Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS151389.roa
File: AS151389.roa (raw, json)
Hash identifier: zl1L0GjfclEF/EG3ikjpKhjmIU3PKArvq2Xg/t/v1GM=
Subject key identifier: 52:F6:2C:50:FC:BE:E3:A0:45:E5:BA:FF:0B:21:E9:61:07:96:6F:3C
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 2F488CE9B359DF8290FD4348A7C6B85D27587250
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS151389.roa
Signing time: Thu 07 May 2026 16:31:11 +0000
ROA not before: Thu 07 May 2026 16:26:11 +0000
ROA not after: Thu 06 May 2027 16:31:11 +0000
asID: 151389
IP address blocks: 46.236.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:48:8c:e9:b3:59:df:82:90:fd:43:48:a7:c6:b8:5d:27:58:72:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: May 7 16:26:11 2026 GMT
Not After : May 6 16:31:11 2027 GMT
Subject: CN=52F62C50FCBEE3A045E5BAFF0B21E96107966F3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ee:bd:c2:f4:73:a7:69:de:54:cd:39:f9:02:
07:c2:a1:9f:21:cd:b2:2d:d2:e7:c0:7b:4a:2f:6d:
e9:a0:03:27:d2:54:79:9e:30:a4:e8:e2:96:0f:8e:
28:52:4a:eb:03:0c:f5:a1:bf:ea:18:90:a1:44:ad:
15:46:c3:88:99:48:c3:6f:66:64:42:7f:0f:4a:a1:
01:62:7c:87:4c:71:27:4d:c1:55:62:74:8d:0e:b0:
11:ae:7d:03:8b:31:bd:a8:e9:be:9d:62:0e:8d:99:
ca:6a:76:3c:99:7f:45:2f:2d:3d:04:c7:76:7e:7f:
04:b8:dd:b9:98:7e:de:7c:cc:f5:4a:af:b3:35:4b:
79:0a:18:be:cf:57:f5:50:4c:8d:72:59:65:7a:85:
87:3c:04:0f:af:d2:fb:92:c4:50:bf:0a:0a:b8:ec:
f8:53:27:f9:b0:c0:6e:1b:46:a6:92:a0:79:ee:fb:
7b:eb:34:0f:e7:9a:d0:9d:cb:b6:90:0c:d6:7c:34:
be:36:a9:3d:f1:a4:f6:9b:42:f2:64:86:07:17:6d:
e1:ae:fd:74:dc:f8:90:61:fd:9b:1d:b1:2b:0c:93:
86:83:bd:92:38:e4:11:bc:f5:57:8d:c0:ac:fb:f9:
94:16:29:6a:dc:51:8c:65:d1:4d:b9:cf:07:0d:77:
fb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F6:2C:50:FC:BE:E3:A0:45:E5:BA:FF:0B:21:E9:61:07:96:6F:3C
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS151389.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.253.0/24
Signature Algorithm: sha256WithRSAEncryption
12:21:f2:73:99:89:19:e6:52:90:e1:62:61:fe:72:6b:82:5a:
5b:36:62:53:b7:eb:6e:7a:f2:9b:0f:78:cc:0e:8b:8c:78:fc:
a2:bf:be:2f:8c:29:b3:97:31:17:98:04:c9:c6:b6:bc:16:10:
7b:19:38:40:11:74:b4:e1:67:7e:07:a3:e8:d2:8d:2e:5f:7f:
41:4d:48:ad:62:7e:2a:3b:75:57:97:4f:fb:a6:af:0a:1b:6d:
b0:3d:ea:c8:41:3b:eb:3f:28:68:5e:c3:13:bd:b0:86:47:88:
f8:61:52:91:c5:6d:09:00:86:cf:9a:37:59:78:73:b2:5f:7a:
04:03:83:7d:8f:6c:7b:d4:f3:ff:37:3a:51:fb:a6:85:49:e2:
ee:f2:4f:c2:92:45:4e:18:be:0f:28:f1:ae:27:e1:37:e2:0d:
c7:6d:40:51:04:11:5a:ee:26:49:6a:94:08:69:16:fe:43:8b:
98:bf:5d:3e:aa:49:e5:57:3b:33:0e:c0:8d:c1:c8:d9:1f:14:
e1:58:2e:b7:91:76:be:17:87:37:13:ed:f7:69:41:68:89:80:
01:84:fd:0e:30:bd:70:42:8b:c2:83:b7:92:6b:68:b2:59:01:
68:57:8a:df:cc:93:4c:16:41:36:eb:96:49:25:36:2e:fe:91:
c1:7a:d3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:34:56 2026 by rpki-client