Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152598.roa
File: AS152598.roa (raw, json)
Hash identifier: pfAR6yI3Aq4p/O7KvLWlokvYkZt1nCA6G5NH4mUF7XE=
Subject key identifier: B2:B6:2C:F6:B6:51:37:B3:46:17:4D:F1:BE:93:60:F0:22:28:79:9E
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 177F03F86E65D0AC34C55CD59D587BCDF011972B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152598.roa
Signing time: Thu 23 Jul 2026 21:07:23 +0000
ROA not before: Thu 23 Jul 2026 21:02:23 +0000
ROA not after: Thu 22 Jul 2027 21:07:23 +0000
asID: 152598
IP address blocks: 51.146.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:7f:03:f8:6e:65:d0:ac:34:c5:5c:d5:9d:58:7b:cd:f0:11:97:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 23 21:02:23 2026 GMT
Not After : Jul 22 21:07:23 2027 GMT
Subject: CN=B2B62CF6B65137B346174DF1BE9360F02228799E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0e:1e:8d:c5:b8:a6:91:cd:54:cd:9d:24:01:
00:2d:e8:a6:c0:7a:7f:f0:74:a9:46:b6:fb:b1:c3:
58:27:ce:54:6e:a1:47:ac:6f:e8:e7:47:d8:31:84:
e7:23:32:e4:4a:b2:6d:37:2a:5e:33:5e:21:de:e8:
c9:bc:e5:7c:98:a1:a5:8c:11:2d:e8:e2:55:63:27:
32:e2:9c:7d:91:b2:47:2c:f2:cd:fd:90:95:8f:de:
18:99:01:3e:9a:28:44:7e:4f:97:2e:d6:61:c7:bd:
9f:47:ef:50:97:16:ab:e9:2d:19:3c:11:a1:6f:90:
28:88:48:5f:c1:ab:30:2a:6a:48:7e:af:01:f9:b3:
22:7b:1e:29:79:3f:d9:f9:8a:7e:93:7c:40:08:8c:
bd:ad:38:7a:f8:26:27:d8:fb:1b:52:79:8a:32:aa:
c0:aa:61:d4:60:f3:61:1d:ed:e9:00:5c:59:9b:f2:
d2:c7:16:1c:2c:9b:7d:b4:85:04:86:8d:23:ab:84:
10:7a:9a:7b:b6:6a:e5:2c:be:72:ca:81:5a:b2:f0:
ae:1c:2a:82:e1:b3:ea:b5:fa:24:e9:03:3c:11:80:
4a:f9:5b:ee:0f:9c:1b:38:99:63:c6:b7:f0:d9:f0:
92:67:9a:ee:a9:a9:f9:00:6e:3f:58:34:da:7c:cf:
04:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B6:2C:F6:B6:51:37:B3:46:17:4D:F1:BE:93:60:F0:22:28:79:9E
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152598.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.242.0/24
Signature Algorithm: sha256WithRSAEncryption
40:e4:64:46:d1:2b:a9:df:6f:49:0e:5e:6f:0e:cf:c2:1b:88:
4b:7f:a9:6d:69:a2:5a:1d:4d:17:a8:59:39:40:06:1a:26:80:
59:e6:dd:80:e6:e2:62:b6:2c:e6:0e:de:0b:dc:50:a1:7c:b3:
3a:94:a6:93:98:49:11:a0:6c:b2:b5:29:f2:06:80:b1:c0:e1:
fd:49:2c:d5:3a:61:87:9a:fc:a5:fd:0c:54:7d:5f:b3:dc:e7:
a1:fb:db:51:6a:fa:44:3d:e1:0a:8b:a0:1a:e0:86:27:9d:68:
e4:de:fd:a8:6d:76:a3:93:e7:af:d3:84:05:f1:10:99:a5:21:
5a:aa:85:d3:3d:5e:18:e7:63:44:af:ef:a0:99:63:9b:af:a1:
40:e9:ce:4b:2c:98:97:1a:b5:45:9d:14:35:64:f1:35:4f:b6:
32:8c:fb:91:22:33:3e:3d:18:fe:38:d6:d2:f6:03:6c:8d:34:
ec:cc:a9:4a:5e:67:7d:6b:81:9e:5d:6e:9d:d1:79:fb:a9:8f:
f5:fb:8c:3e:d6:c4:92:a9:9d:3c:15:15:a5:aa:f5:c0:04:8b:
1c:3f:5d:51:b9:df:d1:b0:96:81:54:86:6a:0a:48:53:5a:e0:
12:fa:32:e1:77:f0:18:a6:20:6c:60:c9:ff:ff:f1:9b:99:af:
7e:29:e6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:00:48 2026 by rpki-client