Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS152911.roa
File: AS152911.roa (raw, json)
Hash identifier: JooyEMpOK+uye3bNBYL5gLEj7BWA8vfTMRqz2N+UpT8=
Subject key identifier: CE:DC:84:1A:8A:DF:3E:72:06:11:AC:2A:1A:58:CC:5D:FF:30:E5:AE
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0D0372E600B70B2552E27D6C99ADA17A19203732
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS152911.roa
Signing time: Fri 20 Feb 2026 06:08:26 +0000
ROA not before: Fri 20 Feb 2026 06:03:26 +0000
ROA not after: Fri 19 Feb 2027 06:08:26 +0000
asID: 152911
IP address blocks: 2a0f:85c1:b4a::/48 maxlen: 48
2a0f:85c1:bb2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:03:72:e6:00:b7:0b:25:52:e2:7d:6c:99:ad:a1:7a:19:20:37:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Feb 20 06:03:26 2026 GMT
Not After : Feb 19 06:08:26 2027 GMT
Subject: CN=CEDC841A8ADF3E720611AC2A1A58CC5DFF30E5AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:db:fd:b8:d7:08:35:54:63:d9:e2:24:88:
1a:f8:26:e2:89:58:90:e9:2b:6a:8c:c2:12:5c:03:
8d:69:5b:f6:f1:3f:68:5f:68:6c:04:50:41:08:0a:
09:b8:56:c1:e4:ad:b0:5b:dc:a9:c5:79:68:7a:f1:
ab:2a:54:d9:b3:f9:60:84:f3:a7:a0:09:06:77:a0:
5b:37:46:b4:13:2b:5a:52:53:9f:d9:b6:5f:20:bb:
1b:8f:7a:37:c6:22:5e:4c:a5:33:02:ab:4a:9a:e3:
40:70:ee:14:7a:0f:f1:d6:41:63:57:26:74:e7:d9:
5a:05:c4:de:60:38:fa:06:20:c5:c0:5c:28:2a:93:
d9:fc:30:e9:95:07:ec:1e:7d:2a:3e:19:1b:c2:45:
b0:3f:23:d3:80:c1:9d:3b:25:3b:c5:59:79:4f:a2:
7e:41:92:47:ff:18:b9:19:db:7f:39:48:15:0f:ae:
4a:70:69:c9:e4:19:0d:5b:73:f6:f7:a9:27:4e:33:
2a:11:50:55:8d:48:35:c7:da:fd:e5:6a:27:5d:94:
74:b1:6e:ab:96:c2:d3:cd:87:44:8f:44:49:cc:a5:
01:8e:9c:ff:61:58:0b:7f:3b:2b:f1:36:1b:7e:05:
3a:8f:f0:e3:72:64:f3:88:b4:b2:39:c1:da:a8:67:
d3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DC:84:1A:8A:DF:3E:72:06:11:AC:2A:1A:58:CC:5D:FF:30:E5:AE
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS152911.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:b4a::/48
2a0f:85c1:bb2::/48
Signature Algorithm: sha256WithRSAEncryption
da:9d:fb:cb:3e:e4:1d:b6:ac:8a:95:f3:6f:19:79:41:2d:15:
c7:77:3e:b4:8c:32:6e:d3:97:4f:72:f2:e5:d9:bf:80:20:a6:
6a:5a:2a:66:c9:57:10:52:76:a2:ce:b1:9d:00:15:ab:e7:17:
ad:a7:c8:14:9b:1b:75:56:c2:6f:6c:2b:cc:0a:4e:6b:49:4e:
91:53:da:08:6d:81:fb:99:a5:1a:08:4a:16:09:a7:d8:f7:21:
70:28:81:16:cb:47:15:80:7b:07:d8:88:1c:4b:35:de:76:e8:
28:7c:69:8a:70:7d:fa:bd:e6:21:96:9b:2e:bc:0f:1b:fa:0a:
57:db:98:45:e3:6d:ce:8c:00:ac:70:67:cc:d0:7b:7e:5c:cd:
87:ef:05:a8:b4:16:e9:01:48:1a:64:54:d8:3e:2b:e9:8e:a5:
27:df:4c:c6:9f:b2:f1:3c:d0:ef:4a:7c:7d:6f:4f:3a:53:2f:
9b:55:ac:96:61:96:40:3c:ea:2b:5a:25:d3:ed:7e:06:5b:a4:
01:c7:ee:aa:fb:e8:54:3d:23:f4:89:56:e1:e6:aa:72:b9:f7:
a3:72:db:02:40:5e:d5:73:f1:46:35:9b:aa:a9:78:a6:e7:04:
e0:7b:fd:1f:59:85:9e:89:15:82:ce:66:54:90:b4:4a:d8:49:
3e:84:60:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:09:17 2026 by rpki-client