Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS137517.roa
File: AS137517.roa (raw, json)
Hash identifier: Or4KsmCC7osnPTXZynJdPitzVOPhdmqmltQ1gcFqZ6E=
Subject key identifier: 11:17:CF:B1:5E:F4:37:E6:6E:83:08:A0:D7:4F:59:E4:6F:83:FA:92
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 4F9B7ADFE525E02FF4D4416D38D15935979937DD
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS137517.roa
Signing time: Tue 15 Jul 2025 08:27:31 +0000
ROA not before: Tue 15 Jul 2025 08:22:31 +0000
ROA not after: Tue 14 Jul 2026 08:27:31 +0000
asID: 137517
IP address blocks: 143.20.85.0/24 maxlen: 24
143.20.95.0/24 maxlen: 24
143.20.107.0/24 maxlen: 24
143.20.204.0/24 maxlen: 24
143.20.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 11:24:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:9b:7a:df:e5:25:e0:2f:f4:d4:41:6d:38:d1:59:35:97:99:37:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jul 15 08:22:31 2025 GMT
Not After : Jul 14 08:27:31 2026 GMT
Subject: CN=1117CFB15EF437E66E8308A0D74F59E46F83FA92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:48:2f:d8:2b:39:e7:35:62:de:56:56:04:e6:
ba:81:7a:b0:37:3b:1b:15:d7:01:28:13:be:83:78:
40:f0:bf:b2:4a:2b:39:67:d1:7b:5c:95:82:77:25:
11:3e:a9:f4:eb:03:cf:1d:65:72:9e:cd:15:b6:a3:
3e:90:62:fc:1d:da:2b:40:d3:2c:77:82:14:63:1f:
ec:65:b0:5c:16:1b:82:10:67:97:ac:e5:17:a3:56:
cf:38:7c:10:7c:5c:d0:22:59:02:f3:5a:69:33:41:
82:9f:fe:4f:43:1d:b3:f2:8f:30:01:f4:53:bc:c3:
f2:77:da:44:38:81:71:11:1e:f7:7a:fb:4f:b1:6c:
d4:50:70:db:82:8b:5a:30:11:15:2b:02:77:1c:21:
3d:5b:77:d8:e3:89:50:3d:98:c4:51:85:02:b3:ca:
f1:bf:bf:3b:d8:49:68:24:e4:60:84:e0:99:ce:87:
2f:60:4e:62:68:6c:11:dd:e2:54:01:c0:7e:f1:89:
ec:f5:3a:73:7c:82:28:21:9b:d5:77:22:33:ab:13:
d1:49:cf:1d:a5:e0:b4:c2:fd:13:a1:15:b8:cc:d5:
e8:cf:bd:90:84:5a:78:c2:45:da:bd:25:b7:71:18:
ea:df:b6:48:e8:c3:c6:b9:4b:e8:61:a9:9e:da:1d:
54:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:17:CF:B1:5E:F4:37:E6:6E:83:08:A0:D7:4F:59:E4:6F:83:FA:92
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS137517.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.85.0/24
143.20.95.0/24
143.20.107.0/24
143.20.204.0/24
143.20.223.0/24
Signature Algorithm: sha256WithRSAEncryption
46:0e:24:84:ba:30:6f:ba:5e:19:0c:38:51:23:85:9c:2e:7c:
c1:96:fd:a4:bc:f6:01:e2:d1:8c:8f:dc:52:04:b2:09:b8:8d:
29:d2:d4:9c:33:77:c9:d9:98:23:d4:25:fb:40:85:a2:83:45:
1b:b2:ee:2f:1d:a9:43:b8:e8:fd:c9:ea:9a:b4:a9:0c:8c:43:
0a:69:30:37:87:15:17:74:47:1a:86:0a:1d:1a:af:1f:78:bc:
02:a7:65:cc:52:77:6d:a5:45:3b:b8:5b:b8:f9:31:d1:97:4e:
f7:8e:10:f4:4f:cd:73:0f:ab:d9:5e:d1:95:cd:4c:85:54:fb:
a9:b1:bd:66:4e:e9:70:0e:03:84:72:10:3b:eb:72:15:f4:a5:
e4:d9:e0:76:f0:7a:fa:a0:ba:d3:80:1f:36:6b:00:9c:19:e6:
2d:6b:39:80:24:66:ca:9d:49:fe:ab:b4:ec:49:b4:c8:5d:91:
0f:46:70:a4:9a:97:7a:6c:6c:70:96:0f:a3:08:4d:af:c9:06:
06:b2:04:ba:7e:78:1f:f9:ce:11:29:16:9c:d1:64:79:ca:93:
53:fe:f1:37:4d:70:4e:57:e6:32:57:fc:c5:2b:c1:83:28:a0:
26:4c:0f:4b:fd:c5:10:cb:09:11:15:48:9b:bb:95:93:65:e0:
36:3a:97:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:30:40 2025 by rpki-client