Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152868.roa
File: AS152868.roa (raw, json)
Hash identifier: 94PpB8FGhbchqHix44a4xIHEz5tEj5QycSCmGjUQJaM=
Subject key identifier: 45:4D:E2:21:DF:36:B2:EF:C0:FA:07:F8:DF:33:B3:4D:AC:9A:5E:3D
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0416A83250400F1A6B3CC75966850FC294E54F46
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152868.roa
Signing time: Thu 05 Nov 2026 00:07:25 +0000
ROA not before: Thu 05 Nov 2026 00:02:25 +0000
ROA not after: Thu 04 Nov 2027 00:07:25 +0000
asID: 152868
IP address blocks: 188.221.31.0/24 maxlen: 24
188.221.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 02:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:16:a8:32:50:40:0f:1a:6b:3c:c7:59:66:85:0f:c2:94:e5:4f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 5 00:02:25 2026 GMT
Not After : Nov 4 00:07:25 2027 GMT
Subject: CN=454DE221DF36B2EFC0FA07F8DF33B34DAC9A5E3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bc:3e:9d:e7:21:0e:34:7c:a2:d7:59:1d:a1:
8e:b7:ed:3b:e0:e7:5f:74:ad:a6:6d:fa:b8:89:e7:
83:79:ee:ff:4c:aa:cf:3a:7f:ec:58:f4:98:b6:f0:
59:40:17:c1:3c:1c:44:d5:7f:cd:10:bd:39:db:e7:
85:be:2c:51:8a:4a:3c:38:3a:77:3e:0c:2d:39:c3:
99:4c:1d:63:34:47:48:06:e0:30:f2:e3:8f:4c:5e:
b4:3b:85:3e:93:9f:5a:20:b0:28:cf:fc:aa:63:1d:
9f:b3:53:5f:8c:c9:94:69:f6:33:c6:56:a5:70:91:
64:08:fa:cd:0e:ee:1e:4c:51:28:f3:47:2f:71:87:
f9:31:c5:9b:4e:6b:5f:a0:3d:54:44:ab:97:05:9c:
17:ac:e6:02:15:b4:04:0e:6b:51:c8:2d:40:3d:19:
27:d5:7c:64:4a:dd:cd:05:e9:0b:b8:41:2d:6b:69:
44:1a:2b:83:17:8b:db:f1:97:9f:9a:95:a4:36:d2:
64:bd:9f:d0:be:99:80:cf:4e:c0:2d:83:5f:b1:f4:
01:2e:af:85:3c:78:5c:be:3d:57:74:aa:8b:65:85:
c6:0a:10:8e:7f:38:38:79:75:b5:a1:6c:e1:94:a4:
b4:bf:25:94:a0:c1:81:8d:18:fb:59:5d:65:b3:17:
19:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4D:E2:21:DF:36:B2:EF:C0:FA:07:F8:DF:33:B3:4D:AC:9A:5E:3D
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152868.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.221.31.0/24
188.221.187.0/24
Signature Algorithm: sha256WithRSAEncryption
60:b3:c6:d7:b6:bb:95:88:77:0c:2f:11:5f:02:f4:5a:fc:e8:
de:23:95:84:fd:70:6b:b5:64:b0:fc:bc:86:59:0e:85:45:5b:
2e:1b:74:f3:19:bc:6d:09:30:cd:f8:36:0f:7f:ce:31:06:f7:
d9:c5:cb:12:81:df:48:50:cc:9c:d6:81:db:89:97:4e:ac:cc:
f0:f0:5e:28:28:a6:f6:bf:c6:98:03:8e:3f:a5:3c:f8:52:40:
1b:99:7e:d0:33:36:b6:4b:a1:10:1a:f6:00:c1:49:28:f3:51:
ce:35:86:22:91:64:44:5b:85:5a:fb:07:dd:c1:49:aa:99:3c:
63:9a:e2:d5:95:3d:b0:9d:0a:21:79:bc:a4:1c:1c:4c:f2:21:
e4:07:ef:5c:44:75:27:d1:ef:54:65:c6:36:cc:30:62:a7:ae:
ba:65:e0:d7:94:ad:d8:38:ce:a4:c0:21:21:ed:f3:46:06:76:
fe:3b:a3:39:ab:6e:a8:e2:89:73:24:35:ea:cf:4b:46:da:08:
46:ed:67:e5:f1:1b:26:5b:e8:62:96:7b:3a:b1:8b:82:65:da:
96:d8:2f:fc:1b:21:6b:f9:75:42:f2:ff:e1:61:95:4a:ed:19:
b0:5d:96:e6:40:cf:f8:1f:c0:56:65:ff:86:b8:7c:4d:3c:31:
ea:a0:59:2e
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUBBaoMlBADxprPMdZZoUPwpTlT0YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjExMDUwMDAyMjVaFw0yNzExMDQwMDA3MjVaMDMxMTAvBgNV
BAMTKDQ1NERFMjIxREYzNkIyRUZDMEZBMDdGOERGMzNCMzREQUM5QTVFM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFvD6d5yEONHyi11kdoY637Tvg
5190raZt+riJ54N57v9Mqs86f+xY9Ji28FlAF8E8HETVf80QvTnb54W+LFGKSjw4
Onc+DC05w5lMHWM0R0gG4DDy449MXrQ7hT6Tn1ogsCjP/KpjHZ+zU1+MyZRp9jPG
VqVwkWQI+s0O7h5MUSjzRy9xh/kxxZtOa1+gPVREq5cFnBes5gIVtAQOa1HILUA9
GSfVfGRK3c0F6Qu4QS1raUQaK4MXi9vxl5+alaQ20mS9n9C+mYDPTsAtg1+x9AEu
r4U8eFy+PVd0qotlhcYKEI5/ODh5dbWhbOGUpLS/JZSgwYGNGPtZXWWzFxknAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQURU3iId82su/A+gf43zOzTayaXj0wHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTUyODY4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvN0f
AwQAvN27MA0GCSqGSIb3DQEBCwUAA4IBAQBgs8bXtruViHcMLxFfAvRa/OjeI5WE
/XBrtWSw/LyGWQ6FRVsuG3TzGbxtCTDN+DYPf84xBvfZxcsSgd9IUMyc1oHbiZdO
rMzw8F4oKKb2v8aYA44/pTz4UkAbmX7QMza2S6EQGvYAwUko81HONYYikWREW4Va
+wfdwUmqmTxjmuLVlT2wnQohebykHBxM8iHkB+9cRHUn0e9UZcY2zDBip666ZeDX
lK3YOM6kwCEh7fNGBnb+O6M5q26o4olzJDXqz0tG2ghG7Wfl8RsmW+hilns6sYuC
ZdqW2C/8GyFr+XVC8v/hYZVK7RmwXZbmQM/4H8BWZf+GuHxNPDHqoFku
-----END CERTIFICATE-----
Generated at Mon Nov 9 10:07:27 2026 by rpki-client