Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS152626.roa
File: AS152626.roa (raw, json)
Hash identifier: 79saQPwsZs+I6j4Asr3TFZlcE0CE1MeiGS3oqBPVoxM=
Subject key identifier: D5:83:AD:9F:61:21:49:A2:0D:76:83:2E:04:52:E1:64:C6:A3:B7:4F
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 113DBE92D854CA0D0C7C86F71699BD57A0F1A105
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS152626.roa
Signing time: Mon 06 Jul 2026 02:04:51 +0000
ROA not before: Mon 06 Jul 2026 01:59:51 +0000
ROA not after: Mon 05 Jul 2027 02:04:51 +0000
asID: 152626
IP address blocks: 2a14:7581:9fa0::/44 maxlen: 48
2a14:7581:9fc0::/44 maxlen: 48
2a14:7583:ef80::/44 maxlen: 48
2a14:7583:fd00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:3d:be:92:d8:54:ca:0d:0c:7c:86:f7:16:99:bd:57:a0:f1:a1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 6 01:59:51 2026 GMT
Not After : Jul 5 02:04:51 2027 GMT
Subject: CN=D583AD9F612149A20D76832E0452E164C6A3B74F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:fa:1d:e8:8c:a0:22:d9:6b:15:24:96:f8:
5e:40:e6:00:41:65:54:bf:1e:1d:27:04:94:31:0c:
9d:52:e2:f6:b3:df:3e:0a:c5:73:bd:1f:bf:e1:61:
1c:76:6e:5a:c7:29:86:20:a7:f2:83:97:58:dc:9c:
47:bb:37:19:eb:b0:57:5b:3f:41:1e:71:e9:32:d1:
22:d3:e3:ec:ba:4e:23:7c:74:5f:49:a0:26:ef:0c:
59:6a:2e:4a:f5:b1:bd:a0:c0:d3:8e:e3:48:8b:26:
a7:7b:40:16:f2:92:bf:ee:39:4b:ce:c7:5b:2b:90:
76:70:f6:79:60:75:48:4c:80:6c:6d:3b:1a:71:3b:
8d:02:a1:25:38:5b:3b:9c:ed:75:37:ef:c5:c5:2e:
51:27:c0:1e:24:5c:42:20:9e:87:7c:a1:f3:3c:19:
bd:5e:8c:e9:b9:1e:1e:50:70:c2:0b:7a:c5:34:74:
67:d7:22:17:c9:20:82:18:4c:a1:98:b0:4d:05:9c:
17:cb:4b:91:ac:46:4c:56:8b:a7:f1:1f:67:b2:db:
e2:9f:17:11:da:7c:9c:ca:d4:0b:f5:c5:5e:71:f6:
ff:0b:52:f7:ce:ee:92:e9:c6:2e:5d:fc:fe:1e:23:
22:59:08:3f:71:c3:0a:41:43:a6:00:8c:8e:04:56:
8a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:83:AD:9F:61:21:49:A2:0D:76:83:2E:04:52:E1:64:C6:A3:B7:4F
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS152626.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9fa0::/44
2a14:7581:9fc0::/44
2a14:7583:ef80::/44
2a14:7583:fd00::/40
Signature Algorithm: sha256WithRSAEncryption
25:62:55:4d:08:2d:70:d2:32:cf:2f:a4:6e:a5:0c:5b:7b:35:
90:68:37:38:a0:c8:21:a0:25:9f:e6:98:28:dd:24:36:36:26:
be:f9:45:b1:1d:6f:c0:51:3a:0d:9f:40:17:95:bb:56:a6:6d:
82:48:44:01:ab:a5:86:30:b7:73:b7:5e:9e:b4:92:b2:a0:86:
79:75:bb:3c:0f:a3:68:0e:ce:c4:d7:0f:96:0c:a0:9a:de:71:
77:7b:84:99:30:94:7d:40:54:18:78:46:e9:53:a2:55:52:be:
ca:d1:96:24:96:aa:02:8a:51:ed:01:24:58:5c:c6:43:3f:58:
5d:d6:4f:a4:dc:dd:7c:9c:70:f4:65:26:24:59:7c:f4:c5:17:
26:00:11:d9:44:dd:9c:5a:ab:f5:df:ae:9e:90:ce:97:a4:a8:
94:7f:52:22:6b:e1:36:1b:92:f8:e4:ea:a1:30:16:34:1c:47:
cd:6d:69:b8:47:ea:6b:6b:b5:81:40:04:89:68:f5:34:3d:6f:
8f:47:ac:5a:d0:99:49:89:c1:08:44:60:c0:4a:64:ed:ee:6f:
ef:95:d2:89:42:12:30:5d:26:27:19:39:15:29:ca:91:bb:0c:
88:8a:b4:d0:9a:97:94:85:0c:c6:5b:c6:f9:d3:41:7f:e8:49:
71:32:7d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:42:08 2026 by rpki-client