Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS137410.roa
File: AS137410.roa (raw, json)
Hash identifier: nNhy50UhBTku+EAeiKUo22ZDNDheaC5EGc/aZwMpoFU=
Subject key identifier: 85:21:DD:49:FC:1E:5A:8A:A1:58:4D:66:FD:98:86:F2:C5:C4:2F:96
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6A10CC142CDEC8A611597B2E99932A7FB9347FF5
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS137410.roa
Signing time: Wed 21 Oct 2026 07:45:57 +0000
ROA not before: Wed 21 Oct 2026 07:40:57 +0000
ROA not after: Wed 20 Oct 2027 07:45:57 +0000
asID: 137410
IP address blocks: 45.137.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 13:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:10:cc:14:2c:de:c8:a6:11:59:7b:2e:99:93:2a:7f:b9:34:7f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 21 07:40:57 2026 GMT
Not After : Oct 20 07:45:57 2027 GMT
Subject: CN=8521DD49FC1E5A8AA1584D66FD9886F2C5C42F96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:5c:8a:78:9a:ba:ea:6e:0e:e6:05:9e:c5:
4f:be:76:fb:0b:0a:48:fb:c8:49:e2:b7:1e:1d:9f:
2a:02:8c:5b:1c:b8:7c:67:77:12:39:cc:68:c2:45:
bf:f9:c4:cd:5b:ea:dd:8b:d7:71:7e:7a:02:f6:58:
0c:42:7c:9c:20:91:30:04:30:23:43:61:39:ad:88:
87:bf:b9:0e:36:2f:27:b0:9d:8d:74:55:1b:39:ea:
8f:46:8e:5c:a5:42:65:c7:41:4e:1a:41:59:b0:d6:
a2:82:72:87:00:f8:6b:97:da:43:f9:39:23:91:8b:
a7:5b:85:99:db:d6:2b:1c:ba:2a:a3:af:ba:c8:86:
20:40:29:69:c0:f3:23:eb:e1:ba:b1:7a:93:f5:c5:
30:91:07:25:9b:3a:6e:50:95:39:ff:7a:00:21:aa:
b0:67:b7:af:db:43:c5:2e:5c:ea:1c:dd:87:ea:e0:
34:f0:46:56:c7:55:cb:65:75:85:e5:90:ff:67:b3:
17:96:6f:ed:aa:c4:f2:38:ad:15:12:23:9c:a7:a2:
db:04:7a:e6:ec:1c:ee:f0:ac:56:56:5c:47:52:97:
c0:55:85:81:ce:39:a4:85:45:5b:21:b3:ff:db:ab:
2f:6d:c2:fc:81:e1:0c:07:54:d2:82:e7:ad:76:73:
1c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:21:DD:49:FC:1E:5A:8A:A1:58:4D:66:FD:98:86:F2:C5:C4:2F:96
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS137410.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.29.0/24
Signature Algorithm: sha256WithRSAEncryption
05:4d:99:22:c7:34:5a:5e:42:01:c2:32:84:b2:8c:33:e0:ec:
8a:be:ff:05:a1:34:72:0d:23:ac:fa:7f:8d:2e:af:e3:bf:35:
04:99:9c:64:3d:93:32:99:ba:08:58:65:13:89:42:e6:4d:ff:
21:e0:2c:ee:e4:3e:e2:52:a2:02:4f:83:46:eb:fe:f7:ff:d4:
b4:df:2d:e2:18:fb:74:3a:2d:b8:b4:56:e1:9a:6e:d8:1c:5f:
2d:61:19:09:44:46:b5:e2:2c:9a:3c:00:18:7e:74:2f:2f:33:
1d:4f:3a:a5:a2:1f:88:49:5c:d8:c8:20:b4:d4:58:f1:e9:0b:
f5:34:ef:93:ce:c5:c8:27:4b:4a:32:fa:a7:c4:0a:b6:fd:c2:
45:53:ef:a5:32:09:c1:c1:8e:19:aa:bd:23:c2:3f:15:99:96:
1a:7a:08:5e:8f:51:d3:c4:33:1b:f4:5e:a1:02:f6:30:83:48:
fd:e4:6d:77:e5:c1:d0:93:b9:69:dc:8c:25:23:5b:ce:31:06:
f6:5c:60:65:8d:8d:ab:ce:c6:b8:68:ad:17:b9:73:6c:3d:98:
cf:f2:89:22:4d:21:58:bc:6d:a2:2d:20:f5:16:a2:0b:d4:15:
9a:63:ef:cd:1f:20:f0:58:7d:75:c7:05:b6:25:e8:5f:71:6b:
94:ff:e6:80
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUahDMFCzeyKYRWXsumZMqf7k0f/UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjEwMjEwNzQwNTdaFw0yNzEwMjAwNzQ1NTdaMDMxMTAvBgNV
BAMTKDg1MjFERDQ5RkMxRTVBOEFBMTU4NEQ2NkZEOTg4NkYyQzVDNDJGOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6alyKeJq66m4O5gWexU++dvsL
Ckj7yEnitx4dnyoCjFscuHxndxI5zGjCRb/5xM1b6t2L13F+egL2WAxCfJwgkTAE
MCNDYTmtiIe/uQ42LyewnY10VRs56o9GjlylQmXHQU4aQVmw1qKCcocA+GuX2kP5
OSORi6dbhZnb1iscuiqjr7rIhiBAKWnA8yPr4bqxepP1xTCRByWbOm5QlTn/egAh
qrBnt6/bQ8UuXOoc3Yfq4DTwRlbHVctldYXlkP9nsxeWb+2qxPI4rRUSI5ynotsE
eubsHO7wrFZWXEdSl8BVhYHOOaSFRVshs//bqy9twvyB4QwHVNKC5612cxxDAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUhSHdSfweWoqhWE1m/ZiG8sXEL5YwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTM3NDEwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYkd
MA0GCSqGSIb3DQEBCwUAA4IBAQAFTZkixzRaXkIBwjKEsowz4OyKvv8FoTRyDSOs
+n+NLq/jvzUEmZxkPZMymboIWGUTiULmTf8h4Czu5D7iUqICT4NG6/73/9S03y3i
GPt0Oi24tFbhmm7YHF8tYRkJREa14iyaPAAYfnQvLzMdTzqloh+ISVzYyCC01Fjx
6Qv1NO+TzsXIJ0tKMvqnxAq2/cJFU++lMgnBwY4Zqr0jwj8VmZYaeghej1HTxDMb
9F6hAvYwg0j95G135cHQk7lp3IwlI1vOMQb2XGBljY2rzsa4aK0XuXNsPZjP8oki
TSFYvG2iLSD1FqIL1BWaY+/NHyDwWH11xwW2JehfcWuU/+aA
-----END CERTIFICATE-----
Generated at Tue Oct 27 04:53:51 2026 by rpki-client