Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS134494.roa
File: AS134494.roa (raw, json)
Hash identifier: E2FiKeOOUXkFNbB7LMlG+4862/GZSOzvqnvqCYFawGg=
Subject key identifier: 59:57:D7:BF:A0:6C:83:CD:BE:3F:EA:DF:C7:42:28:AB:55:1D:C6:5E
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6B0A637A39E11C3DE5509CBD19F7FE019246D99B
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS134494.roa
Signing time: Thu 06 Aug 2026 09:02:44 +0000
ROA not before: Thu 06 Aug 2026 08:57:44 +0000
ROA not after: Thu 05 Aug 2027 09:02:44 +0000
asID: 134494
IP address blocks: 45.139.182.0/24 maxlen: 24
191.96.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 10:18:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:0a:63:7a:39:e1:1c:3d:e5:50:9c:bd:19:f7:fe:01:92:46:d9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 6 08:57:44 2026 GMT
Not After : Aug 5 09:02:44 2027 GMT
Subject: CN=5957D7BFA06C83CDBE3FEADFC74228AB551DC65E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0c:2a:fa:60:0c:5d:cc:01:36:d4:81:ca:13:
84:02:06:1e:91:dd:dd:47:61:03:c5:37:46:a8:29:
d2:5f:5b:61:3f:f2:3c:46:de:dc:63:c9:2d:f9:41:
b2:c7:64:1b:43:20:c6:62:5b:35:e2:80:15:27:19:
e7:0c:71:a8:34:0b:24:e9:01:ee:d3:57:86:8c:80:
76:c9:d4:6e:29:4c:ae:76:6c:07:2a:b8:ce:79:d5:
bb:9a:bd:e4:1b:67:d8:b4:5d:48:4a:1a:1c:98:08:
70:bc:7c:59:f8:0a:de:41:da:6c:26:99:6e:2e:46:
95:79:de:8a:93:f4:1e:1f:df:8e:86:1c:f7:15:eb:
d8:23:eb:34:12:c9:2c:6e:2f:f1:b3:65:bc:d9:8c:
21:e6:dd:3b:4d:a5:4c:b9:1a:b2:c6:1b:33:9a:53:
41:98:34:f3:05:08:e6:0d:c2:3f:56:47:2c:22:2d:
ac:41:50:25:1c:e2:3a:31:9f:c5:5a:21:28:2d:f6:
a6:04:52:1e:3f:e4:ed:8b:5d:30:2a:63:ed:15:24:
75:86:74:87:18:3b:ef:12:29:12:5c:70:fc:04:16:
93:a7:80:81:04:68:f0:2d:a7:39:c4:fd:05:53:75:
48:25:4a:50:ed:21:a8:94:b4:b7:e1:e4:95:d9:43:
af:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:57:D7:BF:A0:6C:83:CD:BE:3F:EA:DF:C7:42:28:AB:55:1D:C6:5E
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS134494.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.182.0/24
191.96.61.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e2:c7:d1:f4:06:ec:42:4c:b2:58:d4:c0:74:36:d6:c5:f1:
58:b0:9e:eb:c2:10:17:90:61:c6:76:43:3f:1c:a5:53:cd:b2:
56:61:b3:bf:c4:c6:f0:93:0e:dd:75:03:6f:47:ae:c7:a4:33:
52:51:69:57:e5:cb:f9:b0:a2:3a:da:7a:d2:94:46:0b:0f:ec:
c8:c3:eb:b9:66:8b:e1:95:4b:c1:8e:51:ff:7e:40:96:93:20:
2a:7b:b2:0e:17:fc:eb:c5:85:09:10:98:ca:d6:9e:ea:6d:0a:
39:62:60:9d:51:ab:6d:0c:39:bf:dd:41:55:18:ae:95:20:bf:
20:f4:8d:88:2f:4f:a9:64:f7:75:18:d7:58:f9:01:81:9f:99:
c2:25:ce:77:a4:8a:31:b1:ac:cd:87:9d:71:f9:d3:ca:f6:9e:
eb:f8:02:6b:bf:55:22:69:31:b9:22:05:5c:e2:b4:e5:e2:21:
7b:d5:8e:61:3a:4a:3b:11:ee:b7:71:04:ea:59:81:ac:19:31:
0a:a8:cd:17:a1:96:e6:9f:92:9b:79:45:8b:4d:b7:59:3e:d0:
41:77:1d:90:5d:90:46:93:5e:5c:21:d7:e9:d8:35:f9:2e:de:
d6:85:cd:2e:55:d6:8e:a0:25:17:08:54:f8:7f:a7:02:7f:98:
da:d8:34:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 00:28:55 2026 by rpki-client