Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: S5CPjoGnDFMkAk8HSYwePcKymO8aOwi8z7Yi0H/GTg8=
Subject key identifier: 6A:F3:74:9C:61:F4:B4:93:8B:91:4C:1B:D3:F3:30:B2:5A:C5:75:AA
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 361AC872A556151095C7A7787BAEB5091F719C5D
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152179.roa
Signing time: Tue 22 Sep 2026 05:30:07 +0000
ROA not before: Tue 22 Sep 2026 05:25:07 +0000
ROA not after: Tue 21 Sep 2027 05:30:07 +0000
asID: 152179
IP address blocks: 51.194.115.0/24 maxlen: 24
51.194.245.0/24 maxlen: 24
51.241.56.0/24 maxlen: 24
51.241.194.0/24 maxlen: 24
188.220.31.0/24 maxlen: 24
188.220.156.0/24 maxlen: 24
188.220.195.0/24 maxlen: 24
188.220.199.0/24 maxlen: 24
188.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:1a:c8:72:a5:56:15:10:95:c7:a7:78:7b:ae:b5:09:1f:71:9c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 22 05:25:07 2026 GMT
Not After : Sep 21 05:30:07 2027 GMT
Subject: CN=6AF3749C61F4B4938B914C1BD3F330B25AC575AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:00:2c:ca:94:ea:49:52:a8:26:a1:bf:69:92:
e5:d0:1b:b5:9f:80:dc:4d:6e:a6:12:fa:fa:d2:82:
91:0f:8a:f8:fd:0d:31:96:2d:a1:34:0c:3a:bd:08:
ea:22:f1:e9:29:50:6a:7e:77:5e:61:f1:2c:ea:6f:
10:d2:75:e7:5c:ee:b4:a1:f6:fb:7e:fc:06:92:76:
29:72:61:5c:e1:0b:d2:45:e2:b4:28:b3:93:c2:99:
82:6f:4c:ea:29:54:ec:64:c8:49:14:e1:c7:7e:df:
d0:d9:c3:3e:37:1f:e6:f5:d0:68:72:fa:47:1f:f2:
98:19:cd:a7:db:4a:75:d7:36:6d:23:22:6c:63:53:
dc:71:46:fe:b7:cb:e2:c3:6e:fe:fb:2b:a0:e3:74:
59:75:e4:26:5b:6b:ef:0a:13:e9:20:4b:36:fd:96:
21:9e:2f:a3:a4:28:5b:1a:8c:dc:20:a6:01:a5:7c:
88:48:3b:2e:b7:8b:a7:75:5e:96:48:d3:60:69:4c:
ba:6a:9b:27:fe:24:10:c8:6c:e0:ee:36:06:bd:31:
b9:69:0d:9a:f8:6e:41:4c:f4:96:4a:69:6a:e3:28:
ff:05:81:8a:d8:0e:03:1e:e0:41:bb:39:be:fa:94:
1f:6a:88:12:a9:35:cf:11:3c:d9:54:e8:7e:3e:84:
f4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F3:74:9C:61:F4:B4:93:8B:91:4C:1B:D3:F3:30:B2:5A:C5:75:AA
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.115.0/24
51.194.245.0/24
51.241.56.0/24
51.241.194.0/24
188.220.31.0/24
188.220.156.0/24
188.220.195.0/24
188.220.199.0/24
188.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
06:56:f2:50:9f:3e:a7:c3:fe:78:8c:4a:a5:ab:de:a8:5b:ab:
e0:90:06:af:f0:79:df:75:fb:7e:dc:f5:7e:4a:63:de:f3:15:
cc:6c:57:78:b0:69:ca:57:4e:81:f3:a1:c1:37:7c:08:14:b1:
06:14:3d:de:23:94:c3:29:14:ac:42:fd:ec:29:f1:be:4e:b8:
60:da:cb:d5:c0:2e:c1:26:2f:d7:ad:4d:59:e7:b2:84:66:50:
b4:bb:96:81:b1:7c:4f:3c:b8:c0:ae:51:4e:26:d0:e9:71:60:
1f:12:4e:05:92:46:40:76:42:27:da:9b:36:e8:5d:d0:8a:74:
b1:34:c7:9c:57:bc:8c:cc:7e:56:0f:05:c1:f4:d0:58:92:65:
a5:de:32:71:fb:52:9b:e8:93:33:e0:5d:c9:b4:42:cc:46:ae:
61:de:29:c8:53:17:06:c8:b6:a5:18:46:b3:bd:00:39:04:8d:
a3:88:52:45:82:ca:51:09:93:70:76:f6:cd:dc:78:43:62:4f:
0b:54:d3:d5:68:7d:f5:57:73:39:f4:d0:bf:3c:68:81:66:fb:
dd:96:5a:0e:72:00:bd:8d:32:7f:17:f0:da:0f:a5:2d:7d:c4:
ed:d3:cc:54:80:ab:10:1b:13:e2:af:9d:85:c3:22:8a:a2:cc:
dd:4e:2f:c6
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUNhrIcqVWFRCVx6d4e661CR9xnF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA5MjIwNTI1MDdaFw0yNzA5MjEwNTMwMDdaMDMxMTAvBgNV
BAMTKDZBRjM3NDlDNjFGNEI0OTM4QjkxNEMxQkQzRjMzMEIyNUFDNTc1QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaACzKlOpJUqgmob9pkuXQG7Wf
gNxNbqYS+vrSgpEPivj9DTGWLaE0DDq9COoi8ekpUGp+d15h8SzqbxDSdedc7rSh
9vt+/AaSdilyYVzhC9JF4rQos5PCmYJvTOopVOxkyEkU4cd+39DZwz43H+b10Ghy
+kcf8pgZzafbSnXXNm0jImxjU9xxRv63y+LDbv77K6DjdFl15CZba+8KE+kgSzb9
liGeL6OkKFsajNwgpgGlfIhIOy63i6d1XpZI02BpTLpqmyf+JBDIbODuNga9Mblp
DZr4bkFM9JZKaWrjKP8FgYrYDgMe4EG7Ob76lB9qiBKpNc8RPNlU6H4+hPRvAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUavN0nGH0tJOLkUwb0/MwslrFdaowHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTUyMTc5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAM8Jz
AwQAM8L1AwQAM/E4AwQAM/HCAwQAvNwfAwQAvNycAwQAvNzDAwQAvNzHAwQAvN0A
MA0GCSqGSIb3DQEBCwUAA4IBAQAGVvJQnz6nw/54jEqlq96oW6vgkAav8Hnfdft+
3PV+SmPe8xXMbFd4sGnKV06B86HBN3wIFLEGFD3eI5TDKRSsQv3sKfG+Trhg2svV
wC7BJi/XrU1Z57KEZlC0u5aBsXxPPLjArlFOJtDpcWAfEk4FkkZAdkIn2ps26F3Q
inSxNMecV7yMzH5WDwXB9NBYkmWl3jJx+1Kb6JMz4F3JtELMRq5h3inIUxcGyLal
GEazvQA5BI2jiFJFgspRCZNwdvbN3HhDYk8LVNPVaH31V3M59NC/PGiBZvvdlloO
cgC9jTJ/F/DaD6UtfcTt08xUgKsQGxPir52FwyKKoszdTi/G
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:04:21 2026 by rpki-client