Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152698.roa
File: AS152698.roa (raw, json)
Hash identifier: IbqyYyd6L/eZhNaIASi/wD8uIpv1D8RD5UP6fYVX+bo=
Subject key identifier: 05:60:F2:E2:31:33:16:1D:9F:F3:10:70:31:F3:52:84:70:6F:E0:5A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0E75E70DD9E76266E6107654903CD9D0A38232D0
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152698.roa
Signing time: Mon 14 Sep 2026 07:06:49 +0000
ROA not before: Mon 14 Sep 2026 07:01:49 +0000
ROA not after: Mon 13 Sep 2027 07:06:49 +0000
asID: 152698
IP address blocks: 181.214.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:75:e7:0d:d9:e7:62:66:e6:10:76:54:90:3c:d9:d0:a3:82:32:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 14 07:01:49 2026 GMT
Not After : Sep 13 07:06:49 2027 GMT
Subject: CN=0560F2E23133161D9FF3107031F35284706FE05A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c8:63:2d:56:10:cf:fe:c8:4c:e7:3f:04:1a:
08:b7:0c:aa:79:7f:22:54:34:bb:54:fc:c3:19:ec:
4d:25:8f:23:64:7f:5c:ec:57:c5:fb:d2:e7:2c:84:
af:29:aa:a5:9e:17:e7:6b:de:7a:ed:42:1f:f2:a2:
08:4f:15:92:8e:8f:ee:1f:6d:9c:8e:f5:0d:42:f3:
96:ff:50:10:54:25:52:c2:16:1d:5c:62:83:af:88:
22:21:ae:30:26:5a:22:b0:01:76:bd:2b:7c:01:fc:
c3:e0:7a:e0:0c:98:32:7f:d6:af:40:55:0f:23:3f:
3e:cf:61:9f:29:b0:cf:b9:2c:69:e0:da:52:39:27:
e5:88:9b:49:7c:e3:77:e3:e6:7a:52:e1:55:d0:55:
21:d8:93:f3:58:04:4a:66:d8:2f:07:ad:30:d5:9d:
1c:11:22:f2:80:b3:ce:b2:9d:10:8c:cc:69:5b:05:
2b:8f:2f:6f:76:82:be:1a:49:9c:28:73:77:d8:ca:
96:ba:61:5d:45:5f:23:1c:52:f2:6d:a4:83:b8:a2:
51:10:01:40:93:23:41:ee:ea:83:31:9a:8d:eb:e3:
67:51:5d:44:5a:ed:8f:60:1f:c8:08:0f:56:0d:95:
dd:54:ff:c4:d9:50:8d:83:b0:67:73:cc:f1:0d:98:
34:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:60:F2:E2:31:33:16:1D:9F:F3:10:70:31:F3:52:84:70:6F:E0:5A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152698.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.4.0/24
Signature Algorithm: sha256WithRSAEncryption
af:32:48:3f:81:b2:67:82:48:4d:93:fe:5d:cb:ef:18:70:56:
a3:a4:4f:c3:77:cd:50:82:3c:3c:cf:2b:7b:29:53:7b:0e:17:
ee:27:71:48:da:d6:ba:17:96:a7:0c:74:f5:b0:d6:44:dc:c6:
fd:3b:28:90:1b:24:59:42:f5:29:89:f9:1f:d7:91:a0:36:3f:
dc:cc:03:99:5c:17:7a:bd:e7:23:6e:57:90:49:cf:0f:b7:37:
d7:5d:65:06:05:c5:ac:b8:3a:83:c9:ae:bf:82:84:a0:41:c3:
e6:f0:d9:2b:88:eb:91:8e:a2:20:6c:1f:e9:14:34:fc:ad:14:
bd:18:97:d6:f7:c4:2a:16:80:d3:e1:99:d8:2c:76:66:7b:75:
1a:4a:39:d6:85:4d:bb:18:a9:c1:fd:4e:fd:da:35:9c:23:52:
35:a7:99:df:a5:6e:4e:c4:55:b4:6e:09:92:ff:e8:70:9f:d3:
0b:14:87:00:6e:6f:e2:2b:8e:85:4d:36:80:ef:50:e8:b7:32:
76:58:b1:c5:3b:66:bf:a7:1a:c5:92:eb:5f:fe:ac:99:e8:9a:
13:f8:71:aa:6e:7e:06:00:1f:61:a3:28:70:0d:89:f4:cf:88:
99:36:a4:37:39:94:5b:69:ed:a6:8a:cc:3d:6c:89:ca:44:6d:
fe:f1:24:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:28:56 2026 by rpki-client