Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: wrM+P1w+eWUMjrIAsuCwHpOJv6GZARV/ANDeawCXLoE=
Subject key identifier: 72:69:31:B4:2F:F2:1B:49:EC:09:C1:2F:85:BF:A5:55:AF:D1:CC:43
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2F43483FD9403A59F16BD9F13F2F76125E96D302
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152179.roa
Signing time: Tue 22 Sep 2026 15:46:06 +0000
ROA not before: Tue 22 Sep 2026 15:41:06 +0000
ROA not after: Tue 21 Sep 2027 15:46:06 +0000
asID: 152179
IP address blocks: 64.239.68.0/24 maxlen: 24
66.132.155.0/24 maxlen: 24
66.132.184.0/24 maxlen: 24
66.132.192.0/24 maxlen: 24
66.132.193.0/24 maxlen: 24
66.155.64.0/24 maxlen: 24
66.234.11.0/24 maxlen: 24
69.90.33.0/24 maxlen: 24
69.90.116.0/24 maxlen: 24
143.14.76.0/24 maxlen: 24
146.103.16.0/23 maxlen: 24
147.79.63.0/24 maxlen: 24
148.135.173.0/24 maxlen: 24
150.241.129.0/24 maxlen: 24
155.117.86.0/24 maxlen: 24
155.117.118.0/24 maxlen: 24
155.117.119.0/24 maxlen: 24
155.117.168.0/24 maxlen: 24
155.117.202.0/24 maxlen: 24
155.117.220.0/24 maxlen: 24
162.141.130.0/24 maxlen: 24
167.148.189.0/24 maxlen: 24
167.148.197.0/24 maxlen: 24
168.222.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:43:48:3f:d9:40:3a:59:f1:6b:d9:f1:3f:2f:76:12:5e:96:d3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 22 15:41:06 2026 GMT
Not After : Sep 21 15:46:06 2027 GMT
Subject: CN=726931B42FF21B49EC09C12F85BFA555AFD1CC43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0e:61:96:f9:32:0a:17:01:41:45:5d:61:08:
3c:2c:1a:af:b9:cc:09:cc:bb:10:2a:29:10:25:ad:
5e:58:db:8d:36:ce:4c:93:33:28:32:38:65:e3:3e:
70:48:cb:75:ba:8e:eb:00:fe:5e:ba:a3:03:fb:e7:
04:24:46:cd:98:8e:e3:6e:c5:4c:b7:5a:e2:ec:00:
00:c7:eb:28:be:4f:b8:46:79:31:79:79:e8:6b:0c:
7f:ed:63:ba:a5:3a:ea:fb:a4:31:96:c6:e3:38:3c:
79:a3:c3:25:7f:93:bd:3c:2a:25:04:04:6d:fc:7d:
d1:3c:32:cb:9d:0f:9b:2a:55:ca:5a:70:7b:2a:ab:
0b:b7:89:c9:71:c1:73:af:5d:49:50:87:8f:c7:b0:
6c:84:0f:b6:f5:55:6d:d6:8f:41:bb:6f:86:df:f1:
d4:66:3c:e2:50:f0:5d:39:f0:4f:1d:0e:bb:23:94:
5a:ca:75:87:5b:b4:08:1f:0e:de:83:dc:1e:b8:e2:
e0:41:50:f4:8b:b1:df:d3:bf:57:b0:6e:92:ef:94:
2f:2b:42:0b:8b:b5:d8:87:69:1e:c3:89:cf:e6:15:
b4:85:dc:db:e0:0f:a1:0d:23:f4:8a:11:8b:5b:34:
c9:3a:35:8d:59:ab:f7:b0:9b:17:d4:84:b6:bf:5a:
75:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:69:31:B4:2F:F2:1B:49:EC:09:C1:2F:85:BF:A5:55:AF:D1:CC:43
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.239.68.0/24
66.132.155.0/24
66.132.184.0/24
66.132.192.0/23
66.155.64.0/24
66.234.11.0/24
69.90.33.0/24
69.90.116.0/24
143.14.76.0/24
146.103.16.0/23
147.79.63.0/24
148.135.173.0/24
150.241.129.0/24
155.117.86.0/24
155.117.118.0/23
155.117.168.0/24
155.117.202.0/24
155.117.220.0/24
162.141.130.0/24
167.148.189.0/24
167.148.197.0/24
168.222.91.0/24
Signature Algorithm: sha256WithRSAEncryption
10:42:1f:6b:06:75:b3:47:93:f5:39:9b:93:b9:34:e7:d0:5a:
6e:46:ed:f4:f1:f1:0e:f6:a0:20:d4:91:52:fc:97:c5:dc:6a:
76:42:c9:9b:fd:fc:82:41:78:1f:66:97:96:f8:23:14:16:51:
d9:ac:b1:70:b3:a4:6e:03:88:d3:cb:88:ff:2b:3a:0d:bc:09:
4c:37:3a:ad:5a:a4:91:a5:d5:eb:18:19:56:75:6e:7b:93:50:
9e:6c:76:a5:13:1c:e3:d2:3d:c2:b8:b3:65:b8:67:94:cd:db:
bd:1d:c6:1c:9d:b2:02:38:99:d8:62:7f:8c:90:2c:8b:ba:8c:
36:bd:1e:de:95:f0:48:1d:51:20:63:77:47:b3:6b:b5:fb:bc:
aa:cc:76:fb:d2:99:38:5d:e8:dd:2e:3d:13:83:90:db:e8:d7:
99:01:8d:66:ba:44:53:aa:ba:3f:7d:f0:dd:71:b3:0f:ab:f4:
2e:6e:a2:66:99:ab:34:3b:7a:45:e2:c2:2f:61:f9:94:b1:c3:
3c:8b:ae:67:6c:3c:6b:54:8c:d6:2c:f8:2b:20:92:62:29:7a:
58:b3:1e:44:14:ed:2e:c6:83:07:53:c4:80:dc:f0:06:25:3a:
1d:91:cb:c0:8c:48:93:af:c7:51:85:cb:d6:0d:35:38:9c:d7:
0c:d7:47:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:46:24 2026 by rpki-client