Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS133938.roa
File: AS133938.roa (raw, json)
Hash identifier: Z/aJ3QIXx8yIJbXd+7xiFX14QugDO/2w73UMdq5VHxM=
Subject key identifier: DF:1E:50:F2:13:06:15:22:05:DA:6A:91:D3:43:46:90:F0:F8:40:5B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4166A8C837369236452E93236CE8BE3900D0FEA4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS133938.roa
Signing time: Fri 26 Jun 2026 09:44:13 +0000
ROA not before: Fri 26 Jun 2026 09:39:13 +0000
ROA not after: Fri 25 Jun 2027 09:44:13 +0000
asID: 133938
IP address blocks: 82.41.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:66:a8:c8:37:36:92:36:45:2e:93:23:6c:e8:be:39:00:d0:fe:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 26 09:39:13 2026 GMT
Not After : Jun 25 09:44:13 2027 GMT
Subject: CN=DF1E50F21306152205DA6A91D3434690F0F8405B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:7b:dc:9b:30:03:9a:df:31:1b:b4:ba:75:
60:1a:34:7b:37:d2:33:8e:54:67:ce:5d:11:63:72:
a1:c9:cd:2f:a8:cf:2e:27:47:05:24:9f:76:dc:90:
da:51:32:c5:96:34:f7:c1:ba:a0:b2:19:b1:3c:10:
91:51:78:00:34:13:35:ea:3e:30:64:b7:a3:e4:c2:
ca:da:95:24:e7:16:1e:a5:e2:5b:ca:eb:72:dc:1c:
d6:5b:9c:f5:75:52:03:ed:ab:a1:ee:c1:a5:95:2d:
3e:f3:27:2d:78:e1:ab:59:16:76:e0:0a:c1:48:0d:
40:87:b2:56:d5:db:27:ae:ba:4e:dc:05:8c:c5:71:
ae:8b:42:a9:2c:95:e1:e3:d4:e6:34:4a:4e:3c:44:
4f:1a:2b:b2:eb:fb:08:44:ca:2f:aa:6e:b9:f0:fe:
6f:2b:e5:02:51:63:e7:17:e4:c7:24:9b:82:90:1a:
9c:0e:22:be:83:72:25:a3:30:1d:51:21:75:03:60:
79:4e:56:60:84:17:b2:0b:3c:c7:5c:bc:27:df:14:
df:91:8e:9b:33:d3:26:68:ef:7e:ec:7e:4c:15:8f:
52:40:3b:e1:62:fb:92:07:de:32:cb:90:e0:f1:57:
f0:50:db:23:ba:65:b6:65:94:2f:68:30:5d:1e:1a:
9f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1E:50:F2:13:06:15:22:05:DA:6A:91:D3:43:46:90:F0:F8:40:5B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS133938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.41.20.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:86:61:fb:9b:89:71:ad:72:c8:cb:67:12:e9:70:35:c1:6f:
eb:32:82:c8:b8:02:24:41:52:9e:7f:41:6a:6c:05:57:f0:da:
2b:9a:b4:c9:4d:d8:12:5d:e0:3d:cd:fb:93:6d:b0:3b:fd:ed:
30:59:0e:c0:67:a9:40:e2:7d:9f:90:de:e9:49:1c:5a:89:71:
63:4a:e0:ca:3f:bd:4a:aa:ca:8e:d4:42:07:1b:63:a1:b6:77:
01:59:3b:08:23:38:20:fe:48:2d:5e:03:47:71:4b:73:43:8c:
df:40:19:61:a5:29:9c:ad:45:d3:6e:46:9a:89:35:17:1c:e4:
48:3d:8b:a8:08:97:52:b6:6a:47:ad:24:45:d8:a5:ca:da:a9:
db:f4:ba:3c:56:ef:2c:ca:97:44:8e:17:b0:ae:02:90:83:66:
52:35:ce:0d:32:35:77:d6:6d:22:39:0a:e7:d2:06:01:e0:94:
df:60:59:9d:43:36:3e:e0:7d:3b:34:1b:fb:60:c8:68:c3:f8:
d4:ac:d7:59:1d:aa:c0:15:97:1d:df:36:0f:25:66:bc:15:0d:
c7:37:bd:2b:64:7a:78:7a:84:16:f8:26:ed:30:14:11:7b:6a:
0a:5e:5b:19:6d:3b:1e:b1:47:d6:91:28:e3:08:c2:d1:56:8f:
78:4a:7d:42
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUQWaoyDc2kjZFLpMjbOi+OQDQ/qQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA2MjYwOTM5MTNaFw0yNzA2MjUwOTQ0MTNaMDMxMTAvBgNV
BAMTKERGMUU1MEYyMTMwNjE1MjIwNURBNkE5MUQzNDM0NjkwRjBGODQwNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmlXvcmzADmt8xG7S6dWAaNHs3
0jOOVGfOXRFjcqHJzS+ozy4nRwUkn3bckNpRMsWWNPfBuqCyGbE8EJFReAA0EzXq
PjBkt6PkwsralSTnFh6l4lvK63LcHNZbnPV1UgPtq6HuwaWVLT7zJy144atZFnbg
CsFIDUCHslbV2yeuuk7cBYzFca6LQqksleHj1OY0Sk48RE8aK7Lr+whEyi+qbrnw
/m8r5QJRY+cX5Mckm4KQGpwOIr6DciWjMB1RIXUDYHlOVmCEF7ILPMdcvCffFN+R
jpsz0yZo737sfkwVj1JAO+Fi+5IH3jLLkODxV/BQ2yO6ZbZllC9oMF0eGp+LAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU3x5Q8hMGFSIF2mqR00NGkPD4QFswHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTMzOTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUikU
MA0GCSqGSIb3DQEBCwUAA4IBAQA7hmH7m4lxrXLIy2cS6XA1wW/rMoLIuAIkQVKe
f0FqbAVX8NormrTJTdgSXeA9zfuTbbA7/e0wWQ7AZ6lA4n2fkN7pSRxaiXFjSuDK
P71KqsqO1EIHG2OhtncBWTsIIzgg/kgtXgNHcUtzQ4zfQBlhpSmcrUXTbkaaiTUX
HORIPYuoCJdStmpHrSRF2KXK2qnb9Lo8Vu8sypdEjhewrgKQg2ZSNc4NMjV31m0i
OQrn0gYB4JTfYFmdQzY+4H07NBv7YMhow/jUrNdZHarAFZcd3zYPJWa8FQ3HN70r
ZHp4eoQW+CbtMBQRe2oKXlsZbTsesUfWkSjjCMLRVo94Sn1C
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:05:14 2026 by rpki-client