Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: K87VC6h+WV2DfZBiv9Bf4G2/l+B32ZEXaFnQModxnlk=
Subject key identifier: EE:CD:1D:60:67:BD:ED:1B:4D:46:C3:58:CD:B9:94:33:7D:C9:B4:5E
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 64DEB954C5344638D9D662C157A6598E273FF7CB
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152179.roa
Signing time: Tue 10 Nov 2026 05:34:21 +0000
ROA not before: Tue 10 Nov 2026 05:29:21 +0000
ROA not after: Tue 09 Nov 2027 05:34:21 +0000
asID: 152179
IP address blocks: 194.5.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:de:b9:54:c5:34:46:38:d9:d6:62:c1:57:a6:59:8e:27:3f:f7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Nov 10 05:29:21 2026 GMT
Not After : Nov 9 05:34:21 2027 GMT
Subject: CN=EECD1D6067BDED1B4D46C358CDB994337DC9B45E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:6f:8a:b2:19:2e:3d:df:73:40:5e:aa:e6:
f1:ea:fc:d8:74:7f:2f:00:e6:d6:68:b6:d3:3d:47:
f6:76:24:34:36:41:b5:37:39:fc:74:b5:a1:ce:09:
79:0b:d2:69:2d:8f:34:a0:1b:30:7d:a8:0c:ed:89:
33:15:58:69:05:4c:8e:9c:d7:d9:f0:81:33:a3:c2:
7b:c3:b7:0e:68:9e:1d:5b:7d:e3:c2:ab:f3:c5:76:
c8:d5:15:4d:3d:aa:5b:f4:81:3b:5e:81:1c:7c:69:
e2:74:73:84:a2:67:b2:be:bc:c6:dd:cc:7e:29:59:
fc:2c:89:24:af:ed:df:dc:27:22:5b:67:00:c5:47:
48:53:46:94:c2:94:4f:45:dd:18:a6:17:30:84:29:
b0:3f:43:c5:be:9e:24:d5:c1:8b:b5:58:90:2b:8b:
22:d1:cf:80:19:33:02:0f:3e:73:2a:91:fa:7f:02:
a4:64:d7:98:6f:76:17:7f:20:1d:6a:dd:89:88:1e:
63:1b:e1:7b:01:f4:90:e5:a6:fe:7e:8c:9e:3c:be:
ac:f4:ef:49:35:e9:f6:7c:d2:15:50:ac:ce:f8:45:
81:f9:48:2b:85:81:99:8c:bc:1c:53:9b:71:d4:87:
fb:85:2e:80:45:c6:61:5d:55:70:23:ae:0c:9d:32:
1c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CD:1D:60:67:BD:ED:1B:4D:46:C3:58:CD:B9:94:33:7D:C9:B4:5E
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.148.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:d1:bb:4a:cc:cb:5a:d2:a7:5a:89:ef:c7:4a:08:f7:bd:0b:
1c:a7:c3:7c:bf:2f:c6:5d:00:ae:50:e3:bf:da:c1:ae:95:da:
31:b2:1b:fa:d2:bf:ff:fa:d4:f1:3f:03:49:cb:06:bb:69:61:
37:9c:09:b1:a5:f0:86:84:3e:34:ef:b3:f9:3f:2b:5f:2e:93:
b7:42:4c:1d:fc:97:12:71:50:77:44:9f:80:0d:de:e0:a1:fb:
7f:fe:55:be:2b:ba:54:0d:e4:7c:2a:b5:68:14:c6:1a:10:4f:
52:d3:a5:0e:1b:3a:00:70:e9:d8:b5:4b:99:87:1d:f8:72:b1:
99:9c:ad:7b:9a:28:68:43:12:9f:ed:9f:bd:5f:b7:54:3d:af:
6c:fd:8e:3d:e7:bc:83:cc:70:c6:f0:ff:1d:2a:4c:e9:67:24:
97:fd:bb:7d:5c:ce:e3:29:2f:51:9f:85:55:2e:3c:b9:59:d7:
f5:8d:9c:b5:ec:09:be:af:64:44:54:97:b0:a3:27:f5:a4:36:
28:bb:f5:22:3a:5a:be:c0:ce:8a:13:00:fa:ab:3a:d9:2a:b0:
e3:a9:c7:7a:25:3b:67:1a:9b:90:c3:c2:14:25:9e:27:46:29:
0f:f3:2f:ce:28:68:82:89:24:bc:81:c1:c7:d8:14:33:30:33:
44:e6:81:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:11:23 2026 by rpki-client