Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152606.roa
File: AS152606.roa (raw, json)
Hash identifier: YE1v/zJ6ONn+eckxN04oxwJifohpROAMhfuh0oQY/yc=
Subject key identifier: 7F:A7:9F:CA:93:0A:D8:42:C5:C7:9D:B2:C5:A7:A4:2A:0F:3D:06:FF
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 72BEC41EFF7B815983A0B46449881841D3EB4E45
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152606.roa
Signing time: Thu 12 Nov 2026 05:59:42 +0000
ROA not before: Thu 12 Nov 2026 05:54:42 +0000
ROA not after: Thu 11 Nov 2027 05:59:42 +0000
asID: 152606
IP address blocks: 45.95.23.0/24 maxlen: 24
89.19.46.0/24 maxlen: 24
92.119.35.0/24 maxlen: 24
130.185.124.0/24 maxlen: 24
191.96.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:be:c4:1e:ff:7b:81:59:83:a0:b4:64:49:88:18:41:d3:eb:4e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 12 05:54:42 2026 GMT
Not After : Nov 11 05:59:42 2027 GMT
Subject: CN=7FA79FCA930AD842C5C79DB2C5A7A42A0F3D06FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:20:b8:b2:f7:60:35:1e:a9:cb:e7:31:51:34:
57:14:ad:c6:ed:d8:b1:2c:15:37:8b:2d:b1:e9:4c:
e6:eb:3a:96:2b:d9:be:f0:d6:80:7a:0c:aa:97:c7:
fa:bf:42:78:16:27:f6:4c:ac:82:86:73:75:b3:92:
3f:68:49:5c:1a:06:0c:ff:6b:87:88:9b:ab:e6:19:
04:f7:2a:65:cd:78:b9:26:fd:82:d9:fe:d6:4f:b6:
7b:ea:bb:5b:e8:c5:03:eb:c8:76:42:8a:cf:39:1a:
ea:04:f8:b0:f4:a4:42:a0:a7:f0:8c:3d:1f:dc:ca:
4f:ce:98:f8:56:be:de:a3:dc:0f:ec:4f:d5:5b:bd:
d1:1c:06:ce:de:1a:89:05:db:cc:7b:d0:ae:b7:98:
50:3a:40:13:15:a8:ff:e8:42:26:19:68:a1:2d:a8:
c6:b3:76:38:bc:be:17:36:1e:3f:c6:19:d1:2a:b5:
2f:3b:21:4c:0e:e5:df:5d:1a:aa:5c:20:2e:0d:53:
f3:80:61:ee:fc:36:70:9e:f3:46:b0:de:56:84:dd:
88:8f:b1:5e:9c:d6:71:08:c3:0e:1a:5c:21:ba:48:
7c:11:9a:df:b6:08:92:a6:eb:c6:cb:3d:36:e5:48:
2f:78:99:6b:03:92:71:2c:d4:1f:69:f9:76:34:0f:
6c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A7:9F:CA:93:0A:D8:42:C5:C7:9D:B2:C5:A7:A4:2A:0F:3D:06:FF
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS152606.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.23.0/24
89.19.46.0/24
92.119.35.0/24
130.185.124.0/24
191.96.3.0/24
Signature Algorithm: sha256WithRSAEncryption
13:1f:ba:d2:1b:31:b8:94:db:21:19:eb:bf:9b:ad:0f:7a:78:
de:e3:85:e7:47:a7:95:48:33:bb:ae:32:48:0c:94:cf:49:d6:
78:f8:61:18:c4:5c:b7:ed:72:b4:c6:11:76:df:a9:0a:5c:60:
83:c9:98:0f:66:cc:dc:43:77:49:48:ee:f1:26:89:76:b4:bb:
28:3c:59:05:23:7f:b7:4f:05:00:c3:92:fc:ca:0e:89:f1:f1:
49:7a:57:88:c9:e2:1b:38:ca:14:72:72:7f:49:33:79:1f:db:
94:f4:8e:7d:42:a7:0d:e5:83:cc:fe:48:2b:b5:48:ff:36:b4:
c7:47:6a:48:39:f5:be:79:01:77:13:fc:1c:25:74:7b:e0:cf:
80:46:40:30:20:8f:26:13:cc:b7:e3:92:fb:cc:84:2c:19:5e:
5d:e1:cb:1b:20:62:1d:0b:6d:0f:a8:36:93:be:10:4c:b3:f2:
fe:d8:b9:bc:68:3d:a1:15:70:44:df:8a:f3:1d:b0:52:3a:cf:
36:75:1b:f2:0f:53:f9:8c:c5:49:43:4e:7b:a2:35:10:d1:d9:
c3:dc:19:82:13:57:97:e2:f6:01:9e:d8:1a:0c:28:d5:92:44:
ce:8f:0e:17:84:47:19:1a:ed:d2:5f:4b:6e:39:36:1f:68:6c:
52:9f:e9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:34:42 2026 by rpki-client