Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152698.roa
File: AS152698.roa (raw, json)
Hash identifier: A+SYeMer4wANCCGpuntVXJAbSAO0TsTI713zgCcwffM=
Subject key identifier: 5C:7E:7D:AA:A2:C8:CD:E7:2F:3B:06:9D:2F:A9:39:6F:4E:12:A6:41
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 5E677B44D52C45363A77CB814BB5728E65706865
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152698.roa
Signing time: Tue 27 Oct 2026 08:19:54 +0000
ROA not before: Tue 27 Oct 2026 08:14:54 +0000
ROA not after: Tue 26 Oct 2027 08:19:54 +0000
asID: 152698
IP address blocks: 212.80.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:67:7b:44:d5:2c:45:36:3a:77:cb:81:4b:b5:72:8e:65:70:68:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 27 08:14:54 2026 GMT
Not After : Oct 26 08:19:54 2027 GMT
Subject: CN=5C7E7DAAA2C8CDE72F3B069D2FA9396F4E12A641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:11:11:a6:08:9c:b5:05:68:20:5f:89:45:91:
da:86:7b:9a:63:ae:6d:7b:b7:5c:23:a6:95:d8:1d:
ae:77:ac:d7:ed:a3:96:6a:12:07:22:38:3f:06:3f:
15:1b:be:ac:38:89:09:06:33:f4:5b:01:c0:ea:88:
25:ff:b6:a7:a5:f7:de:2c:3d:95:a9:61:e2:68:d6:
6c:c6:dc:39:68:10:f3:d1:f9:7c:7b:90:27:ed:a9:
5d:78:3f:48:1f:e7:58:d4:b1:4c:39:64:57:ef:f2:
5a:a9:b1:7f:58:8a:15:5f:02:82:cb:45:4f:63:1a:
cc:28:67:0a:a4:77:fb:35:a1:28:2d:c2:1a:c8:47:
33:f8:b4:1f:42:aa:bb:e6:4a:18:80:08:a4:ef:37:
d0:c2:12:c7:e6:df:52:a9:20:c7:2f:27:46:45:c3:
76:1e:4a:da:81:2e:3a:20:b2:0c:a6:4f:c3:87:ef:
5c:03:76:12:58:d4:42:bd:7d:ff:77:5c:fd:16:d5:
da:3b:6c:20:90:60:2f:2d:96:22:f4:23:a7:22:3e:
55:81:30:58:29:3b:81:0c:15:f2:b1:32:30:0f:0e:
52:3d:9f:6c:7c:fc:db:dd:f4:9e:b8:0b:f0:e3:eb:
5b:1b:1d:c3:33:2e:d8:76:e4:43:98:ae:a5:de:e5:
56:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7E:7D:AA:A2:C8:CD:E7:2F:3B:06:9D:2F:A9:39:6F:4E:12:A6:41
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152698.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.192.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:f8:a9:26:e7:7f:48:7a:4c:49:56:7e:d5:09:c2:9c:24:e9:
aa:39:d5:b0:39:1e:de:d8:7d:79:35:6a:f6:91:5f:e3:63:59:
2c:fb:96:d6:a9:99:df:e6:62:96:b6:6d:dc:50:c0:4d:8c:d9:
b4:fb:e6:9f:f2:c2:14:c7:c9:72:df:4e:42:06:7e:1d:1f:ef:
f8:0d:c2:48:32:ad:4c:df:08:87:53:a5:c5:c4:aa:69:ab:cd:
d2:16:07:36:eb:70:b7:ad:0f:10:51:c0:e2:f5:bd:dc:a2:87:
4d:54:78:c7:48:4f:08:f3:b5:83:7d:60:28:79:80:c6:f4:67:
d8:46:6e:7d:6e:e6:7d:38:88:1d:16:c4:06:df:ab:4a:d3:a7:
b3:2b:cb:a7:b3:62:9c:0a:eb:2b:45:82:87:fe:34:f7:71:f3:
21:5d:03:d4:0a:0c:b3:74:51:2f:88:88:dc:8e:02:72:31:84:
a7:66:8c:25:1f:0c:62:6c:a9:44:91:07:d3:37:ff:a7:5d:17:
e1:f2:aa:08:ce:2d:37:1e:e6:72:d0:b7:cb:cd:e2:d3:67:63:
fe:8b:9b:20:d7:67:f2:af:d0:16:33:1b:2e:e7:65:f7:7f:31:
d1:a4:d6:7b:5f:e2:73:ad:62:41:94:20:f2:36:9f:24:f6:30:
9d:4e:ce:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:46:11 2026 by rpki-client