Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS152726.roa
File:                     AS152726.roa (raw, json)
Hash identifier:          /ticlXF7cND1o1ofiKues2v1TjDUXBHsMv+cowpiNr8=
Subject key identifier:   6C:42:27:C3:37:62:0A:E9:8A:0D:A3:17:92:43:AE:85:06:08:E2:E4
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       1972DD4EF3C4B95A13C54B8076C33917E59BCDF4
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS152726.roa
Signing time:             Sat 14 Nov 2026 01:18:54 +0000
ROA not before:           Sat 14 Nov 2026 01:13:54 +0000
ROA not after:            Sat 13 Nov 2027 01:18:54 +0000
asID:                     152726
IP address blocks:        79.176.14.0/24 maxlen: 24
                          79.182.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:72:dd:4e:f3:c4:b9:5a:13:c5:4b:80:76:c3:39:17:e5:9b:cd:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Nov 14 01:13:54 2026 GMT
            Not After : Nov 13 01:18:54 2027 GMT
        Subject: CN=6C4227C337620AE98A0DA3179243AE850608E2E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:16:77:c1:27:bd:13:b6:7f:ae:1a:97:db:32:
                    b1:0e:4d:23:f8:e7:93:e6:52:9d:18:ab:13:99:d0:
                    11:c1:71:9c:fa:3a:0e:df:9f:60:9c:51:0e:2d:0d:
                    64:ba:28:96:86:10:bb:78:48:ef:63:07:02:a6:be:
                    59:13:90:67:4b:cb:6d:d7:4a:43:a8:5b:87:5d:0e:
                    ad:ba:89:1c:d0:a0:71:03:5c:eb:48:0d:2b:08:3e:
                    86:7b:60:8d:fe:f8:82:e7:3f:f1:07:e9:8c:1a:c0:
                    53:d5:93:61:36:b1:14:85:d2:49:b8:7b:ad:a8:2f:
                    2d:c8:23:75:7c:0d:ae:1d:55:9c:56:e9:16:ee:d4:
                    6f:72:bb:22:a1:cd:82:ca:e5:79:4e:7e:21:4e:0e:
                    db:7f:0e:ef:90:c6:9e:c1:32:d5:01:bf:07:e5:31:
                    33:53:1c:e7:34:83:2d:d5:23:04:25:9d:98:8d:20:
                    10:f3:65:53:86:53:a2:44:3b:f9:03:49:0e:2c:34:
                    cf:6a:2d:a0:62:dc:78:8c:04:28:85:c0:9e:12:58:
                    19:bd:31:8b:75:5d:73:49:20:d1:ee:0e:f3:41:ce:
                    16:f9:66:4d:3e:9f:9d:bc:0b:38:5f:20:7e:5d:03:
                    f4:80:8c:ec:b7:be:05:b5:3b:01:76:6c:fc:2b:44:
                    34:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:42:27:C3:37:62:0A:E9:8A:0D:A3:17:92:43:AE:85:06:08:E2:E4
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS152726.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.176.14.0/24
                  79.182.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:08:4e:b4:18:b4:5b:18:42:ba:e5:ff:d3:bc:99:96:92:3d:
         3e:70:ff:4c:4d:45:7a:c6:df:af:84:39:63:38:7f:b0:51:0f:
         6d:13:0d:cd:91:ce:bf:12:c5:20:81:2c:90:e2:bd:55:5a:64:
         13:27:7d:68:e7:bf:0f:7d:6f:c4:aa:4c:0b:ca:6c:3b:e7:ed:
         63:b2:ab:1b:d3:fb:8c:4e:e3:1b:08:a5:55:1f:d3:79:1d:d0:
         63:de:33:d4:5d:c1:ff:07:23:28:b4:80:30:ca:92:c5:06:18:
         7f:67:b4:ec:6c:d1:31:39:0f:86:a6:c2:c5:60:7a:c6:68:48:
         4f:fe:44:97:9c:79:c0:d8:48:18:90:7b:97:79:4d:2c:38:a0:
         79:c0:91:e3:b6:34:ed:81:cf:6d:c1:2f:87:e8:79:f2:cf:91:
         3d:6e:d0:41:75:4f:df:7f:83:60:8a:8b:b1:cf:f7:69:4f:f7:
         b6:1d:59:e5:3c:1a:ea:0a:7c:c9:53:4e:78:98:f9:84:a0:7a:
         e1:88:a1:3b:c6:97:76:55:a3:c4:4b:f0:1d:be:c8:ed:5b:9c:
         7c:76:0d:8b:0b:3d:1f:4b:20:d3:fc:9e:90:78:9e:d8:68:91:
         c8:6b:ff:43:ae:98:a0:37:9c:ac:b4:1a:dd:42:29:3d:31:c6:
         b7:e0:6e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:54:14 2026 by rpki-client