Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137517.roa
File: AS137517.roa (raw, json)
Hash identifier: R2m5xKeufpc4rKCghVcFYaw+fIlR1l4m/bHU70Xkp+w=
Subject key identifier: 64:73:CA:1B:2E:AE:62:25:EC:31:AE:FF:E1:33:68:2F:C8:80:1F:8E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 763B63F19EB333514A2B11BBC1D0DA3360ACCF9B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137517.roa
Signing time: Tue 26 Aug 2025 04:01:24 +0000
ROA not before: Tue 26 Aug 2025 03:56:24 +0000
ROA not after: Tue 25 Aug 2026 04:01:24 +0000
asID: 137517
IP address blocks: 143.14.95.0/24 maxlen: 24
155.117.13.0/24 maxlen: 24
155.117.207.0/24 maxlen: 24
167.148.2.0/24 maxlen: 24
167.148.8.0/24 maxlen: 24
167.148.41.0/24 maxlen: 24
167.148.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:3b:63:f1:9e:b3:33:51:4a:2b:11:bb:c1:d0:da:33:60:ac:cf:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 26 03:56:24 2025 GMT
Not After : Aug 25 04:01:24 2026 GMT
Subject: CN=6473CA1B2EAE6225EC31AEFFE133682FC8801F8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1b:7a:40:82:51:0b:2a:02:38:82:5c:8f:26:
7c:89:08:0d:17:5d:f8:ec:06:c1:e6:09:6b:72:15:
36:c0:3f:72:10:4e:d2:a5:79:35:3e:50:69:a7:74:
ec:a1:00:a8:1a:3a:ad:f1:53:73:d1:30:ff:92:3a:
e7:c2:54:0c:60:bd:4e:10:55:62:08:1f:50:a8:fd:
f4:5b:8a:69:62:22:fd:68:9c:17:75:85:ff:62:3d:
97:84:81:b5:d7:1a:a8:85:b5:a0:e9:f3:2d:b9:5c:
cb:2e:ab:40:c3:36:92:b6:26:e9:0b:f0:d8:1c:f3:
5d:95:72:67:7a:0a:85:04:4a:8a:8a:dd:a7:61:06:
d9:45:f0:aa:9e:b1:23:01:b1:88:69:c1:67:22:92:
2b:73:3c:3a:c5:03:ca:5f:e6:3c:00:d9:38:10:8b:
37:1f:9c:c3:52:4d:7a:9f:f2:97:d1:d2:a2:85:84:
58:79:d8:5c:ed:fc:7b:e2:e0:93:e3:56:2e:18:d0:
68:da:14:e0:20:e6:cd:52:78:86:ef:11:e9:e6:34:
6e:60:04:a0:63:6e:5e:22:67:19:08:d6:6c:34:78:
5b:14:b6:21:f3:5d:65:73:9c:45:cc:ef:60:dc:88:
22:35:fe:5d:7b:07:38:50:93:43:d2:36:ec:f1:c2:
de:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:73:CA:1B:2E:AE:62:25:EC:31:AE:FF:E1:33:68:2F:C8:80:1F:8E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137517.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.95.0/24
155.117.13.0/24
155.117.207.0/24
167.148.2.0/24
167.148.8.0/24
167.148.41.0/24
167.148.172.0/24
Signature Algorithm: sha256WithRSAEncryption
75:69:3c:1f:22:72:53:f0:5e:21:ef:08:ab:7c:f4:bb:97:83:
d8:ab:72:d9:f4:1b:cf:30:39:0f:92:7e:78:56:1d:21:90:05:
83:6e:02:9b:65:bd:0b:77:2f:b8:5d:9d:bd:0e:dd:50:d8:a7:
39:81:e6:a8:8e:89:bb:e9:c5:76:24:39:bf:66:72:55:c6:30:
07:45:37:6a:3e:44:07:98:3e:df:a9:48:d0:21:e6:e5:a5:b7:
0c:f7:1d:9a:5c:47:25:0a:be:ee:02:11:2f:cf:70:e4:1f:ce:
de:39:90:b8:ad:d5:39:14:79:4d:b0:d7:1c:f5:d5:8d:cf:94:
01:16:97:36:2d:04:24:24:ea:a8:a1:06:09:69:2e:54:6a:0b:
82:15:d9:0d:af:2c:a6:d8:88:29:0c:3e:33:7a:99:0a:1a:56:
ba:95:fa:3e:83:cb:0a:e1:e2:6e:59:af:17:86:1b:0d:f5:ae:
7a:0a:a3:cd:38:6e:65:01:66:6f:68:9e:15:22:a2:0d:03:40:
87:12:bc:ad:45:75:f5:67:84:d9:cb:b0:6f:62:d6:4b:8d:82:
60:a5:dd:ab:32:39:94:f4:f6:0d:46:23:ca:ae:b5:d5:51:c0:
29:76:b8:b8:6a:1b:1d:58:bd:9b:21:57:5d:9d:56:5e:e1:0c:
4a:1f:dd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 19:45:05 2025 by rpki-client