Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136744.roa
File: AS136744.roa (raw, json)
Hash identifier: C4Tvh31K4zu+clmLWMHzxCemY/HrupSkkY+jhwxsLM4=
Subject key identifier: 2C:39:99:2F:C0:50:88:5C:58:9A:05:A3:58:29:9B:57:C8:3C:B8:84
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3E2869F3EDB81DC0245968238497399CE14D25F3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136744.roa
Signing time: Fri 05 Sep 2025 09:48:11 +0000
ROA not before: Fri 05 Sep 2025 09:43:11 +0000
ROA not after: Fri 04 Sep 2026 09:48:11 +0000
asID: 136744
IP address blocks: 148.135.206.0/24 maxlen: 24
155.117.32.0/24 maxlen: 24
155.117.52.0/24 maxlen: 24
155.117.54.0/24 maxlen: 24
155.117.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:28:69:f3:ed:b8:1d:c0:24:59:68:23:84:97:39:9c:e1:4d:25:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 5 09:43:11 2025 GMT
Not After : Sep 4 09:48:11 2026 GMT
Subject: CN=2C39992FC050885C589A05A358299B57C83CB884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:44:66:13:87:42:7f:18:dc:02:08:aa:83:
a6:18:37:c4:d0:52:84:2b:96:c7:9e:b5:44:ca:bf:
0d:4f:fc:f7:33:ee:98:60:f7:52:92:81:9e:35:f3:
2a:1a:d8:27:93:cc:ae:df:0d:ea:e9:9f:db:87:32:
fb:2d:4f:59:b1:81:d2:ed:b2:a4:52:71:f9:04:da:
b2:99:2b:33:cf:32:fd:a3:01:3f:b6:9c:68:c8:19:
6d:92:3c:58:f2:7d:6e:d2:4e:db:96:9a:22:23:ae:
0f:45:b0:d2:3a:f2:d6:ba:48:ec:f4:da:ac:62:60:
f4:18:ce:3d:9b:6e:a5:4b:1e:80:f1:88:f7:ab:2c:
22:a2:05:8b:9a:af:1b:1a:ff:33:d3:eb:61:19:74:
39:93:41:af:5d:ef:ed:f4:5c:9d:fb:53:e1:8a:0f:
38:72:48:2b:8c:24:34:55:3d:be:af:63:3c:75:8b:
50:0c:68:ca:b7:0d:96:95:cd:80:12:95:e2:9e:4b:
57:9b:8c:27:90:5f:ed:aa:71:96:5b:67:95:6e:5e:
38:c1:14:41:f4:35:c1:df:28:82:54:63:80:d2:ef:
59:d7:70:49:3e:58:da:a2:80:21:f4:f8:3c:15:81:
51:00:45:5a:7c:d7:16:a3:0c:d3:4f:a3:29:62:de:
54:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:39:99:2F:C0:50:88:5C:58:9A:05:A3:58:29:9B:57:C8:3C:B8:84
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136744.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.206.0/24
155.117.32.0/24
155.117.52.0/24
155.117.54.0/24
155.117.61.0/24
Signature Algorithm: sha256WithRSAEncryption
34:49:e2:c7:97:9f:10:a0:63:9f:bb:eb:36:7d:bd:fc:cf:8f:
e8:39:5b:c4:70:dc:14:fd:7f:4d:ab:fb:7c:92:25:e0:14:c1:
00:13:93:5e:95:7a:35:04:74:a0:fb:cc:4a:af:a3:16:be:1e:
0d:10:60:05:ca:2e:6d:77:37:4b:46:89:b4:4a:63:7f:e5:0a:
34:5e:3d:55:39:20:ac:44:40:0a:3c:22:be:c5:d7:eb:ed:d8:
00:eb:58:35:08:f6:98:97:90:c2:db:df:73:23:ee:24:e6:20:
e5:63:c8:05:4a:b8:c1:e0:e8:06:2f:ad:aa:71:4b:38:dc:c1:
a9:6a:78:b5:7e:7b:d3:67:16:53:48:e4:df:be:d3:67:4c:e7:
9c:44:28:c6:1d:e3:91:70:18:e1:f9:76:ae:17:2f:11:40:3c:
eb:5a:61:65:06:8a:c6:d7:32:07:01:45:1a:c0:e0:f8:5b:21:
09:90:3c:10:6f:9c:57:4c:f1:0d:71:10:b4:a4:e4:f3:f3:74:
40:e0:32:c0:3f:58:f8:7a:ad:f3:06:b6:90:2a:79:1a:6b:0a:
25:f4:a0:c4:69:76:04:a7:b7:2a:4c:d3:ca:14:94:f0:23:7a:
bd:44:9b:32:75:98:bd:4a:4e:13:ba:b0:7e:96:7d:9e:e2:fc:
62:22:f4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 19:47:00 2025 by rpki-client