Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152606.roa
File: AS152606.roa (raw, json)
Hash identifier: WISawu0GBoy3vke0FjcgVZrs+3c1OIFcL9dY2WlVLno=
Subject key identifier: 7D:CD:89:7D:7E:69:E3:3C:32:EC:E5:C4:87:E9:0D:D2:D6:78:CB:EE
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3399EBC40AF5CA47701B6A3E1002DDD15AB56672
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152606.roa
Signing time: Wed 28 Oct 2026 11:11:33 +0000
ROA not before: Wed 28 Oct 2026 11:06:33 +0000
ROA not after: Wed 27 Oct 2027 11:11:33 +0000
asID: 152606
IP address blocks: 45.95.23.0/24 maxlen: 24
89.19.46.0/24 maxlen: 24
92.119.35.0/24 maxlen: 24
191.96.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:99:eb:c4:0a:f5:ca:47:70:1b:6a:3e:10:02:dd:d1:5a:b5:66:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 28 11:06:33 2026 GMT
Not After : Oct 27 11:11:33 2027 GMT
Subject: CN=7DCD897D7E69E33C32ECE5C487E90DD2D678CBEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c6:6d:2c:49:9f:8e:73:4d:40:9b:c6:f6:ad:
49:f5:6b:e1:2e:ce:c3:05:4e:ad:43:bc:e1:de:90:
c6:bd:98:3e:7e:b8:2f:3b:21:a7:b0:85:9a:20:0d:
7b:78:0f:92:22:99:ec:72:7c:b7:14:f1:8a:8d:3b:
3c:3e:19:26:d6:ff:f0:56:3d:09:df:d1:d0:76:14:
d1:52:6b:4c:44:08:56:40:02:bb:b4:67:1b:a9:f5:
78:a2:6b:96:fb:72:13:00:f3:b9:da:09:19:27:df:
a2:b2:f4:d5:03:d2:8f:59:a2:94:fa:81:c6:20:a2:
cb:81:87:80:95:58:ab:64:e5:62:08:3f:6d:3f:af:
e1:05:8b:e7:f3:09:a0:0b:94:19:ec:8d:5a:e2:30:
da:9c:00:82:03:14:1c:35:11:f6:16:11:83:8d:57:
dd:56:1c:67:f1:a9:86:02:14:e4:42:f4:23:1a:b8:
a6:b1:6c:e6:bb:2d:7e:8a:87:a5:c6:c4:a7:1d:49:
42:79:9a:79:26:63:61:4a:a6:1e:02:ae:ec:e9:be:
f0:1a:c8:c6:fa:59:24:cd:15:d5:55:a7:a6:b7:6b:
aa:45:c2:d5:fa:b8:74:06:57:8a:8f:33:22:e0:84:
2b:82:f4:9b:fd:4b:ef:c1:ee:7c:f7:03:25:33:44:
14:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CD:89:7D:7E:69:E3:3C:32:EC:E5:C4:87:E9:0D:D2:D6:78:CB:EE
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152606.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.23.0/24
89.19.46.0/24
92.119.35.0/24
191.96.3.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:a7:9d:39:c1:33:ff:96:fe:5c:e2:92:f0:7c:60:3f:f5:df:
b0:d6:87:e1:51:3e:7f:25:cb:2d:c1:66:0d:27:64:b9:6a:86:
f9:2a:bd:cc:5c:22:94:c8:a1:ee:f8:ec:92:72:5b:02:61:20:
f4:58:c7:2d:cd:c2:a3:06:43:58:fd:af:47:34:be:d3:c1:93:
dc:47:8a:52:2b:e6:dc:75:29:7b:94:e7:98:73:f8:bf:04:64:
07:89:8b:be:80:86:7f:e8:46:9d:38:bd:79:03:d9:87:a2:45:
dd:83:e6:25:3d:06:d6:0f:b3:af:f5:33:a0:a3:d0:7b:f6:12:
3f:d4:f7:ea:74:ab:b0:3c:9a:43:88:95:1a:cd:29:91:09:02:
a5:4c:2c:89:fd:79:7a:65:6e:9e:ec:7b:bf:36:da:18:52:cf:
28:32:1c:6e:46:22:de:42:d9:a9:b8:49:17:e4:a9:ea:93:b4:
98:ba:cd:80:7d:53:c6:22:f1:44:d5:f0:33:83:ab:08:36:93:
19:84:83:f6:9b:60:20:f8:b3:d2:a2:28:00:70:0b:ce:5c:f9:
b2:96:08:55:e8:77:35:af:65:8a:bc:94:4d:bf:76:19:66:12:
6c:0e:7b:27:86:fc:02:7b:85:4a:1e:01:1e:c4:9d:7c:95:08:
b5:28:be:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:54:23 2026 by rpki-client