Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: MfPGeD2Mfec2Uwi0YaHqLzY8wmaK0oz6TvIjuduwanE=
Subject key identifier: 1F:34:CE:F5:10:62:4A:73:EB:C6:CC:46:18:49:CB:BA:32:7A:08:BC
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 4A92E52546F6634624276A6C24C7D31BD981C705
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152179.roa
Signing time: Fri 15 Aug 2025 00:02:00 +0000
ROA not before: Thu 14 Aug 2025 23:57:00 +0000
ROA not after: Fri 14 Aug 2026 00:02:00 +0000
asID: 152179
IP address blocks: 179.61.173.0/24 maxlen: 24
181.214.2.0/24 maxlen: 24
181.214.33.0/24 maxlen: 24
181.214.75.0/24 maxlen: 24
181.214.132.0/24 maxlen: 24
181.214.185.0/24 maxlen: 24
181.214.205.0/24 maxlen: 24
181.214.250.0/24 maxlen: 24
181.215.127.0/24 maxlen: 24
181.215.136.0/24 maxlen: 24
181.215.148.0/24 maxlen: 24
181.215.154.0/24 maxlen: 24
181.215.190.0/24 maxlen: 24
181.215.239.0/24 maxlen: 24
185.173.27.0/24 maxlen: 24
194.53.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:92:e5:25:46:f6:63:46:24:27:6a:6c:24:c7:d3:1b:d9:81:c7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 14 23:57:00 2025 GMT
Not After : Aug 14 00:02:00 2026 GMT
Subject: CN=1F34CEF510624A73EBC6CC461849CBBA327A08BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:46:7c:60:b7:bd:8c:bb:2c:7d:e1:fd:00:27:
33:66:e5:79:c7:ef:e9:c4:4b:c0:5b:a0:c4:0b:52:
d2:1f:39:10:f6:19:56:06:f5:3d:5b:f9:52:21:f7:
6e:4d:99:c6:6f:23:65:9d:1f:05:95:fc:f6:11:a8:
de:64:fa:7c:a3:f8:72:bb:1a:03:04:4f:96:6b:f4:
46:2c:3f:49:26:96:41:78:67:dc:b6:8a:92:61:d2:
be:17:7f:d7:1e:3b:03:d3:21:4f:4e:20:da:d5:95:
f1:b4:0d:d6:2f:18:8b:6d:03:f7:2d:5c:02:fb:e5:
75:d1:6c:d9:62:7f:2e:33:9f:6b:89:31:65:d3:b5:
36:4c:ec:39:6a:99:b9:c9:11:86:88:13:00:92:bb:
fc:7c:ac:77:d1:6c:79:cf:75:c5:69:11:4f:ed:fd:
16:1c:83:78:e6:06:8a:e9:ae:0e:f2:68:b8:48:bc:
52:c2:7c:88:49:87:d7:49:bc:00:ca:2f:3c:07:ac:
ed:e7:cb:e3:62:02:78:4a:18:51:67:b6:40:25:2d:
9d:55:a5:d3:e6:44:db:44:0b:c5:02:6e:41:4e:36:
3e:3e:8f:c9:08:de:df:c9:ff:cb:15:a6:84:45:8e:
de:76:79:11:7c:19:58:33:40:2a:05:14:3e:be:d8:
68:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:34:CE:F5:10:62:4A:73:EB:C6:CC:46:18:49:CB:BA:32:7A:08:BC
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.173.0/24
181.214.2.0/24
181.214.33.0/24
181.214.75.0/24
181.214.132.0/24
181.214.185.0/24
181.214.205.0/24
181.214.250.0/24
181.215.127.0/24
181.215.136.0/24
181.215.148.0/24
181.215.154.0/24
181.215.190.0/24
181.215.239.0/24
185.173.27.0/24
194.53.142.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:f5:23:aa:76:c9:b1:03:a5:60:04:4b:5f:7e:2a:e0:78:13:
eb:1c:19:b3:a8:db:9f:08:f9:cb:8b:c4:53:62:8e:ed:2f:20:
fd:c9:a8:d5:9d:de:f0:83:47:a5:1c:28:2d:c2:b0:a8:59:0e:
5d:db:af:96:c0:36:52:2e:bf:f0:b7:bf:5e:e8:e1:7a:bd:0b:
59:c1:e1:64:3d:81:d1:7a:0e:45:5d:ac:bb:0c:7a:d4:c0:c3:
14:40:52:c9:ac:f9:2c:85:f3:77:4d:2c:35:2f:01:bc:8d:c0:
71:c0:c0:87:32:f6:40:da:4e:0d:28:2f:2b:1a:be:cc:7b:8a:
89:1e:74:62:bd:54:56:a3:28:f9:cb:24:cb:0c:07:05:06:d5:
81:46:b0:1b:67:85:2a:ae:ab:d4:c2:70:61:ed:11:d0:ac:63:
11:68:3a:43:dc:d5:3b:77:2e:59:4d:7c:9a:8d:da:ec:b6:87:
ac:74:7b:1d:ad:de:ab:7e:e6:6e:fa:dc:02:61:31:f3:1e:d4:
26:94:6e:8d:c6:9d:0f:cd:16:a9:ef:90:0a:af:e9:87:76:2a:
86:ab:b7:19:37:01:64:62:46:77:a4:85:d4:66:12:9c:00:bc:
a4:e8:2a:d2:d4:76:00:cb:d8:ce:1a:a1:27:03:06:42:ca:95:
4d:f5:1c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:41:21 2025 by rpki-client