Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS135682.roa
File: AS135682.roa (raw, json)
Hash identifier: CtZ23bqGHFunHJLZewJNHb6N74+wWvPGMNZPni2gCjI=
Subject key identifier: 58:88:1D:51:4B:EB:27:36:59:DB:52:B6:B6:43:A9:27:CD:BE:26:A9
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5FC3D827C0E5F4786399C9DBFACBC751DBCB393E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS135682.roa
Signing time: Tue 16 Jun 2026 04:52:34 +0000
ROA not before: Tue 16 Jun 2026 04:47:34 +0000
ROA not after: Tue 15 Jun 2027 04:52:34 +0000
asID: 135682
IP address blocks: 148.135.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:c3:d8:27:c0:e5:f4:78:63:99:c9:db:fa:cb:c7:51:db:cb:39:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 16 04:47:34 2026 GMT
Not After : Jun 15 04:52:34 2027 GMT
Subject: CN=58881D514BEB273659DB52B6B643A927CDBE26A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:74:37:d4:c6:27:c9:07:42:31:db:8c:1a:da:
67:ad:07:9d:c4:89:fc:b8:24:e4:d9:a4:c0:0f:ae:
71:c3:2d:bf:96:87:f5:98:36:f6:99:a2:77:67:16:
f2:4b:ed:90:55:6d:0a:15:10:b2:e1:18:28:26:eb:
a0:8d:b4:cb:16:e8:8c:c8:d8:46:2d:cc:f1:1e:4d:
12:cf:66:b4:b9:64:0d:d6:a4:88:c7:a9:23:74:4a:
68:e4:1b:2b:99:b2:d7:74:1f:83:76:75:93:de:01:
80:d1:b6:11:cd:f8:09:97:52:a3:08:73:a1:95:a4:
ba:d2:2a:21:0f:67:1c:70:f9:9c:e2:b2:33:bb:0b:
c0:b7:e2:51:43:f7:71:48:33:4a:3c:87:ed:af:97:
cb:ff:3c:c6:60:26:f2:cd:49:85:ee:66:ab:48:cc:
bd:dd:7a:fe:3a:87:c5:74:2e:ab:f3:f7:ea:2a:4d:
f6:eb:05:f3:7d:a4:f3:ea:68:70:76:58:21:f2:08:
c0:87:c9:ff:c5:04:2f:90:0a:d1:f5:0d:2d:18:e8:
50:10:79:cf:e8:86:07:4d:8d:62:e6:95:6c:b1:b1:
23:50:08:6b:63:a3:2a:40:45:b9:b0:cc:47:7e:10:
c8:9b:65:f7:ab:b5:d1:07:96:e8:4c:bc:5c:77:36:
a9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:88:1D:51:4B:EB:27:36:59:DB:52:B6:B6:43:A9:27:CD:BE:26:A9
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS135682.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.210.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:75:12:80:2c:58:39:7c:ed:65:f6:1c:d6:e4:fe:18:0a:e3:
1a:01:8f:34:dd:39:18:5b:dd:6c:ad:27:90:84:b6:8d:9c:51:
67:09:5d:ad:25:50:93:37:43:24:16:1c:8d:18:0d:60:e1:e2:
d4:7a:8b:40:63:cb:b8:90:44:15:b4:7d:72:f7:78:b6:5b:53:
7c:9a:9c:28:e3:b2:05:6d:60:c5:7e:aa:a9:6d:13:d4:0e:82:
ae:74:1c:7b:22:d2:7d:59:84:6d:cb:a3:53:f0:fb:15:6d:33:
56:04:ed:d1:11:0f:d3:f3:1b:4b:d9:33:d9:38:a1:41:83:83:
7a:bb:d9:c3:24:8d:98:ca:33:84:67:99:a0:05:5d:ad:97:0c:
60:61:a0:ba:45:ad:ce:13:47:f1:0a:08:b8:7c:b6:ae:27:02:
46:4d:61:c3:c7:a2:4b:c6:22:a0:10:70:cb:75:fc:9d:2f:52:
94:82:3a:24:7b:fc:cc:65:20:94:96:63:18:ce:d6:8d:28:02:
a0:88:e6:07:7c:b5:b7:9a:1b:1a:88:72:cc:9b:ff:fb:f4:54:
d9:a9:05:2a:b2:b2:f6:d0:b2:89:e6:f7:9f:54:59:8e:9d:0a:
6f:94:c9:cf:f0:7b:4f:bb:18:89:36:59:14:00:34:92:85:f4:
75:d0:91:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:29 2026 by rpki-client