Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152726.roa
File: AS152726.roa (raw, json)
Hash identifier: FUtmYmYPpEXgK9psphKiXQCYJdDE8Nd0gDZfQ5KYR28=
Subject key identifier: 58:13:4A:23:3D:54:FA:39:7D:AD:20:5B:61:EE:33:19:7E:4F:63:B8
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 3035DF3874D6E39FD50D214DAB8532CC3EC9A218
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152726.roa
Signing time: Sat 14 Nov 2026 01:19:00 +0000
ROA not before: Sat 14 Nov 2026 01:14:00 +0000
ROA not after: Sat 13 Nov 2027 01:19:00 +0000
asID: 152726
IP address blocks: 45.154.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:35:df:38:74:d6:e3:9f:d5:0d:21:4d:ab:85:32:cc:3e:c9:a2:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Nov 14 01:14:00 2026 GMT
Not After : Nov 13 01:19:00 2027 GMT
Subject: CN=58134A233D54FA397DAD205B61EE33197E4F63B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2b:5f:fe:ba:8a:79:55:0d:d1:62:d4:4c:0b:
6d:b7:64:27:54:3a:79:ba:3e:35:03:29:e8:3d:e4:
52:ea:19:5d:a2:98:1d:12:73:87:34:ce:31:c7:09:
63:00:fc:ee:c3:5d:e0:ec:c1:ad:17:d8:04:3a:9a:
87:03:e9:8d:aa:b2:05:98:f6:fc:ff:51:c6:b6:23:
c7:3c:72:93:92:c5:01:59:ba:d7:63:24:d0:d7:b8:
90:a3:02:b9:69:1f:fa:b0:92:cb:d4:bc:4b:ba:ef:
12:2c:07:6d:9b:78:d7:f1:ef:86:d6:b9:fa:15:69:
01:95:2c:37:fa:be:32:bb:bc:da:9b:c2:59:3c:92:
49:0b:77:61:b5:cc:10:21:c6:88:ca:8d:df:08:8f:
62:50:f1:40:26:d2:ce:9d:52:6c:f1:5a:ae:44:24:
aa:f6:85:75:53:08:da:25:88:71:f4:be:4a:7c:39:
f7:fe:df:86:70:4c:9b:e7:f4:c4:7f:70:2d:75:7d:
41:12:c9:64:1e:1e:22:bc:3d:c1:67:e1:7c:bb:ae:
1f:23:39:d0:b8:37:c9:b3:17:8b:14:a5:3a:1b:28:
30:e6:80:47:5a:ec:44:53:59:7d:2d:67:c7:8a:48:
85:9c:f6:df:e2:14:10:5e:fe:a8:18:82:0e:0f:90:
6a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:13:4A:23:3D:54:FA:39:7D:AD:20:5B:61:EE:33:19:7E:4F:63:B8
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS152726.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.104.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:00:3a:fe:a3:e9:3a:5e:dd:bf:86:3f:f6:f4:dd:60:b7:53:
73:a5:87:27:de:7a:ba:2e:11:51:ae:91:29:ad:6a:42:bc:bd:
9e:73:5f:99:07:37:68:2d:5f:e2:08:95:7d:be:1e:7e:79:59:
cb:ca:17:ee:60:f5:2f:b4:24:fa:60:0f:35:62:f2:af:6b:cc:
26:86:42:33:d4:5f:a7:77:58:77:4e:0c:4c:84:09:dd:45:85:
63:94:4d:93:3c:e7:33:28:2e:6c:e2:62:c9:64:36:b0:81:5f:
dc:30:42:ed:24:b8:83:09:11:25:c2:ae:ca:0c:5b:e6:a4:7d:
72:2d:ca:27:ae:12:04:d8:b3:a9:40:49:bd:a5:65:2d:e5:6b:
97:0c:95:64:d1:a6:59:e5:a7:e3:68:f5:e3:1d:60:1b:2c:a5:
a5:19:02:3a:ca:89:c4:ee:71:d2:38:ee:09:e9:e2:a4:3d:12:
20:67:97:49:8e:f3:6b:61:ca:e1:f2:07:5d:aa:e7:6b:e2:0a:
29:de:b9:6d:58:97:61:b4:3a:ef:27:09:22:2e:71:cc:32:4e:
c1:73:ae:63:8e:88:92:a9:f2:bb:2d:9b:2b:1a:43:51:3c:58:
5d:4a:0f:f4:17:4c:ce:cc:90:70:9f:82:0e:d0:6c:12:0c:e6:
78:da:bb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:54:19 2026 by rpki-client