Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136725.roa
File: AS136725.roa (raw, json)
Hash identifier: ujGT0ayWmnb455jfOAbGwez3D+mhzw/GDe0TlJ9hM64=
Subject key identifier: 49:DD:79:75:29:22:BF:5A:1C:48:D1:CE:9F:0C:55:E3:7F:80:50:A9
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1B17C96659AFF3E17BE592FF563AC3DAEB0557EC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136725.roa
Signing time: Mon 31 Aug 2026 07:43:11 +0000
ROA not before: Mon 31 Aug 2026 07:38:11 +0000
ROA not after: Mon 30 Aug 2027 07:43:11 +0000
asID: 136725
IP address blocks: 162.141.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:17:c9:66:59:af:f3:e1:7b:e5:92:ff:56:3a:c3:da:eb:05:57:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 31 07:38:11 2026 GMT
Not After : Aug 30 07:43:11 2027 GMT
Subject: CN=49DD79752922BF5A1C48D1CE9F0C55E37F8050A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:ec:41:67:c8:ba:98:e2:eb:41:ab:18:c9:
9e:35:1e:e5:5e:ab:9f:2e:99:98:bb:2e:d0:ef:46:
c2:56:df:93:2a:21:c1:5e:ec:2d:44:c5:97:5b:5f:
2f:e1:b6:eb:85:f4:27:c2:57:c1:63:ef:78:27:4f:
e8:5e:87:e4:51:b3:2e:75:07:24:b8:d5:5b:c9:54:
72:ec:c7:66:ea:2b:37:cd:21:9a:e8:c1:a4:7f:cf:
73:c0:06:02:7a:80:39:09:34:9b:50:97:22:94:a8:
ef:46:ae:36:5e:46:d9:c7:dd:71:b0:74:b4:35:4b:
f7:a1:8c:c5:2c:e4:38:91:41:57:cf:0d:e5:ab:04:
88:d8:23:50:d9:99:82:e0:fc:c9:d2:02:95:7b:e2:
47:c4:eb:d8:43:29:50:c2:0e:01:22:a4:69:64:c2:
23:0e:34:d1:be:80:56:8e:72:7c:e9:9b:65:2d:7b:
b2:27:fb:45:51:5e:8b:51:e3:dc:b6:22:e9:78:0f:
f1:2c:91:4f:9f:22:c0:80:4d:17:2d:ed:8f:08:68:
e0:f1:68:16:b3:c8:b7:35:91:07:c7:d8:09:53:94:
e3:5d:04:a8:47:6c:01:6a:49:d7:e9:ff:d0:40:de:
52:51:0d:6b:f9:e5:24:f1:25:19:5f:17:8a:68:3f:
c9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DD:79:75:29:22:BF:5A:1C:48:D1:CE:9F:0C:55:E3:7F:80:50:A9
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136725.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.140.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:7c:42:5e:88:2d:82:8b:1c:ff:9b:88:b9:d0:79:f0:63:b9:
05:1e:cf:19:9e:05:27:91:d4:a2:41:16:29:19:b2:76:7e:dc:
d3:67:d9:c1:6f:64:99:2b:1e:1f:df:03:e9:cf:ff:ed:35:56:
69:ce:25:66:c1:5e:61:b3:e7:97:ee:83:b0:34:38:d9:98:e4:
32:97:1b:66:7d:76:5e:2d:dc:8d:6c:cf:68:41:4c:a3:8e:24:
cd:73:9e:33:57:ff:d3:b1:89:00:ee:29:f9:32:76:f5:dc:80:
e8:40:50:f5:2f:14:58:23:fa:ab:f9:51:c4:29:0d:7e:61:98:
af:ff:fe:20:6b:3e:a7:b5:4c:85:4e:d9:04:35:78:46:f0:a3:
8c:8c:32:c2:02:16:77:b5:34:a6:85:52:bd:10:64:d6:7e:f8:
ce:12:be:7c:fb:3c:6d:c8:0f:8d:b0:5b:1a:ba:f4:e4:06:1c:
5e:2a:60:22:27:76:74:93:e4:bc:52:08:a8:6a:94:39:c8:39:
c8:6e:8d:1f:1d:a5:b1:bf:16:1e:be:24:9f:2b:5d:74:da:76:
97:3d:38:57:ec:44:f5:88:8e:ea:21:b8:c4:67:fd:47:e3:48:
47:4d:e7:d6:11:10:2a:4d:56:66:7c:a7:eb:3a:5e:db:da:a2:
b5:ce:d4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:41 2026 by rpki-client