Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136341.roa
File: AS136341.roa (raw, json)
Hash identifier: qWT4pkGktkou6/sxH07oWg/v0E+HEmUecdX8itzmDFU=
Subject key identifier: CC:33:D5:9E:DA:EA:69:FE:A7:97:AB:44:A9:19:DB:3C:09:4D:51:6F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5E563306E9398452D7780BA58EDF1D0EFCCE0AFA
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136341.roa
Signing time: Mon 13 Jul 2026 06:07:52 +0000
ROA not before: Mon 13 Jul 2026 06:02:52 +0000
ROA not after: Mon 12 Jul 2027 06:07:52 +0000
asID: 136341
IP address blocks: 140.150.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:56:33:06:e9:39:84:52:d7:78:0b:a5:8e:df:1d:0e:fc:ce:0a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 13 06:02:52 2026 GMT
Not After : Jul 12 06:07:52 2027 GMT
Subject: CN=CC33D59EDAEA69FEA797AB44A919DB3C094D516F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:eb:7b:d2:1d:7c:33:51:fe:87:20:40:95:3a:
28:5c:50:b7:25:10:31:6d:43:e0:4b:fc:9b:f8:22:
5e:47:79:e2:54:e8:5a:bf:ca:82:80:1b:df:52:79:
ba:6e:da:cb:e5:62:f5:fc:38:76:b8:48:d0:2d:2d:
21:c7:b7:5a:fe:ca:2a:70:61:ed:ef:32:a0:ba:60:
8e:6f:89:d0:9a:e7:ad:ac:6c:c8:52:11:78:95:cc:
0c:c7:16:28:44:25:c5:2c:56:1d:ea:98:dc:04:f3:
c3:f8:5d:ba:f9:59:85:ae:3d:fa:14:9e:84:57:83:
d4:b7:88:46:fb:95:6e:ca:cd:3e:ee:f8:2e:71:96:
ec:5e:bd:7b:3c:78:3d:cc:54:af:a9:bc:3f:90:c0:
64:c4:8e:7e:f0:9f:63:e9:d7:3c:91:04:c6:38:77:
80:96:e3:34:0b:f7:75:ea:22:00:d6:35:ea:a7:da:
ed:1d:d2:9f:f2:1d:77:c3:2b:77:a9:17:3e:b7:a8:
c5:5d:44:de:e2:a7:93:3c:de:cd:17:1d:cb:01:ae:
94:4b:0d:b7:40:aa:f4:22:12:11:a2:d4:9e:a9:b6:
5c:90:7a:80:b4:03:f5:8b:e5:4a:a3:7d:68:82:6a:
6f:38:dc:37:63:eb:0e:2b:9b:ad:9e:df:7f:03:68:
80:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:33:D5:9E:DA:EA:69:FE:A7:97:AB:44:A9:19:DB:3C:09:4D:51:6F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136341.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.233.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:62:c9:4f:9b:56:6a:0c:85:9d:12:3b:9a:a9:85:4c:f9:fe:
96:76:d0:85:01:75:c6:44:c5:11:34:a6:4b:8a:83:8a:b3:7b:
37:ab:30:7a:d4:3a:ef:f3:62:82:fe:cd:9d:1d:ab:b5:31:b6:
0a:3f:13:fe:2f:b6:1c:f7:53:14:82:70:de:51:5f:ed:a1:5d:
fa:87:41:12:9e:af:98:5e:19:9f:50:47:24:ec:31:c7:8d:09:
cf:44:b5:df:99:72:67:84:40:7f:4d:99:10:0d:c4:0e:f9:b0:
c7:6b:7e:8e:88:8e:cf:96:e8:9f:25:9e:eb:72:5b:a3:94:a5:
14:cf:f8:28:d2:48:62:5d:21:eb:cf:35:8a:8d:43:dd:61:51:
79:0a:67:0a:e2:1f:ac:d7:e3:e9:5c:af:f6:63:f9:37:f5:e0:
c9:94:28:85:d5:82:51:f0:e9:eb:b7:11:4e:ca:24:25:db:7a:
f9:2f:95:e8:6e:6b:14:08:36:fa:27:d3:93:ee:62:b8:8d:b3:
de:1f:c1:cc:53:d6:9e:32:c2:74:66:e2:c0:b0:30:54:52:2d:
31:e2:27:2a:06:e2:34:fa:c9:52:1f:66:35:76:63:4b:b6:60:
a1:90:62:e5:9c:a4:c2:fc:4d:8d:d4:43:39:52:d0:fe:c4:cd:
71:a2:36:0f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUXlYzBuk5hFLXeAuljt8dDvzOCvowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA3MTMwNjAyNTJaFw0yNzA3MTIwNjA3NTJaMDMxMTAvBgNV
BAMTKENDMzNENTlFREFFQTY5RkVBNzk3QUI0NEE5MTlEQjNDMDk0RDUxNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN63vSHXwzUf6HIECVOihcULcl
EDFtQ+BL/Jv4Il5HeeJU6Fq/yoKAG99Sebpu2svlYvX8OHa4SNAtLSHHt1r+yipw
Ye3vMqC6YI5vidCa562sbMhSEXiVzAzHFihEJcUsVh3qmNwE88P4Xbr5WYWuPfoU
noRXg9S3iEb7lW7KzT7u+C5xluxevXs8eD3MVK+pvD+QwGTEjn7wn2Pp1zyRBMY4
d4CW4zQL93XqIgDWNeqn2u0d0p/yHXfDK3epFz63qMVdRN7ip5M83s0XHcsBrpRL
DbdAqvQiEhGi1J6ptlyQeoC0A/WL5UqjfWiCam843Ddj6w4rm62e338DaIBVAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUzDPVntrqaf6nl6tEqRnbPAlNUW8wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTM2MzQxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjJbp
MA0GCSqGSIb3DQEBCwUAA4IBAQCaYslPm1ZqDIWdEjuaqYVM+f6WdtCFAXXGRMUR
NKZLioOKs3s3qzB61Drv82KC/s2dHau1MbYKPxP+L7Yc91MUgnDeUV/toV36h0ES
nq+YXhmfUEck7DHHjQnPRLXfmXJnhEB/TZkQDcQO+bDHa36OiI7PluifJZ7rcluj
lKUUz/go0khiXSHrzzWKjUPdYVF5CmcK4h+s1+PpXK/2Y/k39eDJlCiF1YJR8Onr
txFOyiQl23r5L5XobmsUCDb6J9OT7mK4jbPeH8HMU9aeMsJ0ZuLAsDBUUi0x4icq
BuI0+slSH2Y1dmNLtmChkGLlnKTC/E2N1EM5UtD+xM1xojYP
-----END CERTIFICATE-----
Generated at Mon Jul 20 18:33:28 2026 by rpki-client