Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: wUC5Z/9U4dRlMtM7jWagyw9a8Anqk9vMgcj/Eiq4yek=
Subject key identifier: 22:2C:8C:21:E1:25:EB:75:CF:D8:94:8F:A0:74:BF:71:EC:CF:DD:84
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7F6ED17B9845581E49E06F6FFE1B45610BF24109
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152179.roa
Signing time: Fri 24 Jul 2026 02:36:56 +0000
ROA not before: Fri 24 Jul 2026 02:31:56 +0000
ROA not after: Fri 23 Jul 2027 02:36:56 +0000
asID: 152179
IP address blocks: 51.241.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:6e:d1:7b:98:45:58:1e:49:e0:6f:6f:fe:1b:45:61:0b:f2:41:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 24 02:31:56 2026 GMT
Not After : Jul 23 02:36:56 2027 GMT
Subject: CN=222C8C21E125EB75CFD8948FA074BF71ECCFDD84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:78:ef:6c:f0:a6:d0:60:8a:83:24:90:a6:
f7:0e:49:66:77:d7:ff:ae:49:b2:9a:0b:23:33:54:
a3:bb:9d:32:4e:ee:95:a5:17:eb:81:0c:83:7b:0d:
b0:08:b2:f3:a7:88:9a:20:d7:25:8e:72:73:6d:ea:
48:7e:0d:9e:38:95:ec:be:33:3e:f2:92:d3:08:e3:
7d:ae:51:a8:43:34:f0:68:5d:e0:87:e6:71:82:49:
0e:1c:b0:f4:82:05:8e:51:ed:b7:2f:35:20:94:44:
bd:0c:1d:3f:c0:25:83:67:1f:bf:69:86:8f:fe:29:
9f:5e:7c:ac:63:03:b0:2c:48:24:5b:d8:7f:6c:ca:
cf:78:06:4a:67:cf:3d:be:5f:28:95:bc:61:48:66:
0a:9f:e4:46:db:73:8b:6d:f8:55:97:af:9b:a9:98:
b7:1d:ef:6d:85:ff:d5:50:9c:3c:4b:3c:6c:11:b0:
44:62:de:17:47:fa:86:bc:fd:e7:e7:85:f2:24:7b:
4d:b0:57:1e:50:89:91:02:bd:9b:ef:3d:bd:12:5d:
96:d8:48:0c:39:5c:3d:77:c9:d2:11:f6:18:83:a9:
b9:76:b2:b0:b5:1e:95:67:2b:0c:3e:8f:63:bc:37:
c0:68:d2:80:98:11:41:18:e0:16:b0:6e:8b:ed:eb:
4a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2C:8C:21:E1:25:EB:75:CF:D8:94:8F:A0:74:BF:71:EC:CF:DD:84
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.142.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:e9:61:73:7f:a6:1f:04:53:72:84:9c:21:08:2f:22:e3:f5:
99:51:22:57:92:ca:33:9e:c3:0a:1f:b4:7b:e6:53:8c:44:ed:
92:e0:9e:3f:1c:8e:16:d0:f2:e0:96:df:ce:b0:e6:02:65:9b:
87:c0:06:d1:1c:3e:cb:83:c2:56:0d:9e:06:e9:bf:0a:fe:16:
90:ab:92:36:99:6d:67:6e:b2:fb:70:6c:f7:83:66:29:ab:5e:
cf:9a:71:b6:fd:b8:6c:f8:0e:93:7f:29:68:13:38:2b:5b:33:
c2:cf:ca:fe:0a:c9:76:e9:22:ac:04:27:e7:7c:68:7c:a2:89:
af:47:1b:c0:10:d5:77:b8:c0:4b:27:3c:fe:96:8d:8a:d3:80:
dc:cc:e3:e0:0d:4f:59:18:ed:1a:9d:a7:4b:e0:6d:33:cc:c7:
78:94:d7:83:5e:25:b7:6d:1b:30:e7:cc:04:cb:59:8a:68:f1:
4f:1c:ae:56:a3:b9:58:6d:bd:10:4d:95:27:c1:5a:2d:2f:f1:
c1:49:90:5e:35:9a:9a:f9:f1:b1:14:ad:31:de:b7:2f:bc:ce:
3b:bd:be:40:b3:63:c0:0c:f9:a8:00:a9:11:a3:cc:b0:03:a7:
0b:07:28:ed:e8:10:22:a1:c8:86:5e:d8:4a:8a:c0:9d:e4:ef:
f6:22:82:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:59:57 2026 by rpki-client