Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152586.roa
File: AS152586.roa (raw, json)
Hash identifier: 49VS3N5Ie3R3FVmPMugD10vUZCmEG0KUnRPIK3L9OqE=
Subject key identifier: C6:5B:79:C4:CF:68:DA:0A:F4:F1:C4:DB:26:55:6F:D2:3B:CD:CA:DE
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 276A697CF45B5939D541701E545C62DD36624386
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152586.roa
Signing time: Thu 05 Nov 2026 09:49:40 +0000
ROA not before: Thu 05 Nov 2026 09:44:40 +0000
ROA not after: Thu 04 Nov 2027 09:49:40 +0000
asID: 152586
IP address blocks: 194.5.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:6a:69:7c:f4:5b:59:39:d5:41:70:1e:54:5c:62:dd:36:62:43:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Nov 5 09:44:40 2026 GMT
Not After : Nov 4 09:49:40 2027 GMT
Subject: CN=C65B79C4CF68DA0AF4F1C4DB26556FD23BCDCADE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:19:e7:3b:58:a3:c7:69:87:3f:ff:21:14:75:
ed:90:bd:06:4e:ec:59:97:74:4b:91:b7:32:e0:e8:
34:d7:2b:a3:d4:1d:3c:eb:2d:1b:45:1e:b9:98:c7:
d1:69:83:ae:53:d4:40:c6:e9:12:7d:94:f1:6b:01:
fd:f8:09:18:1e:52:f6:1e:92:57:62:2d:64:22:f1:
8d:17:50:a2:26:8e:ce:be:ff:a0:a6:f5:92:3a:bc:
ad:78:3f:4c:dd:78:6d:5e:1d:60:d2:0c:ad:1b:85:
03:34:ce:4e:29:07:b4:25:a1:b3:6b:a5:e9:ca:74:
4e:e8:67:c2:d5:bb:2e:7f:57:2a:5f:18:ce:3c:20:
5f:ee:b6:10:0c:64:55:bd:67:4a:4c:86:26:37:92:
86:53:f1:90:a5:5a:0f:7c:1f:e2:9e:65:71:5f:72:
ea:d2:51:c5:19:d2:dd:fc:a8:45:de:df:51:f5:d2:
04:5e:04:a1:a9:ac:45:19:dd:80:26:30:85:ec:14:
65:8b:f1:22:9e:ec:1d:f1:ae:c4:d5:1a:e4:36:be:
3b:0c:28:45:ed:61:93:5b:9a:59:b7:ae:f7:88:00:
c0:62:2f:53:41:28:82:ef:36:47:d9:b1:7c:39:d2:
3f:f9:df:1b:5b:4e:df:89:cb:9a:b5:88:cd:91:af:
ca:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5B:79:C4:CF:68:DA:0A:F4:F1:C4:DB:26:55:6F:D2:3B:CD:CA:DE
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152586.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.147.0/24
Signature Algorithm: sha256WithRSAEncryption
22:f2:43:af:3f:55:de:41:eb:7a:a1:0b:40:4f:aa:c7:4e:b7:
57:31:79:5a:32:eb:5a:fb:57:1e:eb:7a:44:48:16:e6:29:5f:
a3:e8:bb:a2:11:5a:fe:6b:4b:cc:73:8d:02:04:64:6f:16:f7:
94:11:69:3c:f5:3e:7e:af:35:0c:52:a2:4b:51:17:50:6a:df:
df:b0:e7:3d:45:c6:d8:34:01:bf:3e:94:ce:21:24:44:bc:60:
6b:5b:99:c0:cf:2e:ee:64:d5:15:77:20:c9:87:58:64:f3:51:
87:d3:14:a8:07:b3:78:72:3a:48:a9:53:a8:15:6b:c9:7b:a9:
2c:9e:55:b1:8e:78:2d:d9:3f:94:fa:82:cf:0f:cd:81:88:e3:
1a:ce:d1:d2:28:f8:bc:8f:9a:2a:5d:b8:af:e4:bb:51:9c:43:
83:dd:a6:c5:8f:60:99:45:95:7b:c5:d4:a1:ad:d5:db:bc:0f:
43:1f:1d:b1:aa:d7:0b:c4:1e:bf:c5:b8:51:84:33:da:c6:ba:
62:bb:84:ae:39:f1:e4:9c:a0:e8:88:ea:31:b0:da:b3:67:bd:
98:d1:eb:4b:36:79:44:cf:f3:11:e8:ac:e1:10:15:50:25:e4:
98:0d:29:5d:03:31:bd:8e:f3:81:90:28:02:c5:f2:97:66:cd:
49:14:af:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 07:49:15 2026 by rpki-client