Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137897.roa
File: AS137897.roa (raw, json)
Hash identifier: CBB7GENUmXr5dzpXbgFViMYFTRtRqD4MZUb6SJPaTpE=
Subject key identifier: 69:07:7A:F0:BA:7C:21:CD:64:2F:5A:2F:08:D0:A9:91:B2:63:C9:D4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 107D4FC461B296B20B8F780E1A5AF6FA5839A30A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137897.roa
Signing time: Fri 09 Oct 2026 00:06:51 +0000
ROA not before: Fri 09 Oct 2026 00:01:51 +0000
ROA not after: Fri 08 Oct 2027 00:06:51 +0000
asID: 137897
IP address blocks: 82.38.42.0/23 maxlen: 24
82.38.46.0/23 maxlen: 24
82.38.80.0/23 maxlen: 24
82.38.215.0/24 maxlen: 24
82.39.136.0/24 maxlen: 24
178.83.82.0/23 maxlen: 24
2a13:9500:7c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:7d:4f:c4:61:b2:96:b2:0b:8f:78:0e:1a:5a:f6:fa:58:39:a3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 9 00:01:51 2026 GMT
Not After : Oct 8 00:06:51 2027 GMT
Subject: CN=69077AF0BA7C21CD642F5A2F08D0A991B263C9D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:69:af:14:58:8b:fa:41:01:7c:1e:10:83:
62:18:96:6c:9e:b8:41:fa:9e:f4:fb:1f:37:2f:4f:
29:e0:8a:c3:8d:c2:e5:82:73:13:42:d9:e7:43:91:
e0:90:9d:ea:9e:ed:f1:8b:89:cd:2c:87:48:92:60:
ee:c6:bd:2d:a8:4f:13:5f:6b:26:75:34:59:ac:2d:
9b:8e:ad:4d:a2:1b:37:79:44:b7:eb:49:d4:13:cd:
8d:10:8d:7b:a7:2c:f8:f6:0a:33:54:56:84:ed:f5:
49:bf:a6:a0:c7:a6:d1:2e:83:45:fa:43:cd:8d:d0:
8d:df:4e:37:f3:42:a8:5c:d1:06:3f:cd:1b:8e:c9:
8a:16:92:73:1e:cc:33:90:e2:f5:7c:7d:f2:bc:cf:
95:c2:3b:10:3c:4e:9e:28:3d:6b:5a:db:57:07:7d:
76:d4:b4:18:02:d1:93:c4:1e:cc:ff:6d:9a:f9:fe:
8a:57:87:74:0e:e7:d3:85:02:dd:40:ec:db:bc:5f:
10:7b:47:d0:0b:fc:07:b2:6d:22:34:93:9c:cf:ee:
7b:8a:d6:39:88:fb:26:9c:72:52:d4:1c:1b:e0:62:
d6:7a:0a:7b:67:48:04:25:40:8e:6c:7b:6a:8c:d3:
93:f8:bd:9e:79:9e:58:2f:9a:84:48:d7:77:4e:2a:
c7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:07:7A:F0:BA:7C:21:CD:64:2F:5A:2F:08:D0:A9:91:B2:63:C9:D4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137897.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.42.0/23
82.38.46.0/23
82.38.80.0/23
82.38.215.0/24
82.39.136.0/24
178.83.82.0/23
IPv6:
2a13:9500:7c::/48
Signature Algorithm: sha256WithRSAEncryption
6c:52:6c:5f:d7:1c:f5:36:d6:d2:f4:35:cd:f8:d6:a4:ab:e5:
fc:7f:f4:c9:35:71:53:61:f8:80:b9:d1:9a:76:c7:0d:eb:c7:
e8:fa:49:d6:96:d7:4a:7e:d4:50:53:52:d0:eb:12:d2:64:c1:
23:a4:d5:7e:12:bb:e6:82:9a:d2:d6:34:62:c2:5a:0e:63:10:
d4:fe:4e:c6:a0:fc:0a:43:ff:f4:86:2d:12:cb:42:93:85:4b:
40:32:91:01:c2:38:55:2a:e3:2e:76:72:95:93:53:1d:d2:0b:
bb:10:55:63:6b:2e:26:61:8f:a7:f7:d5:80:52:05:af:63:bf:
6c:8e:14:b8:30:fe:b6:ff:76:69:17:94:c1:d0:0d:5b:d8:6e:
ba:8f:76:34:b3:02:51:78:dc:1e:35:32:b5:3e:8a:6b:aa:e0:
fc:8d:86:62:35:37:5a:48:3f:f0:94:6b:4a:8a:20:f6:54:f2:
a6:ce:bd:09:1a:b1:4b:d9:30:d8:f1:bf:b6:8e:db:01:23:65:
b0:b0:c7:74:28:95:29:67:49:f1:35:17:ec:8e:f7:d9:08:72:
76:0c:ee:db:d4:86:83:5c:ca:62:d6:a0:25:26:e3:14:01:52:
a2:68:b5:3a:51:9c:59:06:68:8d:fa:9b:15:5f:ae:0b:22:45:
89:af:40:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 18:20:05 2026 by rpki-client