Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: CLoHb65khJ/xkZgyKfE4QHe9gx+LzXYYD8aDDeekOmU=
Subject key identifier: A2:26:7A:69:C0:DE:D2:8D:32:DA:0B:45:AD:97:AA:96:E3:65:47:F2
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 5EC5658C22B19856921906F56EBAEE686887F7C1
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS152179.roa
Signing time: Tue 30 Sep 2025 10:03:14 +0000
ROA not before: Tue 30 Sep 2025 09:58:14 +0000
ROA not after: Tue 29 Sep 2026 10:03:14 +0000
asID: 152179
IP address blocks: 46.236.198.0/24 maxlen: 24
46.236.200.0/23 maxlen: 24
46.236.202.0/24 maxlen: 24
46.236.220.0/24 maxlen: 24
46.236.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:c5:65:8c:22:b1:98:56:92:19:06:f5:6e:ba:ee:68:68:87:f7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 30 09:58:14 2025 GMT
Not After : Sep 29 10:03:14 2026 GMT
Subject: CN=A2267A69C0DED28D32DA0B45AD97AA96E36547F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:31:1b:4c:86:c9:49:31:db:a1:22:33:fc:
ed:0b:05:58:14:c7:a9:48:cb:94:05:bc:26:83:61:
46:29:eb:92:b4:56:3e:54:51:4c:20:27:40:c7:2d:
05:59:be:5c:71:91:f3:4b:ce:70:15:0e:7f:16:99:
7f:6e:91:6c:19:da:af:2a:d2:72:e1:0e:bc:26:2e:
26:37:dc:07:b4:20:80:1d:71:b1:e1:9f:01:b6:38:
50:08:44:38:69:ac:dd:d6:09:df:c2:6e:24:d1:58:
74:03:36:d9:40:cf:1f:1b:96:e0:07:a8:4b:d8:c4:
50:57:17:a0:ee:bc:ea:5a:36:ee:2a:54:77:31:76:
80:8f:49:cc:09:28:51:53:4b:4d:0c:8e:cf:09:d6:
3e:77:e7:e3:e2:ed:5a:b7:eb:70:e3:02:52:15:0c:
3c:31:f0:32:8c:fd:f6:1b:78:f5:55:46:f8:6e:48:
39:01:ff:14:74:ac:c5:d1:3a:df:61:e8:f6:e8:27:
f5:30:f8:ac:15:2a:ba:af:ca:65:d8:e4:df:85:c0:
e2:64:af:9a:f5:ce:92:25:51:10:c1:54:06:62:11:
fb:2d:40:dd:5d:db:8e:87:6e:dd:7e:dd:4d:e9:55:
f2:39:37:f5:cb:06:d6:61:12:c6:39:1f:d8:d5:b9:
5d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:26:7A:69:C0:DE:D2:8D:32:DA:0B:45:AD:97:AA:96:E3:65:47:F2
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.198.0/24
46.236.200.0-46.236.202.255
46.236.220.0/23
Signature Algorithm: sha256WithRSAEncryption
67:37:3e:b3:8f:c1:ab:ed:84:97:ff:3f:14:d6:b0:e8:ce:96:
38:0e:05:46:48:30:72:9f:17:47:1f:f4:9f:26:1d:d4:d2:f8:
69:24:d8:b3:50:9a:3d:dc:72:ee:0f:ef:1a:90:c1:49:3b:ea:
83:e4:10:24:d3:be:35:26:d8:84:4b:b3:65:1d:c4:9e:4f:07:
ea:86:0f:ea:02:55:d8:11:2b:1c:00:14:f8:ca:9e:0c:58:2f:
b7:c4:40:b9:39:bc:33:08:24:08:c6:aa:3f:ca:84:1f:f7:41:
a0:15:49:54:f6:d8:35:e5:95:4e:ab:72:d5:98:1d:5d:84:5b:
05:b2:a4:49:9c:b2:c8:6e:e3:7d:de:e6:7e:8a:97:28:d0:a2:
5a:56:4a:60:1e:52:96:57:9f:05:94:cd:a5:bd:e9:f0:2f:54:
31:7a:9f:dd:e2:8e:76:63:f0:f4:ce:c8:a8:b7:d6:98:82:79:
a5:00:ea:dc:b7:9a:21:cd:1d:f3:ed:91:b3:ea:80:d8:ba:1b:
2b:13:be:58:88:a6:87:ae:48:43:39:f1:4e:29:45:56:fa:3b:
98:57:97:51:f2:bf:dc:c4:e3:e3:9e:f5:7a:95:d7:1f:14:87:
6c:69:fd:86:58:0b:c3:90:22:5e:d2:fd:dd:ec:26:28:d5:7c:
a0:0a:b7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:26 2025 by rpki-client