:d0:76:42:f4:2f:62:f5:4e:2d:d2:
eb:40:6b:25:a6:ca:9d:91:37:7f:b7:d0:20:06:dc:aa:32:c9:
87:76:94:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:55:37 2026 by rpki-client