Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: /nze1wVAE5mX3anXPAGtjo76CkMgrq2RcDfoyywZxmU=
Subject key identifier: 27:E9:F0:C3:C3:D2:81:23:63:ED:DB:A9:31:60:AA:B9:EE:1C:0C:47
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 1BFEA632CA70C4A05C1D5900842A66240AF8A448
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152179.roa
Signing time: Thu 17 Sep 2026 03:09:22 +0000
ROA not before: Thu 17 Sep 2026 03:04:22 +0000
ROA not after: Thu 16 Sep 2027 03:09:22 +0000
asID: 152179
IP address blocks: 2a04:f3c0::/29 maxlen: 29
2a06:7680::/29 maxlen: 29
2a09:240::/29 maxlen: 29
2a0b:2e40::/29 maxlen: 29
2a10:ef80::/29 maxlen: 29
2a10:fd80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 19:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:fe:a6:32:ca:70:c4:a0:5c:1d:59:00:84:2a:66:24:0a:f8:a4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Sep 17 03:04:22 2026 GMT
Not After : Sep 16 03:09:22 2027 GMT
Subject: CN=27E9F0C3C3D2812363EDDBA93160AAB9EE1C0C47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:17:ea:e4:d6:6c:e9:16:ab:f7:f7:e4:d3:98:
89:45:22:da:9d:04:d8:34:64:c1:3e:2f:25:5d:ab:
3e:d0:37:e4:2c:98:5f:12:34:eb:7b:27:8a:51:cb:
42:3b:b1:4d:e9:65:f1:bb:9a:6a:aa:82:6d:a2:d0:
59:16:16:a6:64:76:13:c7:be:15:38:3d:06:d2:0d:
f5:f4:ec:ac:da:e7:e5:d7:bc:fb:55:14:d7:c4:2e:
15:4e:b6:0a:83:73:45:8f:9f:7a:39:db:b0:4c:9f:
67:7c:b4:01:b4:ee:fb:c8:33:3a:54:c5:8d:91:9a:
9f:4d:c3:6e:0f:bf:3d:0a:f7:d2:87:51:fc:db:46:
00:ba:c6:db:be:0b:0a:a8:14:c5:fa:b9:b7:42:42:
01:f2:76:3f:bf:0e:fb:0f:15:a2:52:41:55:22:41:
23:0e:24:61:d7:c1:69:46:ad:13:d8:d7:1f:42:f3:
fe:ea:e4:fe:f0:31:d9:c2:5a:21:5b:4c:9e:4d:ef:
2b:6c:d2:c6:dd:e6:46:eb:87:4f:8c:c2:50:f2:3b:
74:2b:34:d8:4e:ce:d8:2f:f9:6c:2c:0b:31:bf:17:
86:df:2c:13:08:fa:21:6d:99:48:03:be:44:a4:3b:
d6:5e:2b:d4:b2:e6:7d:a1:f2:a6:16:91:75:82:c0:
df:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E9:F0:C3:C3:D2:81:23:63:ED:DB:A9:31:60:AA:B9:EE:1C:0C:47
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:f3c0::/29
2a06:7680::/29
2a09:240::/29
2a0b:2e40::/29
2a10:ef80::/29
2a10:fd80::/29
Signature Algorithm: sha256WithRSAEncryption
21:94:22:35:90:4a:8e:4d:b3:79:c2:a8:17:37:6d:6b:90:0d:
df:ac:2a:50:a0:0a:75:f8:d2:90:11:6b:da:df:2c:23:8c:7d:
19:3c:3b:bf:0f:db:88:fa:79:4d:ee:97:cd:b3:c5:c1:25:14:
97:d7:c2:1f:93:9c:4d:ce:5b:2c:85:5d:ba:07:a4:4b:1d:a3:
dc:38:34:f0:96:87:e2:3a:9a:21:f0:97:18:b5:dc:61:be:9e:
1b:34:1a:aa:9b:c1:27:83:7e:ab:d5:a3:1e:f8:07:9b:1e:81:
4c:10:c6:20:d1:bb:28:72:ee:bc:af:9c:c9:0e:62:f3:4d:b6:
a8:2c:31:95:f5:fa:70:98:69:bb:6b:b6:dc:48:26:8a:6b:d4:
38:96:08:a4:57:9f:7e:3c:04:c6:c8:d4:7b:bd:3a:d5:0b:98:
01:50:5b:e5:72:8a:6a:20:f9:96:c4:4c:2e:87:76:c1:41:07:
12:f1:97:b2:73:cf:db:24:5d:ab:20:2c:d0:3f:64:a1:78:de:
70:59:70:3b:45:15:6a:46:2f:69:b3:a4:d4:be:34:bd:3e:c2:
bf:c6:6e:db:27:58:ed:58:b7:b4:fa:62:f0:7d:f7:47:70:7d:
f8:97:a2:ae:9d:92:94:51:b2:38:1c:a7:3f:17:5d:ab:ec:36:
3e:ab:3b:be
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUG/6mMspwxKBcHVkAhCpmJAr4pEgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNjA5MTcwMzA0MjJaFw0yNzA5MTYwMzA5MjJaMDMxMTAvBgNV
BAMTKDI3RTlGMEMzQzNEMjgxMjM2M0VEREJBOTMxNjBBQUI5RUUxQzBDNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEF+rk1mzpFqv39+TTmIlFItqd
BNg0ZME+LyVdqz7QN+QsmF8SNOt7J4pRy0I7sU3pZfG7mmqqgm2i0FkWFqZkdhPH
vhU4PQbSDfX07Kza5+XXvPtVFNfELhVOtgqDc0WPn3o527BMn2d8tAG07vvIMzpU
xY2Rmp9Nw24Pvz0K99KHUfzbRgC6xtu+CwqoFMX6ubdCQgHydj+/DvsPFaJSQVUi
QSMOJGHXwWlGrRPY1x9C8/7q5P7wMdnCWiFbTJ5N7yts0sbd5kbrh0+MwlDyO3Qr
NNhOztgv+WwsCzG/F4bfLBMI+iFtmUgDvkSkO9ZeK9Sy5n2h8qYWkXWCwN/PAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUJ+nww8PSgSNj7dupMWCque4cDEcwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMTUyMTc5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAAjAqAwUDKgTz
wAMFAyoGdoADBQMqCQJAAwUDKgsuQAMFAyoQ74ADBQMqEP2AMA0GCSqGSIb3DQEB
CwUAA4IBAQAhlCI1kEqOTbN5wqgXN21rkA3frCpQoAp1+NKQEWva3ywjjH0ZPDu/
D9uI+nlN7pfNs8XBJRSX18Ifk5xNzlsshV26B6RLHaPcODTwlofiOpoh8JcYtdxh
vp4bNBqqm8Eng36r1aMe+AebHoFMEMYg0bsocu68r5zJDmLzTbaoLDGV9fpwmGm7
a7bcSCaKa9Q4lgikV59+PATGyNR7vTrVC5gBUFvlcopqIPmWxEwuh3bBQQcS8Zey
c8/bJF2rICzQP2SheN5wWXA7RRVqRi9ps6TUvjS9PsK/xm7bJ1jtWLe0+mLwffdH
cH34l6KunZKUUbI4HKc/F12r7DY+qzu+
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:04:45 2026 by rpki-client