Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS152020.roa
File: AS152020.roa (raw, json)
Hash identifier: dtOGnVr+a8r3pwa6pQTGlg6nC3WyJSb7IgJGolFLS6M=
Subject key identifier: E0:D1:60:60:87:92:49:0E:A9:9F:76:D7:E3:3C:26:0C:72:D3:59:E4
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 41162CC4C1EB9749152E91F34AC14D9047429276
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS152020.roa
Signing time: Wed 09 Sep 2026 12:28:25 +0000
ROA not before: Wed 09 Sep 2026 12:23:25 +0000
ROA not after: Wed 08 Sep 2027 12:28:25 +0000
asID: 152020
IP address blocks: 2a14:7583:c100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:16:2c:c4:c1:eb:97:49:15:2e:91:f3:4a:c1:4d:90:47:42:92:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 9 12:23:25 2026 GMT
Not After : Sep 8 12:28:25 2027 GMT
Subject: CN=E0D160608792490EA99F76D7E33C260C72D359E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ed:39:01:9d:ab:89:6c:89:e8:1e:e7:5c:e1:
fd:ed:80:80:7c:06:bd:63:af:6f:6d:f7:e4:26:64:
9e:80:b1:62:99:e0:bc:6e:e4:28:c5:8d:62:6f:42:
e0:4b:54:d3:2d:19:c8:a6:f4:0e:31:f4:98:3f:9a:
39:34:69:d4:75:89:ca:e3:88:87:c1:67:7e:87:39:
ec:bd:5d:fb:d4:dd:fa:a7:87:34:8c:93:20:7d:16:
31:1f:a3:00:c7:60:dc:78:26:8e:6d:21:69:a5:6d:
9a:b0:ce:04:cd:34:57:aa:1c:b2:fd:cd:11:70:42:
87:b9:7b:c4:1c:c0:1c:66:01:c7:5f:b3:67:08:65:
96:0f:cb:71:20:0c:41:29:75:79:45:fd:d0:56:17:
20:0c:0d:da:2b:b5:b3:d5:26:a2:bb:54:f8:1c:3c:
7c:0e:42:24:f5:04:09:ed:09:2c:28:26:f9:ed:fb:
ff:3c:48:f1:5a:31:71:04:f9:f4:51:f4:ab:30:32:
36:61:d9:ab:84:fe:49:01:8d:d3:7a:95:e4:67:85:
82:2b:66:e6:9f:85:04:fc:c8:5e:41:dc:c0:d5:7f:
c6:58:0e:6f:e4:1f:54:d4:33:37:a4:e1:9c:6b:0b:
f2:87:1d:6b:be:7a:ff:21:3c:3e:2a:f9:3a:7e:01:
70:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D1:60:60:87:92:49:0E:A9:9F:76:D7:E3:3C:26:0C:72:D3:59:E4
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS152020.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:c100::/48
Signature Algorithm: sha256WithRSAEncryption
74:ce:78:46:fc:ec:45:b9:68:13:16:44:b8:98:80:ad:d8:91:
d8:e3:1e:72:49:66:ea:52:cf:ae:7b:60:7d:78:7f:88:40:10:
80:f8:e3:47:4c:f0:df:57:3d:9e:a6:b6:21:d7:f5:46:3b:87:
b1:f0:72:e1:3a:14:8e:e8:9b:95:53:97:e7:39:b3:bd:1a:12:
f7:27:5d:dc:40:52:2c:48:bb:78:8a:f0:13:a7:66:b9:6c:fc:
ba:90:31:94:c8:96:f5:49:c3:ab:be:55:7e:5d:f4:71:ec:fb:
7b:6a:08:73:80:ea:83:57:ad:97:43:07:1f:f7:8d:0c:b0:19:
a9:cf:c6:60:93:32:19:97:ee:54:1d:7b:71:2b:0e:df:5c:bc:
f9:97:09:7a:b4:88:83:67:89:24:08:42:6f:be:e4:41:18:ba:
50:0a:09:fe:49:3f:53:3c:c9:19:e0:a9:23:5e:e7:4f:4f:7a:
eb:9a:01:95:7b:f8:e2:21:37:b3:9c:99:0d:0d:22:03:65:79:
12:8d:99:c6:49:a2:bd:f4:f3:37:81:32:14:90:3d:a2:9f:f9:
ac:d2:1f:1a:7a:21:cc:32:5b:37:3d:fe:e6:2b:43:a5:f3:a0:
fe:b8:d8:a8:e6:1d:f9:66:f6:df:62:74:b2:98:ca:a5:fe:ee:
8a:91:8f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:49:54 2026 by rpki-client