Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS137409.roa
File: AS137409.roa (raw, json)
Hash identifier: 7BRjpcXqUbkpm9bZxwKxg2+jpgsRgpngu+GtzoCnGNk=
Subject key identifier: 8F:A5:64:03:16:1E:E5:F1:70:95:6B:C2:F4:EF:B7:67:54:81:3A:0D
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 175A6527E62700970FADD8AF84D937662204DD94
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS137409.roa
Signing time: Fri 28 Aug 2026 07:44:52 +0000
ROA not before: Fri 28 Aug 2026 07:39:52 +0000
ROA not after: Fri 27 Aug 2027 07:44:52 +0000
asID: 137409
IP address blocks: 5.252.80.0/24 maxlen: 24
179.61.203.0/24 maxlen: 24
181.214.73.0/24 maxlen: 24
181.214.122.0/24 maxlen: 24
185.141.167.0/24 maxlen: 24
191.96.164.0/24 maxlen: 24
2a0a:8e00::/32 maxlen: 48
2a0a:9606::/32 maxlen: 48
2a0a:9607::/32 maxlen: 48
2a0a:be00::/32 maxlen: 48
2a0a:ce00::/32 maxlen: 48
2a0a:ce01::/32 maxlen: 48
2a0a:ce03::/32 maxlen: 48
2a0a:ce04::/32 maxlen: 48
2a0a:ce05::/32 maxlen: 48
2a0a:ce06::/32 maxlen: 48
2a0a:ce07::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:5a:65:27:e6:27:00:97:0f:ad:d8:af:84:d9:37:66:22:04:dd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 28 07:39:52 2026 GMT
Not After : Aug 27 07:44:52 2027 GMT
Subject: CN=8FA56403161EE5F170956BC2F4EFB76754813A0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:08:63:36:b4:bb:d0:2c:91:16:3d:cc:58:c1:
b7:ef:21:66:b7:7f:0e:9d:9f:2d:cd:8f:75:76:f4:
c4:47:3a:a0:64:15:80:2e:06:c7:d9:af:52:0a:a2:
3c:39:d3:7f:ed:8e:f3:a7:fd:37:3d:cf:42:e6:1d:
60:c8:ff:79:fa:a0:5d:a4:0a:47:50:ba:81:a7:04:
b9:9e:c5:f2:a9:ac:e6:cb:eb:e4:5a:d7:ef:89:5e:
28:17:d0:99:3c:85:88:e9:5f:a4:7c:fe:8b:dd:a4:
0e:4e:7c:52:2c:59:f2:37:03:9a:c9:9c:75:f7:b7:
8b:d3:ee:33:f3:b4:c0:f4:c8:d5:cc:99:8c:c4:3f:
5c:36:30:a3:7f:a7:cc:44:90:01:b6:e0:92:5a:ce:
25:34:ab:c1:a4:94:2c:a4:78:3c:68:b5:54:44:be:
d7:6b:f4:e7:3b:d9:e1:f2:d9:c6:3e:d5:2e:de:8f:
57:a5:7e:37:73:6d:a7:7e:ad:c1:8a:a6:4f:fe:1e:
8c:e3:28:c9:d9:3b:ea:42:87:f9:be:ef:f9:06:c3:
f9:c3:51:b1:7e:d6:4c:3d:f4:31:ee:fa:81:5c:a4:
6c:d5:77:a9:f9:8b:86:75:5b:c4:70:5b:af:f1:4a:
2b:84:53:2f:b7:ce:75:a1:ae:d2:55:e5:a8:2c:2b:
cd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A5:64:03:16:1E:E5:F1:70:95:6B:C2:F4:EF:B7:67:54:81:3A:0D
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS137409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.80.0/24
179.61.203.0/24
181.214.73.0/24
181.214.122.0/24
185.141.167.0/24
191.96.164.0/24
IPv6:
2a0a:8e00::/32
2a0a:9606::/31
2a0a:be00::/32
2a0a:ce00::/31
2a0a:ce03::-2a0a:ce07:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
38:99:4e:dc:80:59:37:16:bc:08:78:a9:2f:f5:45:8c:b2:f6:
db:4a:02:1a:85:8b:28:92:52:43:00:95:5a:23:0c:04:32:8b:
20:75:9b:59:e2:94:cd:a9:c3:69:50:17:f7:0d:35:cf:7b:58:
1d:80:73:0e:78:f3:bd:ba:ef:d4:5f:cb:a4:62:7c:8d:79:a2:
92:84:5f:80:83:2b:b6:2e:d9:56:ba:35:c5:b5:99:23:19:45:
f5:50:dc:42:ff:85:b4:f3:c8:56:c1:15:27:d5:a6:d1:b7:dc:
20:5b:f9:75:5f:94:d4:65:b0:7c:1b:3b:07:c1:cd:1e:5a:21:
8e:5a:5f:fb:fc:9b:44:40:c8:41:f9:50:42:4d:a6:07:3b:4f:
da:79:09:0f:8a:91:ac:7d:a1:4e:90:75:12:ca:4d:d3:c0:ff:
aa:59:fc:e7:97:a8:38:1c:a2:f7:ae:89:f9:d6:d8:10:c4:c6:
3a:aa:18:eb:b3:c3:75:cb:ac:fe:63:97:91:86:81:2c:e1:d5:
ed:fe:84:27:eb:ee:9b:25:58:09:bb:c5:51:49:cb:e0:7b:5a:
e7:ac:8f:b0:ed:83:95:51:e3:89:55:1a:e9:e8:c0:7d:e1:7a:
1b:85:80:3b:11:98:01:de:16:c3:52:06:6b:bc:b4:29:3d:0c:
6a:9e:54:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:30:47 2026 by rpki-client