Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS133296.roa
File: AS133296.roa (raw, json)
Hash identifier: bdASgPfCH/XTPBgSOcGhWuqorDCSps3aC6ref4WLdhc=
Subject key identifier: 90:2E:A4:6D:0D:3B:51:C1:2B:BD:40:CF:0D:8C:FF:30:D1:8D:37:FA
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3E3BE494AF0F0CEB1066B3EAB469EAC9E1FED972
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS133296.roa
Signing time: Fri 07 Aug 2026 09:49:20 +0000
ROA not before: Fri 07 Aug 2026 09:44:20 +0000
ROA not after: Fri 06 Aug 2027 09:49:20 +0000
asID: 133296
IP address blocks: 181.215.36.0/24 maxlen: 24
181.215.57.0/24 maxlen: 24
181.215.59.0/24 maxlen: 24
181.215.67.0/24 maxlen: 24
181.215.90.0/24 maxlen: 24
181.215.166.0/24 maxlen: 24
181.215.173.0/24 maxlen: 24
181.215.194.0/24 maxlen: 24
181.215.233.0/24 maxlen: 24
181.215.255.0/24 maxlen: 24
191.96.0.0/24 maxlen: 24
191.96.10.0/24 maxlen: 24
191.96.12.0/24 maxlen: 24
191.96.26.0/24 maxlen: 24
191.96.28.0/24 maxlen: 24
191.96.34.0/24 maxlen: 24
191.96.66.0/24 maxlen: 24
191.96.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:3b:e4:94:af:0f:0c:eb:10:66:b3:ea:b4:69:ea:c9:e1:fe:d9:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 7 09:44:20 2026 GMT
Not After : Aug 6 09:49:20 2027 GMT
Subject: CN=902EA46D0D3B51C12BBD40CF0D8CFF30D18D37FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:14:68:8d:07:8a:d7:9b:3f:bd:89:05:1c:
9c:e5:1d:ee:1d:62:fa:eb:75:24:b7:bb:b7:f1:b4:
2a:ec:ab:93:58:77:86:a6:dc:5e:44:0b:a2:93:8b:
d4:b3:83:39:df:77:3b:e3:c9:a3:03:c4:32:a5:22:
35:92:1b:ff:ea:eb:62:5a:7a:55:ca:12:f4:12:d4:
e8:3b:5a:00:c3:62:97:cb:6f:89:d8:65:cf:d9:a7:
07:0a:1a:f3:96:56:cf:0e:b6:fb:ef:5d:70:66:0c:
e0:6c:90:59:6e:66:77:4c:0b:e6:0b:34:36:0b:59:
4f:cb:98:df:a3:30:38:b7:62:e6:49:6e:91:d9:ee:
7f:a7:6b:b2:53:e5:3b:2e:54:50:14:18:34:c8:5c:
29:67:82:40:89:0b:74:ed:5d:9e:38:ea:7d:d3:39:
2c:db:04:ff:de:78:18:2c:9a:57:bb:cb:6f:ad:b2:
94:8f:0a:e9:f3:2b:86:c5:14:56:e6:b8:d7:59:06:
00:89:a3:c0:e4:30:60:ec:42:75:b2:ef:0b:e8:86:
d5:5e:a8:52:f6:e1:5d:df:af:02:c3:74:70:bd:0d:
fb:c5:d2:f9:64:5c:31:f3:f4:b7:fc:df:ec:f7:a0:
c4:5d:91:c4:d1:05:2e:db:4c:27:91:15:64:ed:63:
e2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2E:A4:6D:0D:3B:51:C1:2B:BD:40:CF:0D:8C:FF:30:D1:8D:37:FA
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS133296.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.36.0/24
181.215.57.0/24
181.215.59.0/24
181.215.67.0/24
181.215.90.0/24
