Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS152179.roa
File:                     AS152179.roa (raw, json)
Hash identifier:          Sw7uSMI3qrVGSRK1GCSDq9mYO1YLBac7tOsK/OxJYuE=
Subject key identifier:   EF:41:1E:09:AD:F3:EF:F0:A4:19:31:26:5B:72:8C:2B:B1:83:6E:69
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       03DE15CE74F13BDFA2721BCFB7DFF40E4FDA8448
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS152179.roa
Signing time:             Fri 13 Nov 2026 10:08:14 +0000
ROA not before:           Fri 13 Nov 2026 10:03:14 +0000
ROA not after:            Fri 12 Nov 2027 10:08:14 +0000
asID:                     152179
IP address blocks:        79.180.108.0/24 maxlen: 24
                          79.183.44.0/24 maxlen: 24
                          109.66.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:de:15:ce:74:f1:3b:df:a2:72:1b:cf:b7:df:f4:0e:4f:da:84:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Nov 13 10:03:14 2026 GMT
            Not After : Nov 12 10:08:14 2027 GMT
        Subject: CN=EF411E09ADF3EFF0A41931265B728C2BB1836E69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2c:11:c2:f5:76:3c:43:71:77:ed:3e:a7:b9:
                    61:0f:4c:63:af:07:72:74:af:3a:84:fb:4f:92:af:
                    4c:d5:83:46:16:56:80:1c:2f:d7:14:02:a6:77:12:
                    97:78:5e:1c:c4:da:9a:98:04:92:ec:a5:46:1d:2e:
                    37:0f:3c:7c:c7:17:6a:ae:51:35:63:4b:04:3e:6c:
                    6d:fd:dc:e8:52:6e:c6:64:dc:60:a3:43:d4:1e:35:
                    67:8a:54:ac:ef:d2:13:97:59:b6:e1:78:cf:47:a1:
                    94:94:83:2b:01:9c:d5:d6:17:e1:4e:1b:c5:d8:78:
                    4e:1b:90:bc:3e:ad:09:85:f8:88:8f:ef:f1:9b:ed:
                    3c:74:02:9d:a3:d3:50:29:e7:f2:80:0f:94:3d:3f:
                    09:ce:62:d0:ab:12:69:32:ab:14:79:c8:91:3c:b6:
                    2d:50:70:e4:d2:f2:45:cc:e8:3e:9a:8e:3b:be:23:
                    bf:af:38:9f:61:61:69:24:ac:00:95:cc:0f:84:b9:
                    03:29:ff:27:e2:88:c5:04:06:9b:94:57:9c:ed:c1:
                    30:1e:73:8c:5b:5f:32:3d:70:ca:50:3b:fe:8e:51:
                    34:93:86:94:70:fa:a9:bf:6c:36:0d:d4:f0:88:c5:
                    8a:72:06:a4:07:a1:f1:dc:f0:9c:d9:3f:4c:bb:b6:
                    88:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:41:1E:09:AD:F3:EF:F0:A4:19:31:26:5B:72:8C:2B:B1:83:6E:69
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS152179.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.180.108.0/24
                  79.183.44.0/24
                  109.66.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:64:b6:9b:a6:22:97:4c:41:3a:02:d8:55:31:90:f0:80:b6:
         a2:40:5a:4b:69:e9:59:62:eb:a1:59:38:9a:b9:c1:cc:7c:21:
         72:fe:2e:6a:b4:03:72:15:bb:24:01:da:7d:dd:e9:cc:59:c0:
         2f:22:a3:d8:f0:ef:a5:2b:62:16:f6:e2:f2:b0:7c:42:83:55:
         8b:34:d3:ae:a1:3e:a5:8d:e6:9c:9b:27:d6:0a:17:a5:24:d8:
         5b:fd:8e:71:98:67:14:b8:aa:2c:63:cf:9d:03:64:bf:b3:28:
         d7:50:ac:da:90:9f:e0:52:22:6b:d7:bb:2e:47:03:6a:d5:ee:
         6d:97:66:23:51:86:ee:a4:4a:83:5e:fb:e1:44:f8:55:83:a4:
         cc:f8:04:d6:b0:ca:e8:76:ca:19:d2:4c:57:22:9c:67:54:f5:
         27:39:6b:1d:5f:d6:7f:43:20:29:57:83:02:16:5a:c2:85:bf:
         d0:7c:11:22:d8:b2:ce:6e:ce:fd:fc:6e:06:a1:f1:bc:78:1b:
         cf:45:c8:a3:7c:d2:b8:ef:57:dd:6f:27:a9:9f:06:9f:4b:1e:
         d5:88:6d:cd:d7:a3:7d:d3:63:c4:79:56:e7:8a:e3:97:91:c3:
         08:a7:6d:15:76:8d:13:95:08:22:fa:c5:92:56:34:29:7b:3f:
         7b:65:95:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:34:13 2026 by rpki-client