Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152726.roa
File: AS152726.roa (raw, json)
Hash identifier: ZbV+njcS40wK7h3FutL6pms0uJGlKlXj2yDI3vL3CDM=
Subject key identifier: 21:5E:4B:82:BE:56:B8:0D:E6:4C:A4:34:A3:50:3B:90:E0:AC:08:B1
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7DA45EC71BE82FBDBCBB5DB7E0FB8BF91DA64459
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152726.roa
Signing time: Tue 27 Oct 2026 08:17:39 +0000
ROA not before: Tue 27 Oct 2026 08:12:39 +0000
ROA not after: Tue 26 Oct 2027 08:17:39 +0000
asID: 152726
IP address blocks: 45.89.253.0/24 maxlen: 24
45.93.44.0/24 maxlen: 24
45.95.22.0/24 maxlen: 24
89.19.49.0/24 maxlen: 24
92.118.162.0/24 maxlen: 24
92.242.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:a4:5e:c7:1b:e8:2f:bd:bc:bb:5d:b7:e0:fb:8b:f9:1d:a6:44:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 27 08:12:39 2026 GMT
Not After : Oct 26 08:17:39 2027 GMT
Subject: CN=215E4B82BE56B80DE64CA434A3503B90E0AC08B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:00:85:ea:eb:78:7d:f1:76:8e:be:2d:6e:
d2:8e:57:ac:d1:87:6c:35:69:30:34:a8:65:c6:33:
61:85:47:3e:4d:57:f2:da:ce:11:fd:63:48:1f:89:
37:05:eb:d4:c7:72:01:59:20:2e:22:e2:26:d8:80:
18:b1:05:7f:39:ac:32:9f:41:7f:94:5f:39:7f:30:
26:de:92:e5:7b:06:23:7e:7e:02:6c:71:24:4b:6e:
2b:05:74:38:c3:09:de:59:1e:d0:f5:35:73:30:d8:
4e:9a:ef:9c:71:ba:6a:be:26:00:bc:46:f1:f7:83:
c0:81:a7:e4:f1:1c:6b:f0:66:2a:bd:41:b7:52:77:
6d:a4:1e:27:c5:4c:fb:c9:69:4d:86:29:c2:e4:eb:
ec:fa:41:0f:9e:c6:c7:c3:9a:8d:d1:2c:01:f2:cc:
54:55:6a:20:9b:79:2c:d5:33:99:5f:de:2c:cc:77:
0e:38:a6:1d:48:19:e9:a0:66:c3:e8:fa:c9:b3:9f:
61:46:5a:17:87:73:eb:71:6b:c6:12:97:7f:49:c6:
00:77:52:de:eb:a2:e1:ae:d7:f6:51:2d:5c:58:7f:
fb:ef:90:0e:2a:fa:88:50:b0:b4:59:90:ca:2f:81:
54:12:aa:5b:02:1e:c4:7d:ce:14:d9:a6:f6:cd:b8:
72:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5E:4B:82:BE:56:B8:0D:E6:4C:A4:34:A3:50:3B:90:E0:AC:08:B1
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152726.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.253.0/24
45.93.44.0/24
45.95.22.0/24
89.19.49.0/24
92.118.162.0/24
92.242.184.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e5:0c:61:39:6b:97:93:26:ce:cf:08:4c:be:49:ce:94:30:
e6:f4:0c:06:80:58:06:e6:05:07:6a:ff:2f:a6:22:e1:62:5f:
09:b4:4e:6b:ce:28:70:c0:b9:8e:6f:24:ea:ff:82:34:40:75:
72:37:70:61:91:3d:7a:c3:66:5d:e5:f7:0c:73:02:62:d7:b2:
b3:c2:a7:ff:65:49:67:b0:ad:5a:2a:94:a9:aa:bc:27:8e:60:
fd:83:9e:e7:82:7b:f2:c7:6d:34:72:10:15:9b:5f:a8:ee:ff:
48:92:26:3b:25:4f:15:d4:af:0b:c3:93:7d:e5:c6:15:4c:c6:
13:80:b9:a1:48:cc:d2:1b:49:85:7c:00:c3:8d:1c:0e:1f:99:
9c:7c:62:66:28:0a:53:51:99:03:11:e3:20:33:a3:5d:13:e0:
67:2b:bf:12:11:f0:7f:e0:2b:7c:41:45:fa:5a:5e:4e:3c:de:
92:b8:68:71:b3:01:2e:6a:f7:1e:c0:cd:06:04:79:09:85:cf:
84:70:a8:7a:69:65:f4:b0:81:b9:18:cf:c6:2a:a9:2a:c0:6c:
b4:2b:4d:ce:6e:a1:2f:5f:81:99:32:7b:30:b8:3b:b2:ca:b7:
ee:38:f4:2f:46:6e:e7:c7:c2:69:0c:bd:ed:e8:54:e9:df:4b:
90:7e:2b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:54:25 2026 by rpki-client