Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136809.roa
File: AS136809.roa (raw, json)
Hash identifier: TjZvVVPotnAosXw6/jGKQdt2QtidxTKv453HjPHYFOA=
Subject key identifier: 2F:A8:9E:6F:4A:06:3B:5F:B3:4F:1E:62:D7:2F:7A:DD:BA:BE:C7:C4
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 07C7F268DD9A1C4B4D08AE08DC7BCC9A3E02EDED
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136809.roa
Signing time: Sun 25 Oct 2026 04:42:53 +0000
ROA not before: Sun 25 Oct 2026 04:37:53 +0000
ROA not after: Sun 24 Oct 2027 04:42:53 +0000
asID: 136809
IP address blocks: 64.239.69.0/24 maxlen: 24
66.132.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:c7:f2:68:dd:9a:1c:4b:4d:08:ae:08:dc:7b:cc:9a:3e:02:ed:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 25 04:37:53 2026 GMT
Not After : Oct 24 04:42:53 2027 GMT
Subject: CN=2FA89E6F4A063B5FB34F1E62D72F7ADDBABEC7C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2a:f2:09:44:71:02:4b:82:cc:a8:6f:7b:68:
0e:95:88:f3:01:11:31:99:eb:64:9d:fb:a7:8c:58:
69:c7:88:d0:03:a4:8f:e6:99:6e:bb:74:c9:0c:38:
e4:fa:98:27:ac:e2:c3:5b:aa:a3:00:b3:57:b3:54:
64:48:0b:4b:3b:98:8e:d1:ff:10:82:bd:07:b4:1e:
d1:09:c9:b2:60:c1:47:e4:85:05:a6:1d:61:3a:3f:
15:06:49:5e:36:bc:ae:47:9b:db:3c:a1:f0:cc:2c:
23:b4:bf:1d:f5:3e:6d:f0:ff:59:2c:81:b2:09:f6:
e7:5d:01:44:90:3d:97:f0:e6:90:c2:a8:70:0c:15:
05:92:89:a3:6e:b1:58:b1:75:7b:42:d2:8f:a6:5b:
2d:bf:c9:76:a0:25:52:64:30:fa:4a:e4:82:b5:c3:
c5:28:67:c5:c1:7c:87:29:58:31:b3:5a:75:68:75:
e4:7d:f9:79:c4:b8:0c:8e:60:02:3a:b5:d4:ea:be:
44:99:8d:e1:1f:01:ec:98:32:54:16:e5:10:69:d9:
68:45:4c:8c:02:02:3a:56:a0:f0:be:02:31:e7:04:
aa:08:3c:76:9d:9b:b9:23:8c:d7:6f:9a:c6:87:44:
60:78:d7:23:1c:c9:cb:b0:78:a2:2c:12:a5:9c:4c:
43:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A8:9E:6F:4A:06:3B:5F:B3:4F:1E:62:D7:2F:7A:DD:BA:BE:C7:C4
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136809.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.239.69.0/24
66.132.146.0/24
Signature Algorithm: sha256WithRSAEncryption
48:40:a0:1e:8b:29:ea:ad:3e:b6:66:ea:d1:bf:14:65:67:03:
9f:a9:5f:2c:61:90:e6:18:61:1b:11:fa:04:3e:1c:6a:12:7f:
21:c2:d9:f6:8c:57:b6:10:e4:3b:0d:91:15:97:7d:ab:a5:e8:
42:f8:d2:f0:30:0c:36:eb:ca:c7:1d:fe:c7:48:bb:ef:b5:db:
5d:b9:1a:4b:76:74:56:d7:38:b4:d0:de:4d:34:94:4f:00:1f:
73:33:de:aa:1e:a5:37:26:ba:00:8b:0e:dc:b1:7a:5e:53:45:
04:79:2b:29:71:06:b0:33:1e:fb:5e:ed:e3:47:61:ba:b0:d7:
ac:79:ea:69:a7:d0:36:a1:32:d9:fb:b4:65:5b:55:3c:57:0d:
07:04:83:9a:3a:78:5b:23:37:d5:04:47:df:06:22:00:a7:6b:
56:f4:9c:c8:96:c5:0c:a3:64:c7:72:34:a0:4d:84:90:09:ea:
2e:98:e6:15:e7:d3:e5:0f:3c:d6:20:5f:cb:3b:fe:8d:31:91:
66:d8:06:d8:70:54:5b:89:17:40:9c:2c:d0:86:82:90:32:e5:
a3:b3:58:db:7b:9b:57:78:c9:69:29:4f:8b:bf:b5:51:e2:ba:
9d:28:88:20:bd:ac:8c:ba:d4:9f:a2:72:86:3f:55:ac:e5:f0:
24:e8:8b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:52:58 2026 by rpki-client