181.215.166.0/24
181.215.173.0/24
181.215.194.0/24
181.215.233.0/24
181.215.255.0/24
191.96.0.0/24
191.96.10.0/24
191.96.12.0/24
191.96.26.0/24
191.96.28.0/24
191.96.34.0/24
191.96.66.0/24
191.96.75.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:1a:ef:e7:3a:00:a5:44:f8:ed:90:34:bc:cd:99:20:e7:8f:
bc:17:7b:b1:71:7a:0d:fb:f1:ad:af:3b:1a:8d:50:13:7b:d9:
cd:80:ab:57:c2:15:3a:64:ac:ec:8d:3d:61:c6:0a:63:74:de:
33:61:87:20:f7:32:90:d8:c1:50:6b:e1:52:db:09:f4:99:f9:
c5:03:61:8c:24:c1:d4:1a:21:72:8a:c0:78:d8:a8:16:52:50:
cc:dd:9a:7f:db:3b:98:f3:39:0e:18:84:c3:0b:04:38:fb:cd:
a9:5f:b9:79:59:d5:5c:d2:b0:57:e6:d1:8d:0b:41:49:90:42:
a1:1e:12:5d:bc:f4:5d:8e:4b:c8:76:12:8d:98:e1:86:80:37:
58:c9:1e:f2:88:11:c5:f2:39:69:8e:b2:ed:23:37:e0:98:c9:
52:00:b4:78:d0:f1:ba:44:5b:a4:2a:83:c5:91:8e:c8:50:c9:
be:9e:70:2d:8a:4a:c5:4b:fc:b3:93:c8:7b:57:19:87:3f:41:
43:3c:3a:01:36:53:61:4b:ad:0b:56:38:b4:e1:98:43:3b:e1:
9c:08:e8:15:84:23:d2:f8:9f:f2:9a:b4:38:ce:54:37:86:c4:
fe:cc:ad:4c:ed:32:81:44:e2:9b:d9:d8:c2:97:32:e0:2d:42:
9c:d7:7f:9e
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIUPjvklK8PDOsQZrPqtGnqyeH+2XIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA4MDcwOTQ0MjBaFw0yNzA4MDYwOTQ5MjBaMDMxMTAvBgNV
BAMTKDkwMkVBNDZEMEQzQjUxQzEyQkJENDBDRjBEOENGRjMwRDE4RDM3RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwTRRojQeK15s/vYkFHJzlHe4d
YvrrdSS3u7fxtCrsq5NYd4am3F5EC6KTi9SzgznfdzvjyaMDxDKlIjWSG//q62Ja
elXKEvQS1Og7WgDDYpfLb4nYZc/ZpwcKGvOWVs8OtvvvXXBmDOBskFluZndMC+YL
NDYLWU/LmN+jMDi3YuZJbpHZ7n+na7JT5TsuVFAUGDTIXClngkCJC3TtXZ446n3T
OSzbBP/eeBgsmle7y2+tspSPCunzK4bFFFbmuNdZBgCJo8DkMGDsQnWy7wvohtVe
qFL24V3frwLDdHC9DfvF0vlkXDHz9Lf83+z3oMRdkcTRBS7bTCeRFWTtY+IJAgMB
AAGjggJxMIICbTAdBgNVHQ4EFgQUkC6kbQ07UcErvUDPDYz/MNGNN/owHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTMzMjk2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEALXX
JAMEALXXOQMEALXXOwMEALXXQwMEALXXWgMEALXXpgMEALXXrQMEALXXwgMEALXX
6QMEALXX/wMEAL9gAAMEAL9gCgMEAL9gDAMEAL9gGgMEAL9gHAMEAL9gIgMEAL9g
QgMEAL9gSzANBgkqhkiG9w0BAQsFAAOCAQEAoxrv5zoApUT47ZA0vM2ZIOePvBd7
sXF6Dfvxra87Go1QE3vZzYCrV8IVOmSs7I09YcYKY3TeM2GHIPcykNjBUGvhUtsJ
9Jn5xQNhjCTB1BohcorAeNioFlJQzN2af9s7mPM5DhiEwwsEOPvNqV+5eVnVXNKw
V+bRjQtBSZBCoR4SXbz0XY5LyHYSjZjhhoA3WMke8ogRxfI5aY6y7SM34JjJUgC0
eNDxukRbpCqDxZGOyFDJvp5wLYpKxUv8s5PIe1cZhz9BQzw6ATZTYUutC1Y4tOGY
QzvhnAjoFYQj0vif8pq0OM5UN4bE/sytTO0ygUTim9nYwpcy4C1CnNd/ng==
-----END CERTIFICATE-----
Generated at Wed Sep 9 21:29:17 2026 by rpki-client