Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: vAqdFlfmY40Cm6737OZQuZwgBFtanRv0REIS3oW4sgI=
Subject key identifier: 9D:E4:15:A7:BD:CC:9C:83:7D:9A:AE:CF:83:47:A9:50:38:D9:35:1D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 52C1BC4A178D20237925AFDC1292C0AAC12647C5
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152179.roa
Signing time: Tue 12 May 2026 08:04:33 +0000
ROA not before: Tue 12 May 2026 07:59:33 +0000
ROA not after: Tue 11 May 2027 08:04:33 +0000
asID: 152179
IP address blocks: 143.14.76.0/24 maxlen: 24
146.103.16.0/23 maxlen: 24
150.241.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:c1:bc:4a:17:8d:20:23:79:25:af:dc:12:92:c0:aa:c1:26:47:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 12 07:59:33 2026 GMT
Not After : May 11 08:04:33 2027 GMT
Subject: CN=9DE415A7BDCC9C837D9AAECF8347A95038D9351D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0d:9c:55:e7:bf:3c:f9:70:2a:68:86:6a:16:
71:29:73:a8:cc:6a:f4:62:fd:f6:15:f1:89:70:79:
a1:cc:6e:ae:98:8b:be:b0:2d:7d:a5:62:cd:a0:d6:
3b:8a:7e:b1:b9:f7:6b:8d:bf:71:36:c6:7f:4e:69:
db:dd:22:bf:aa:ac:c6:37:bf:5b:1c:96:58:bf:38:
48:4d:8f:7d:49:fd:43:4d:06:3e:a5:25:60:40:60:
c1:4a:49:6d:34:ca:c0:f5:aa:14:d7:4c:93:d9:13:
29:cd:92:34:16:20:58:db:f4:66:42:57:ac:c4:89:
2c:12:7d:74:ea:81:70:46:b0:2e:b0:b3:76:85:91:
9b:0d:82:b9:0f:8a:87:4e:28:92:66:d5:1f:60:df:
59:e0:56:e9:d1:20:b0:e8:99:79:45:ff:8b:70:cf:
c3:60:63:db:4c:93:ec:23:17:32:27:9b:b7:26:5f:
01:e0:93:d8:c1:c8:5a:ea:bb:4c:fb:55:79:9b:9f:
4a:62:fb:1c:db:9b:80:5f:d9:bb:e6:d7:b7:17:45:
94:f5:e9:0b:94:d1:f8:13:4f:bd:90:b6:e4:d6:52:
e9:7f:88:12:11:c1:38:f7:38:9f:9e:8b:31:ba:55:
b9:d8:80:45:09:19:59:3d:ad:16:64:cc:c3:4c:8a:
44:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E4:15:A7:BD:CC:9C:83:7D:9A:AE:CF:83:47:A9:50:38:D9:35:1D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.76.0/24
146.103.16.0/23
150.241.129.0/24
Signature Algorithm: sha256WithRSAEncryption
24:b5:99:6c:fb:77:82:25:2c:f6:f5:49:b4:5f:ac:c5:c4:64:
96:cb:57:60:50:57:af:40:55:34:ef:05:51:f1:77:b0:3e:be:
a4:d4:9e:2a:ca:64:32:aa:c8:24:75:4a:03:19:96:c2:7e:4f:
5a:70:e0:c3:95:44:c9:23:db:06:dd:b9:12:b4:9b:fb:bd:14:
c4:12:0b:65:53:8c:50:78:b6:ce:93:d0:5f:90:a6:33:fb:d9:
3a:14:0c:0e:bc:29:fe:cc:58:43:69:24:6d:94:1f:6e:e1:25:
e5:bf:e3:cb:77:bf:46:f4:e6:5f:a4:37:53:97:36:b2:f7:45:
ea:0a:5d:44:c7:88:be:94:3a:5c:c7:6a:4e:d5:b8:e3:66:7b:
b5:fe:6e:2c:dd:26:6b:3b:b4:ee:6f:6d:25:9c:f4:3f:13:77:
96:31:b0:a0:e9:89:42:02:9c:d0:97:4f:26:f6:9f:2a:e5:f3:
4a:27:7c:79:4e:3a:c2:24:a2:c3:64:c3:8b:05:7b:f7:ad:d2:
5e:42:16:8a:b9:24:da:4b:b0:d7:01:5f:19:16:11:61:48:03:
fc:0d:90:c7:6f:46:53:9b:78:60:83:b6:e9:fa:9c:e1:b7:a5:
82:92:3c:c8:1f:6e:2e:b8:1f:4c:15:27:93:14:44:39:17:9b:
fd:d3:1f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:05:20 2026 by rpki-client