Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: JI5/OFNIeZOtPimtx2nuXxNfnldyq/mF+TsVaFqJMyY=
Subject key identifier: 52:DD:46:23:99:16:B0:B9:5B:4D:F1:31:9C:65:C7:78:08:49:F4:85
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 673966CDCF1297E63787DFD6895FF198754D86B2
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS152179.roa
Signing time: Sun 20 Sep 2026 19:55:16 +0000
ROA not before: Sun 20 Sep 2026 19:50:16 +0000
ROA not after: Sun 19 Sep 2027 19:55:16 +0000
asID: 152179
IP address blocks: 46.202.51.0/24 maxlen: 24
46.202.62.0/24 maxlen: 24
46.202.116.0/24 maxlen: 24
46.203.139.0/24 maxlen: 24
46.203.175.0/24 maxlen: 24
46.203.243.0/24 maxlen: 24
91.124.80.0/24 maxlen: 24
91.124.178.0/24 maxlen: 24
92.112.45.0/24 maxlen: 24
92.112.218.0/24 maxlen: 24
92.112.233.0/24 maxlen: 24
92.113.73.0/24 maxlen: 24
92.113.101.0/24 maxlen: 24
92.113.172.0/24 maxlen: 24
92.113.197.0/24 maxlen: 24
95.134.7.0/24 maxlen: 24
95.134.122.0/24 maxlen: 24
95.134.181.0/24 maxlen: 24
95.134.230.0/24 maxlen: 24
95.134.240.0/22 maxlen: 24
95.134.244.0/22 maxlen: 24
95.134.248.0/23 maxlen: 24
95.134.250.0/23 maxlen: 24
95.135.251.0/24 maxlen: 24
178.92.83.0/24 maxlen: 24
178.92.130.0/24 maxlen: 24
178.92.178.0/24 maxlen: 24
178.94.199.0/24 maxlen: 24
178.94.202.0/24 maxlen: 24
178.94.248.0/24 maxlen: 24
178.95.91.0/24 maxlen: 24
178.95.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:39:66:cd:cf:12:97:e6:37:87:df:d6:89:5f:f1:98:75:4d:86:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 20 19:50:16 2026 GMT
Not After : Sep 19 19:55:16 2027 GMT
Subject: CN=52DD46239916B0B95B4DF1319C65C7780849F485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:48:9b:72:ac:9e:60:87:aa:fb:f1:0a:d7:4a:
8c:d3:6f:f2:0e:7d:f3:12:04:70:61:c0:fe:f6:16:
9b:da:c5:eb:0e:9a:ad:c1:a5:2f:2a:f2:7f:98:98:
0b:da:0d:77:85:19:8c:71:ec:14:22:06:0b:78:9f:
18:21:1d:3c:0d:b3:a9:19:f5:b6:84:b7:09:d3:66:
93:0d:79:08:a9:58:71:57:73:03:16:d1:c7:38:9b:
23:96:10:2d:2e:e0:19:4a:80:13:e7:d2:19:1b:bd:
d9:fa:34:f3:86:09:eb:e9:06:62:ea:18:c4:cb:79:
18:be:7d:ff:7c:e5:a3:eb:f5:be:e5:b0:1e:42:8f:
27:81:f0:95:3b:32:db:87:de:b9:a8:ad:de:36:0d:
91:63:62:42:c9:01:f4:e4:13:a3:98:e4:84:7c:27:
82:ab:63:a9:c5:17:29:d0:ba:87:f7:f6:ba:65:86:
43:e6:4a:da:3c:6f:45:13:d5:32:70:a4:02:b7:76:
3e:f4:b1:57:2c:88:fe:fa:15:91:ba:41:b8:fc:1e:
cd:74:bd:44:3c:60:28:01:f3:25:91:7a:21:1b:9b:
6c:b4:b8:ae:ae:16:cb:c8:5e:4e:2b:47:55:3b:41:
83:95:83:3c:ad:12:10:30:50:95:56:24:12:cb:bb:
79:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DD:46:23:99:16:B0:B9:5B:4D:F1:31:9C:65:C7:78:08:49:F4:85
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.51.0/24
46.202.62.0/24
46.202.116.0/24
46.203.139.0/24
46.203.175.0/24
46.203.243.0/24
91.124.80.0/24
91.124.178.0/24
92.112.45.0/24
92.112.218.0/24
92.112.233.0/24
92.113.73.0/24
92.113.101.0/24
92.113.172.0/24
92.113.197.0/24
95.134.7.0/24
95.134.122.0/24
95.134.181.0/24
95.134.230.0/24
95.134.240.0-95.134.251.255
95.135.251.0/24
178.92.83.0/24
178.92.130.0/24
178.92.178.0/24
178.94.199.0/24
178.94.202.0/24
178.94.248.0/24
178.95.91.0/24
178.95.175.0/24
Signature Algorithm: sha256WithRSAEncryption
18:47:41:a6:17:1b:ec:88:62:71:96:3c:10:c2:3f:48:e1:a2:
40:e2:a7:7b:fe:b8:d7:99:03:a3:02:ef:96:dd:5e:94:a0:d7:
3c:b7:e1:66:39:04:40:01:59:b1:0c:d4:08:61:a7:53:27:17:
ab:fb:7f:42:30:0d:e8:91:ed:f6:79:2e:b5:9d:e1:8c:d2:d2:
7b:f0:f6:75:0d:8e:8d:25:a9:6d:1c:79:bc:7a:b7:ea:12:e5:
c3:e8:01:9d:f8:b4:43:fe:2b:af:0b:ae:bf:c8:e0:09:fb:04:
11:61:8b:4b:88:13:bf:2b:66:4d:3b:5a:79:8b:67:6d:2c:e7:
12:20:6d:29:aa:4b:65:5c:20:88:99:c7:71:7f:07:3d:6a:04:
64:30:25:61:38:df:e1:a8:f0:f3:ed:73:08:7f:06:1e:c2:34:
80:a1:e2:11:c0:cf:09:36:db:76:59:0d:68:36:ea:94:17:8f:
4d:aa:b2:31:29:41:49:d9:ed:33:de:06:d6:96:34:00:6b:2d:
09:e8:c1:8e:83:f5:d8:3d:7f:d7:43:47:11:26:0c:ca:8a:5d:
a7:ba:ae:df:b5:f4:fe:e2:89:32:96:0b:5d:b0:28:40:db:ce:
a2:85:20:94:b8:ea:b7:6d:66:d6:21:71:62:de:ce:00:6f:c1:
1f:65:e0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:13:57 2026 by rpki-client