Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152606.roa
File: AS152606.roa (raw, json)
Hash identifier: 0auwG/rmmNt+Bndn+YPByS/175Wvvbc2QyeSWFUm/vs=
Subject key identifier: 58:69:C7:95:C3:E6:27:77:89:D4:ED:EE:EF:6A:38:C1:7E:28:C3:8D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3E8B09A413F37E0C77E6E9B5D2B03644BBFB7024
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152606.roa
Signing time: Thu 12 Nov 2026 05:59:40 +0000
ROA not before: Thu 12 Nov 2026 05:54:40 +0000
ROA not after: Thu 11 Nov 2027 05:59:40 +0000
asID: 152606
IP address blocks: 69.90.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 07:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:8b:09:a4:13:f3:7e:0c:77:e6:e9:b5:d2:b0:36:44:bb:fb:70:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 12 05:54:40 2026 GMT
Not After : Nov 11 05:59:40 2027 GMT
Subject: CN=5869C795C3E6277789D4EDEEEF6A38C17E28C38D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:83:4e:e1:44:57:ed:da:e4:fd:d3:8d:c2:a3:
8f:a3:ce:d8:43:06:2a:fa:a0:e2:38:59:30:47:67:
68:92:dd:2f:1e:b1:9f:52:c7:e4:b6:69:9f:c6:93:
a4:58:87:c6:50:17:d7:6f:60:cf:c9:c9:9a:3c:10:
97:27:02:3a:43:3e:60:de:de:30:61:dd:2e:fe:54:
3e:a1:f6:8e:95:76:3b:13:a2:96:6b:bf:ba:59:fb:
c0:3e:76:75:e2:93:fd:5a:ff:33:a4:1b:11:a1:1e:
17:95:c6:09:c7:4e:80:59:17:44:96:04:65:7a:14:
b0:99:29:7a:fb:47:5b:58:e1:95:e0:83:c7:8e:49:
51:7c:0d:1b:c6:e8:cb:19:fd:fa:06:5b:56:1a:77:
16:8b:fc:08:28:67:c0:c6:c0:62:bf:4c:94:0a:f6:
04:d7:3d:3f:1f:bd:61:4b:ad:d9:80:dd:ec:44:dd:
ed:52:ac:7c:d5:8c:27:7c:ab:7b:65:37:60:18:c0:
b3:d4:3e:d4:ac:ea:57:0e:2c:70:2a:94:55:c4:8d:
30:f2:f6:9c:93:18:d2:55:be:72:c6:24:99:df:42:
0c:e9:e8:53:15:bd:d3:5b:00:8a:7c:d6:2a:47:85:
a2:9d:9c:9f:8b:d6:e5:b9:c1:af:9d:9b:e4:53:ba:
bd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:69:C7:95:C3:E6:27:77:89:D4:ED:EE:EF:6A:38:C1:7E:28:C3:8D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152606.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.90.128.0/24
Signature Algorithm: sha256WithRSAEncryption
20:2f:89:b3:0f:d9:90:cd:2a:37:6c:ec:bf:df:f8:76:83:73:
b3:d3:bd:c9:73:c4:25:eb:75:9c:91:3d:db:bf:e9:90:d0:eb:
a3:1a:41:bc:f6:60:0b:5d:56:15:c1:73:cf:d1:78:78:07:c3:
ad:a8:5d:ce:39:c1:77:94:fa:2f:40:c6:7d:97:7b:b4:d7:87:
c0:a5:45:d9:03:a9:4f:fe:f6:4a:23:6b:94:fa:c9:da:37:f4:
66:da:fb:03:a9:40:21:7e:6f:13:e6:84:f7:00:9e:4a:42:70:
d0:3d:58:d6:c0:2f:9c:5f:79:61:96:b3:0a:ff:cd:f3:7e:bd:
03:8e:0a:8a:81:eb:26:d0:a7:7c:1e:92:36:95:b9:4d:74:10:
43:d7:e1:89:bd:cf:19:c7:11:85:5a:63:31:9c:3c:bd:73:93:
2a:d5:ee:21:71:1a:14:fa:c8:a6:0c:12:a5:b4:59:07:83:37:
52:9a:54:12:33:d3:d3:76:8c:0f:f9:b0:07:9d:f9:ea:22:7f:
7d:0e:e8:2b:b2:8a:81:89:0d:21:41:98:50:5c:a6:f4:01:87:
23:d1:8a:96:67:ba:c6:48:11:00:9b:a6:9a:f0:81:d8:67:99:
64:df:ad:90:0c:b5:97:34:c2:9f:eb:73:ef:28:40:a8:3f:c0:
bc:3c:49:f7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUPosJpBPzfgx35um10rA2RLv7cCQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjExMTIwNTU0NDBaFw0yNzExMTEwNTU5NDBaMDMxMTAvBgNV
BAMTKDU4NjlDNzk1QzNFNjI3Nzc4OUQ0RURFRUVGNkEzOEMxN0UyOEMzOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWg07hRFft2uT9043Co4+jzthD
Bir6oOI4WTBHZ2iS3S8esZ9Sx+S2aZ/Gk6RYh8ZQF9dvYM/JyZo8EJcnAjpDPmDe
3jBh3S7+VD6h9o6VdjsTopZrv7pZ+8A+dnXik/1a/zOkGxGhHheVxgnHToBZF0SW
BGV6FLCZKXr7R1tY4ZXgg8eOSVF8DRvG6MsZ/foGW1YadxaL/AgoZ8DGwGK/TJQK
9gTXPT8fvWFLrdmA3exE3e1SrHzVjCd8q3tlN2AYwLPUPtSs6lcOLHAqlFXEjTDy
9pyTGNJVvnLGJJnfQgzp6FMVvdNbAIp81ipHhaKdnJ+L1uW5wa+dm+RTur2bAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUWGnHlcPmJ3eJ1O3u72o4wX4ow40wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTUyNjA2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARVqA
MA0GCSqGSIb3DQEBCwUAA4IBAQAgL4mzD9mQzSo3bOy/3/h2g3Oz073Jc8Ql63Wc
kT3bv+mQ0OujGkG89mALXVYVwXPP0Xh4B8OtqF3OOcF3lPovQMZ9l3u014fApUXZ
A6lP/vZKI2uU+snaN/Rm2vsDqUAhfm8T5oT3AJ5KQnDQPVjWwC+cX3lhlrMK/83z
fr0DjgqKgesm0Kd8HpI2lblNdBBD1+GJvc8ZxxGFWmMxnDy9c5Mq1e4hcRoU+sim
DBKltFkHgzdSmlQSM9PTdowP+bAHnfnqIn99DugrsoqBiQ0hQZhQXKb0AYcj0YqW
Z7rGSBEAm6aa8IHYZ5lk362QDLWXNMKf63PvKECoP8C8PEn3
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:34:15 2026 by rpki-client