Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152868.roa
File: AS152868.roa (raw, json)
Hash identifier: Sjre2u6QVPhB4w+qM0PVidN7U46K0iAKyH1yf+iXX+g=
Subject key identifier: 8C:24:15:03:0D:5F:60:0E:E8:A8:46:4E:B1:61:AE:81:62:D7:BD:D0
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6EE89025FF32F7B309C37069C19E445CDD1E059E
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152868.roa
Signing time: Sat 12 Sep 2026 00:53:04 +0000
ROA not before: Sat 12 Sep 2026 00:48:04 +0000
ROA not after: Sat 11 Sep 2027 00:53:04 +0000
asID: 152868
IP address blocks: 188.220.201.0/24 maxlen: 24
188.220.203.0/24 maxlen: 24
188.221.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:e8:90:25:ff:32:f7:b3:09:c3:70:69:c1:9e:44:5c:dd:1e:05:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 12 00:48:04 2026 GMT
Not After : Sep 11 00:53:04 2027 GMT
Subject: CN=8C2415030D5F600EE8A8464EB161AE8162D7BDD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:aa:74:2a:2a:87:59:c4:dd:3b:d3:7d:60:05:
c3:7d:f7:ef:47:10:5f:59:63:91:f8:9f:00:24:05:
29:ec:df:7b:d7:a2:f3:6d:04:70:22:42:2b:ee:93:
82:59:de:3f:e2:eb:6f:28:20:46:e4:1a:e0:36:03:
46:17:5a:57:63:9b:2f:f4:17:86:07:31:e8:5f:7c:
10:e6:06:6a:a6:04:aa:1a:b0:d6:c2:e4:8c:ac:a2:
64:f7:8b:78:be:66:4f:54:3f:69:48:07:70:7b:d3:
99:91:c5:f2:59:62:e0:25:73:df:dc:91:6b:f2:21:
7d:2f:21:c8:77:11:d8:7d:9b:4e:5e:56:3a:87:71:
da:38:5f:33:a4:4f:76:a9:39:f7:4c:88:5e:44:39:
d3:07:f6:44:9e:de:eb:18:25:5c:5a:d7:fe:58:1e:
6b:cd:f8:ef:22:cb:92:e6:a7:ad:51:f1:32:f0:98:
b7:a1:5d:fb:e5:d5:51:b5:c0:e9:b3:cd:cc:b6:04:
c7:8d:f7:05:3a:94:2a:51:83:c7:ce:01:71:57:e3:
9c:70:0a:94:0e:26:de:55:97:8a:56:22:27:99:07:
8c:b8:b5:6d:78:90:06:c4:02:6c:c2:86:d6:b6:59:
26:48:87:98:ed:73:ba:af:5c:a3:af:37:44:20:2f:
45:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:24:15:03:0D:5F:60:0E:E8:A8:46:4E:B1:61:AE:81:62:D7:BD:D0
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152868.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.201.0/24
188.220.203.0/24
188.221.31.0/24
Signature Algorithm: sha256WithRSAEncryption
06:5a:6f:c6:5d:8b:eb:39:2b:59:0d:4f:48:13:b5:2a:cc:96:
f5:2d:e3:3f:39:d7:18:b2:a9:b6:69:a6:df:1b:40:b6:94:be:
46:61:f3:d7:4b:93:43:83:64:0e:a2:0e:3a:3f:f1:44:8e:fb:
7e:51:87:cc:d5:84:08:29:97:09:10:4e:94:9b:52:f8:4b:78:
bb:c1:f0:22:ba:fc:55:86:ae:e5:73:53:c6:79:74:e3:82:00:
81:8e:b2:43:b3:4c:9b:6f:59:3d:fd:5d:92:60:11:77:e3:6e:
ca:89:35:29:20:b7:1b:25:50:66:26:89:a0:0f:ef:01:b8:07:
04:7e:38:98:72:66:c1:0b:6a:86:d6:0a:15:74:f6:cb:11:fc:
87:03:76:f5:26:6b:b1:6c:c1:14:ad:90:b3:7f:f5:7d:42:a3:
5a:50:9a:ed:7b:5c:e3:80:95:d1:cb:10:bc:66:0a:33:a2:f8:
54:01:e0:dc:00:bc:10:0b:87:25:7b:a0:c4:58:1f:64:2a:f1:
64:7f:ac:cf:6b:dc:8e:f3:2a:ba:d0:20:ab:e6:82:e3:38:49:
ed:da:04:8c:93:c0:4a:aa:ea:e0:41:04:cd:ad:48:30:d0:29:
57:e8:a7:24:29:1d:48:6a:a1:8b:d4:4b:dd:82:7f:af:88:80:
b7:c0:8b:7f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUbuiQJf8y97MJw3BpwZ5EXN0eBZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA5MTIwMDQ4MDRaFw0yNzA5MTEwMDUzMDRaMDMxMTAvBgNV
BAMTKDhDMjQxNTAzMEQ1RjYwMEVFOEE4NDY0RUIxNjFBRTgxNjJEN0JERDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXqnQqKodZxN07031gBcN99+9H
EF9ZY5H4nwAkBSns33vXovNtBHAiQivuk4JZ3j/i628oIEbkGuA2A0YXWldjmy/0
F4YHMehffBDmBmqmBKoasNbC5IysomT3i3i+Zk9UP2lIB3B705mRxfJZYuAlc9/c
kWvyIX0vIch3Edh9m05eVjqHcdo4XzOkT3apOfdMiF5EOdMH9kSe3usYJVxa1/5Y
HmvN+O8iy5Lmp61R8TLwmLehXfvl1VG1wOmzzcy2BMeN9wU6lCpRg8fOAXFX45xw
CpQOJt5Vl4pWIieZB4y4tW14kAbEAmzChta2WSZIh5jtc7qvXKOvN0QgL0X3AgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUjCQVAw1fYA7oqEZOsWGugWLXvdAwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTUyODY4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAvNzJ
AwQAvNzLAwQAvN0fMA0GCSqGSIb3DQEBCwUAA4IBAQAGWm/GXYvrOStZDU9IE7Uq
zJb1LeM/OdcYsqm2aabfG0C2lL5GYfPXS5NDg2QOog46P/FEjvt+UYfM1YQIKZcJ
EE6Um1L4S3i7wfAiuvxVhq7lc1PGeXTjggCBjrJDs0ybb1k9/V2SYBF3427KiTUp
ILcbJVBmJomgD+8BuAcEfjiYcmbBC2qG1goVdPbLEfyHA3b1JmuxbMEUrZCzf/V9
QqNaUJrte1zjgJXRyxC8ZgozovhUAeDcALwQC4cle6DEWB9kKvFkf6zPa9yO8yq6
0CCr5oLjOEnt2gSMk8BKqurgQQTNrUgw0ClX6KckKR1IaqGL1Evdgn+viIC3wIt/
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:08:19 2026 by rpki-client