Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152606.roa
File: AS152606.roa (raw, json)
Hash identifier: /CVVUd6mUbjCB6jfygtrxY++2FDF793SwmlmeYS3ajM=
Subject key identifier: 83:5A:D8:A2:1B:05:3F:EC:AD:44:73:85:82:0B:DB:FA:E8:19:A9:72
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0115B03BB166E701B71C99433CD7E9A6F2FA4F8B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152606.roa
Signing time: Sun 08 Nov 2026 03:17:01 +0000
ROA not before: Sun 08 Nov 2026 03:12:01 +0000
ROA not after: Sun 07 Nov 2027 03:17:01 +0000
asID: 152606
IP address blocks: 51.146.151.0/24 maxlen: 24
51.194.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:15:b0:3b:b1:66:e7:01:b7:1c:99:43:3c:d7:e9:a6:f2:fa:4f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 8 03:12:01 2026 GMT
Not After : Nov 7 03:17:01 2027 GMT
Subject: CN=835AD8A21B053FECAD447385820BDBFAE819A972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:06:ca:25:c0:53:c0:10:e8:fd:56:50:2b:7b:
38:58:9e:79:dd:73:86:89:38:d5:4a:54:7d:0d:13:
b6:13:96:ea:59:bf:28:a1:83:8d:c9:9e:e1:d3:99:
37:c7:8b:f5:cb:a9:08:fd:d8:df:6f:a4:e4:6f:75:
93:7f:be:e0:f6:81:41:86:19:e1:f8:4a:3c:53:ba:
bc:d5:82:45:46:d5:ff:3f:00:81:9d:5d:54:72:ed:
1f:bf:6a:01:64:d9:28:20:c7:15:6d:65:42:5f:f9:
ef:20:dc:9f:7f:48:b7:bf:8b:2f:3a:9a:81:e6:e9:
8e:9e:77:f6:7e:62:f2:e6:6c:ba:5a:c3:ae:83:cb:
f9:9c:f4:cb:94:84:e2:3d:01:a7:30:fe:23:1e:bf:
b8:18:52:2a:c1:ca:a9:e2:42:c2:69:c9:89:e0:43:
67:94:99:36:62:7c:e8:1c:b5:f3:ab:76:25:69:ab:
9d:4c:61:fe:c5:29:59:67:17:17:bb:b1:d1:85:f0:
1b:2a:c9:35:ff:5b:83:3c:9a:fa:64:bb:d9:37:e3:
a5:4d:c5:e1:b0:19:26:1f:1d:b3:7b:3e:92:8b:16:
ee:0d:b6:21:52:56:52:f1:52:dc:4c:62:45:d8:60:
b8:32:18:66:a8:5f:9b:a6:9e:3a:37:0e:f7:b6:06:
fd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5A:D8:A2:1B:05:3F:EC:AD:44:73:85:82:0B:DB:FA:E8:19:A9:72
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS152606.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.151.0/24
51.194.76.0/24
Signature Algorithm: sha256WithRSAEncryption
58:37:f7:2f:1c:0f:49:11:f7:2f:59:46:db:f3:1a:d0:a7:88:
e2:6a:43:1d:04:32:17:ef:ad:76:9f:f2:06:20:34:b5:42:7d:
03:b6:a5:f5:60:c3:8c:ba:18:f2:d7:8f:54:87:e1:c0:c6:51:
21:10:b2:ce:e5:f2:ad:bc:9c:3a:21:d9:59:bb:59:4c:88:e2:
5d:ea:a4:4a:dc:6b:e9:a4:b4:63:62:4e:ed:1a:88:f3:8a:74:
47:4a:65:ca:36:d6:ce:99:cb:05:ee:ee:5b:bd:a2:97:b9:fd:
f2:5a:98:1c:54:08:5f:18:97:ec:57:68:d4:ea:5c:1a:92:31:
be:13:bc:e2:ed:f3:11:fd:e3:13:ab:c7:5b:fa:cd:91:cb:8c:
d5:f8:ac:fd:1c:b5:b4:b1:d1:fc:6e:00:4a:83:20:0c:a7:75:
85:7c:51:4b:21:02:98:e6:6a:c8:d4:86:12:10:2d:7a:6b:cf:
41:28:cb:87:4b:78:3f:1a:05:52:38:d9:88:35:3f:d0:ec:99:
53:a2:71:41:f8:28:12:cb:8e:9d:57:5d:37:54:7f:7e:a2:92:
ee:68:79:a5:fb:8e:3b:3c:0a:df:fa:4f:ac:d8:a7:61:59:b8:
12:a0:f3:c5:84:59:d0:dd:27:f0:4a:d3:d4:33:fc:fb:36:06:
ad:9b:cc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:34:29 2026 by rpki-client