Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS152606.roa
File: AS152606.roa (raw, json)
Hash identifier: pyF0dPVGvdmMvnPad1WZ4WFs/FzCfVSGpqQWTZ1UXwc=
Subject key identifier: 48:B2:4B:72:E2:14:AC:A8:15:51:B1:03:FB:B3:29:06:2D:DC:89:9C
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 1A54C9760B13101269BD3E39CBA84B3B489DB1CC
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS152606.roa
Signing time: Mon 26 Oct 2026 07:03:35 +0000
ROA not before: Mon 26 Oct 2026 06:58:35 +0000
ROA not after: Mon 25 Oct 2027 07:03:35 +0000
asID: 152606
IP address blocks: 141.11.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 07:34:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:54:c9:76:0b:13:10:12:69:bd:3e:39:cb:a8:4b:3b:48:9d:b1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 26 06:58:35 2026 GMT
Not After : Oct 25 07:03:35 2027 GMT
Subject: CN=48B24B72E214ACA81551B103FBB329062DDC899C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:d0:23:10:c3:05:ab:62:1e:bb:53:a5:98:
ee:75:3b:47:41:f2:fd:77:d9:f5:ec:8c:a3:58:f2:
f0:3c:8b:98:aa:78:0b:a5:ab:98:d5:f0:a7:65:41:
10:28:05:83:63:11:86:dc:3b:19:3e:24:0f:33:7f:
b2:9e:3b:ef:87:8a:ef:eb:c5:25:b8:8a:57:a2:e7:
25:f0:a6:1e:85:4a:e5:53:3d:2d:5e:10:ec:ef:9e:
1e:ac:90:6b:b0:9e:4c:86:2f:34:95:8d:f8:7f:a8:
a9:84:db:16:dd:53:4d:b5:56:79:ac:e3:17:c4:d0:
6a:f3:e6:29:99:c7:11:47:c3:ff:95:d1:af:69:91:
89:22:27:6d:c9:02:41:58:d4:c6:a3:2b:13:b3:0c:
f5:e7:26:c3:00:f7:2e:11:bf:d5:e1:96:dc:e7:b0:
27:8a:ab:47:df:b2:7e:79:14:10:79:01:5c:41:74:
20:c0:cd:c7:c6:11:6c:c5:d4:9d:40:9e:d7:8f:03:
3e:f8:61:ec:5a:19:7c:e7:e8:19:65:f1:f2:88:77:
59:a0:c4:de:da:22:67:fe:00:29:9d:be:a5:d5:49:
0f:45:9b:c3:01:8f:c0:c6:93:ff:6e:3a:f6:e3:29:
91:08:e0:73:60:28:a3:80:ff:82:9c:f7:93:fe:bb:
84:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B2:4B:72:E2:14:AC:A8:15:51:B1:03:FB:B3:29:06:2D:DC:89:9C
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS152606.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.199.0/24
Signature Algorithm: sha256WithRSAEncryption
77:cd:37:36:d1:ae:cf:57:ba:7a:89:97:fd:2f:a5:d7:dd:a1:
15:82:e7:24:2e:d5:8f:31:d7:db:07:96:c9:f2:11:ba:04:72:
0e:6a:97:19:e6:16:b3:20:26:1d:dc:e1:f9:71:0d:ef:79:f4:
26:0d:a2:f3:28:b0:19:a8:bc:f1:a4:e8:d0:fa:01:05:c3:c8:
c5:7d:be:fb:2d:80:c7:91:43:f7:8e:72:4b:75:a6:24:c3:9f:
09:74:9c:da:ce:5a:b4:53:e6:48:3a:98:dc:b2:25:d8:63:2f:
f5:c8:6e:f3:9d:d5:e2:34:7e:9e:cc:f3:50:d2:d4:57:e8:35:
60:f3:63:f3:c2:82:48:3a:39:62:71:84:66:12:02:a1:16:58:
9a:a9:61:cd:a1:fa:75:fb:43:71:24:b7:0e:a6:44:7f:e3:5f:
7d:2f:2e:f7:95:e8:66:c1:7f:01:66:33:54:99:5c:fa:fa:91:
b2:2b:4a:9c:b5:a7:ce:42:38:53:79:91:e6:52:8a:bd:f9:94:
47:1c:79:6b:9d:24:ff:ea:b7:5a:f3:8a:62:d0:94:0c:70:3a:
a7:55:4b:59:d8:db:e6:3a:56:15:8e:a1:e2:3e:62:38:3c:5d:
0c:52:80:97:3b:5b:c2:f6:8f:aa:47:04:0a:8a:d9:43:33:84:
f9:68:0d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 00:21:25 2026 by rpki-client