Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136809.roa
File: AS136809.roa (raw, json)
Hash identifier: YqjpxShg+W7BR4IXGpRLFy9ytjj8/aQiolQiHwSRfpA=
Subject key identifier: 7F:96:71:8B:2F:F2:0D:43:6A:15:0E:DB:23:B3:72:98:D7:E3:B0:0E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6251E0C345FCD63FFBC2BD9BE52ECF1B5B3CF71B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136809.roa
Signing time: Tue 08 Sep 2026 08:32:51 +0000
ROA not before: Tue 08 Sep 2026 08:27:51 +0000
ROA not after: Tue 07 Sep 2027 08:32:51 +0000
asID: 136809
IP address blocks: 155.117.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:51:e0:c3:45:fc:d6:3f:fb:c2:bd:9b:e5:2e:cf:1b:5b:3c:f7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 8 08:27:51 2026 GMT
Not After : Sep 7 08:32:51 2027 GMT
Subject: CN=7F96718B2FF20D436A150EDB23B37298D7E3B00E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ca:9c:e0:a8:a1:da:c6:1b:fd:d7:70:b6:03:
ae:50:62:d5:c8:b4:3e:8a:d6:aa:e2:78:18:e2:f5:
09:dd:21:42:fc:ef:6d:59:21:b0:84:7c:f0:14:55:
19:ff:63:4a:62:6e:57:21:83:3a:5d:11:87:28:f8:
ab:3c:40:41:37:ca:07:21:70:4a:8e:37:8a:39:e2:
7c:37:cb:82:d3:37:b2:93:59:1b:eb:8e:02:18:33:
27:05:3d:8f:e5:64:66:86:e3:54:e6:32:11:af:4f:
bf:51:03:06:ff:4d:21:27:11:a5:a1:7d:c2:ef:f0:
ed:a4:21:90:58:c5:f8:61:5e:0a:c4:19:18:55:c3:
62:00:64:41:77:85:28:e8:6e:ec:67:44:7d:66:c4:
be:24:2e:f1:a7:95:ce:74:fc:4e:3b:3c:f9:4f:65:
a0:bb:fe:5a:39:00:5d:08:19:b6:23:7b:18:ae:ee:
a0:60:36:a5:0c:96:b3:32:26:46:1d:f1:d3:86:9c:
e6:70:c3:7b:57:eb:83:97:c1:6e:19:db:c3:ee:58:
bc:6f:de:d5:79:a6:bc:12:5f:7f:8e:d6:06:21:28:
5f:58:ad:f1:c6:b5:bd:6a:18:19:a4:b4:bf:4b:dc:
ea:89:f1:a1:c6:f9:ac:df:52:72:96:14:c1:e0:65:
f6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:96:71:8B:2F:F2:0D:43:6A:15:0E:DB:23:B3:72:98:D7:E3:B0:0E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136809.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.10.0/24
Signature Algorithm: sha256WithRSAEncryption
17:71:f3:4a:3e:b4:a9:36:15:2c:cc:4c:6a:87:b9:a4:d5:0a:
b9:17:04:b9:ca:11:ec:aa:4b:50:46:84:b7:e0:83:69:41:7d:
17:28:97:1c:0d:9f:52:11:3d:e5:de:36:42:92:33:85:67:d0:
d2:3b:9a:80:e5:ae:e3:79:8d:bd:e1:e6:e2:f5:2a:89:5c:66:
c4:ab:48:73:23:32:6a:dd:3d:97:aa:e4:1b:64:cf:9c:84:4b:
da:b6:ca:42:18:d8:1f:b7:ba:7e:b4:58:30:82:c2:eb:da:1a:
12:3c:27:3d:58:ab:37:ff:bb:bc:19:50:f1:8a:c5:aa:36:2b:
7c:3c:f6:80:e1:01:6a:03:8e:e4:5e:c2:48:aa:b7:04:fe:ec:
36:4d:e5:4a:91:e9:80:be:b4:43:cc:4d:8f:7a:d3:0c:7b:90:
8e:26:fd:44:e9:0c:16:6c:c0:a7:5f:61:5f:a0:54:1f:10:0f:
cb:11:c4:05:2e:ff:d6:7f:ce:15:4f:b8:ed:bc:f5:24:e1:f1:
a2:31:6a:28:c8:92:c2:70:bd:73:c9:68:12:36:61:0b:05:68:
2a:b5:42:c3:96:51:8e:dd:53:15:74:60:22:c5:cb:56:ba:06:
a0:66:a7:2f:9f:97:41:72:27:6a:e3:85:e7:40:76:a7:19:b4:
70:da:e3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:12:25 2026 by rpki-client