Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152726.roa
File: AS152726.roa (raw, json)
Hash identifier: bsAbmFuTOtOFrosH8XjwFPBObB4hmtEpNiH7qoZluLk=
Subject key identifier: 45:0C:BC:5E:93:7F:A3:0F:95:B7:91:EB:A3:21:74:5C:A6:21:5B:F0
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3FA802C0B67DC99B2AD55829D71E66A1311A6811
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152726.roa
Signing time: Sat 14 Nov 2026 01:19:03 +0000
ROA not before: Sat 14 Nov 2026 01:14:03 +0000
ROA not after: Sat 13 Nov 2027 01:19:03 +0000
asID: 152726
IP address blocks: 162.141.130.0/24 maxlen: 24
162.141.131.0/24 maxlen: 24
162.141.186.0/24 maxlen: 24
162.141.188.0/24 maxlen: 24
167.148.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:a8:02:c0:b6:7d:c9:9b:2a:d5:58:29:d7:1e:66:a1:31:1a:68:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 14 01:14:03 2026 GMT
Not After : Nov 13 01:19:03 2027 GMT
Subject: CN=450CBC5E937FA30F95B791EBA321745CA6215BF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fb:be:83:6e:e7:96:d1:86:0a:98:18:e6:79:
ac:5b:5e:4e:3e:dd:86:90:d3:d1:d6:02:ef:ea:ea:
cc:0d:95:6e:68:4a:a3:f0:0d:61:ca:44:58:65:89:
98:10:1e:8c:d1:46:89:a5:b8:d8:14:dd:54:1d:a2:
d5:9d:83:95:a5:be:a9:0b:b6:eb:d1:d7:2d:81:d6:
fe:fb:3a:d2:88:3c:c4:38:8f:b3:f1:51:c7:d3:aa:
95:d9:4d:13:57:b4:84:ae:ac:46:70:d1:25:dd:0d:
ce:63:8e:56:70:52:ca:a7:56:a8:fb:bc:ec:3c:c5:
98:42:17:11:75:65:ac:da:e0:2d:53:25:68:c9:41:
6d:ac:00:67:54:d2:62:51:80:93:8d:64:59:db:1e:
66:ee:3a:ce:21:eb:67:36:31:b5:61:de:1d:f4:db:
f2:d4:6e:c8:e9:19:a1:ee:4d:9c:4e:d2:a9:57:12:
9c:a0:36:a4:1a:b8:4f:b6:d3:58:5f:a3:73:f0:4a:
58:ff:4d:82:2f:24:6f:53:60:96:52:7f:f2:f1:13:
62:8d:89:5c:75:35:5f:91:29:3c:09:18:86:85:f9:
68:1f:75:9c:01:64:64:77:1d:d2:7d:d0:1e:7d:80:
ef:0a:81:42:1e:c2:5a:c5:5f:38:ae:10:07:76:0f:
eb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0C:BC:5E:93:7F:A3:0F:95:B7:91:EB:A3:21:74:5C:A6:21:5B:F0
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS152726.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.130.0/23
162.141.186.0/24
162.141.188.0/24
167.148.159.0/24
Signature Algorithm: sha256WithRSAEncryption
72:93:3a:e6:67:82:be:8f:e1:de:e4:37:16:cd:95:44:23:ee:
42:ec:e3:c6:98:78:b5:94:73:e0:53:2e:25:3b:aa:58:4c:51:
6b:79:d9:12:78:d7:b0:aa:1a:b9:5f:41:6c:76:ad:4a:42:ed:
4b:b7:50:41:e1:21:7d:fa:af:50:ef:95:8b:db:80:20:95:d6:
f7:cd:9d:5b:f3:8e:50:ed:4b:27:45:71:b0:be:76:d2:f4:f1:
22:e4:c4:96:d4:a6:e9:5b:61:9b:b0:92:1c:96:69:11:9a:92:
80:63:a2:32:29:cf:70:ca:95:23:73:e7:81:2c:c7:44:64:79:
0a:94:d6:6d:bf:fc:87:0a:0a:c0:d7:c1:f3:8c:7b:1f:d4:6c:
1b:da:27:cf:83:c2:e5:3f:a1:2f:36:01:3a:ba:17:3b:69:0a:
78:5f:59:7f:6d:70:ff:3f:11:07:55:c9:f7:e3:a3:e0:a1:8c:
6d:33:31:27:8a:23:fb:03:03:f4:ea:61:a8:5e:13:21:d4:c9:
9b:20:85:9e:c7:62:d0:19:26:32:bf:e2:9d:a2:cc:4c:87:ab:
3e:44:2e:62:72:2d:26:b6:1a:f3:0c:75:23:b0:a6:3d:6f:05:
ba:52:0d:ab:83:cc:b6:38:5b:47:38:eb:9b:8c:b0:27:34:fd:
85:ca:58:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:54:14 2026 by rpki-client