Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: DX08cbbMKLbSuljrtPPE5Th6HxwIiTISAj4Q7j9vJtU=
Subject key identifier: 6F:7D:52:82:F0:6F:25:CF:9E:EC:A9:16:1E:1B:DE:AA:39:8A:4B:64
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0F8CBD966B2A13C579AC84CC7DC53534297CBC2B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152179.roa
Signing time: Thu 05 Nov 2026 07:14:32 +0000
ROA not before: Thu 05 Nov 2026 07:09:32 +0000
ROA not after: Thu 04 Nov 2027 07:14:32 +0000
asID: 152179
IP address blocks: 51.194.115.0/24 maxlen: 24
51.241.56.0/24 maxlen: 24
94.118.62.0/24 maxlen: 24
188.220.156.0/24 maxlen: 24
188.220.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:8c:bd:96:6b:2a:13:c5:79:ac:84:cc:7d:c5:35:34:29:7c:bc:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 5 07:09:32 2026 GMT
Not After : Nov 4 07:14:32 2027 GMT
Subject: CN=6F7D5282F06F25CF9EECA9161E1BDEAA398A4B64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b5:da:97:24:08:59:22:19:0b:d7:8a:a2:bf:
a7:4f:8b:2a:fc:23:d1:8a:c7:40:05:87:c7:c6:da:
8f:45:e9:63:62:81:74:1f:c8:70:3d:d0:94:22:25:
5f:3f:5c:82:2b:c7:75:97:96:02:f3:e4:59:c1:16:
25:98:27:ba:5c:34:f8:2e:c7:2b:f6:10:ae:46:bc:
9e:2e:4c:be:74:8b:8f:6c:9a:33:64:e0:0e:cf:9f:
ad:ba:f1:de:51:2d:d8:38:25:5a:c8:ea:fc:c0:79:
e7:b2:2d:89:47:6b:55:7c:b2:e5:44:61:27:3b:e8:
77:32:f6:5a:6e:36:f6:16:f2:2c:26:fc:94:91:cb:
81:18:11:9a:6a:91:f0:52:b6:34:4f:e9:f0:95:d3:
37:b7:2b:3a:c0:d5:bc:36:bb:80:14:62:f0:b6:bd:
56:0b:3a:ba:d5:0b:30:69:3d:22:79:be:eb:90:fb:
ca:b2:f8:24:2f:af:e9:fe:f9:da:d9:a6:4c:f9:89:
59:4b:cc:bf:02:aa:75:7a:dc:70:65:0a:9f:10:f8:
08:9d:5f:fb:da:5d:5c:a5:37:88:da:bd:10:c3:10:
ec:1a:2a:d7:5c:49:50:28:de:29:3a:72:b4:29:4d:
77:5a:cd:8f:91:c0:da:08:06:73:58:86:7d:d1:a8:
9a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7D:52:82:F0:6F:25:CF:9E:EC:A9:16:1E:1B:DE:AA:39:8A:4B:64
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.115.0/24
51.241.56.0/24
94.118.62.0/24
188.220.156.0/24
188.220.195.0/24
Signature Algorithm: sha256WithRSAEncryption
78:2f:1f:cc:75:e1:4d:2f:69:2b:38:29:29:2a:c6:76:9f:51:
50:0c:dc:f3:4a:49:24:99:ca:21:4f:e0:6e:c6:4d:40:a1:39:
aa:49:c4:c4:c7:70:14:d5:13:be:9c:6c:00:81:f5:14:7c:6f:
f0:28:ef:5a:98:26:53:7f:cd:82:25:d5:81:06:97:3a:64:46:
7c:36:25:0f:e6:0d:e2:92:eb:c7:58:89:74:a3:97:0f:f7:28:
95:af:cf:b2:64:7d:8b:83:44:48:6f:18:71:5f:df:29:3f:67:
c1:6e:fa:93:b1:e3:d2:5a:9f:1a:a2:ea:54:72:21:12:22:ec:
a6:1b:be:23:1a:a3:95:92:a9:b7:01:dc:88:1d:b1:51:79:88:
92:4b:37:eb:da:49:16:3f:97:2c:91:2f:9c:16:96:46:92:17:
9d:dd:02:2a:63:db:59:b5:59:bc:42:bc:c3:dc:12:03:fd:52:
61:d7:49:38:17:13:98:a1:06:a0:51:1b:b4:ee:b2:b9:5b:64:
f4:f5:28:e4:f6:3e:9e:ed:40:0f:69:6c:0f:25:29:5b:82:bc:
32:63:26:d8:d3:7e:67:33:71:53:4d:6c:91:25:62:ad:b9:f4:
d4:76:0c:20:7f:c5:f0:07:1a:4f:83:2c:84:b5:c4:62:2a:d0:
ac:03:42:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:10:52 2026 by rpki-client