Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135402.roa
File: AS135402.roa (raw, json)
Hash identifier: vx8+0ap18EAOVZqos7MhYb4SXKmqWXkiT4XQbEHBQj4=
Subject key identifier: 88:8D:D2:A9:50:88:24:CD:CF:3C:00:A4:2A:BB:4E:58:B6:96:8A:83
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4A141F350275B1EAD82ED80915D99A80FC33E0BD
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135402.roa
Signing time: Tue 02 Jun 2026 08:39:11 +0000
ROA not before: Tue 02 Jun 2026 08:34:11 +0000
ROA not after: Tue 01 Jun 2027 08:39:11 +0000
asID: 135402
IP address blocks: 82.21.204.0/24 maxlen: 24
82.41.136.0/24 maxlen: 24
178.83.101.0/24 maxlen: 24
178.83.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:14:1f:35:02:75:b1:ea:d8:2e:d8:09:15:d9:9a:80:fc:33:e0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 2 08:34:11 2026 GMT
Not After : Jun 1 08:39:11 2027 GMT
Subject: CN=888DD2A9508824CDCF3C00A42ABB4E58B6968A83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0d:9d:68:af:f0:16:a6:39:c7:18:30:99:e4:
cc:77:77:bc:11:e6:19:18:e9:e4:0b:79:4b:57:fa:
9c:25:29:9f:57:5c:8c:50:ed:4d:b1:60:30:19:eb:
cf:d2:e2:e0:b2:ee:d8:73:de:f1:b5:1e:45:96:7d:
9a:22:94:ed:e3:40:a1:4f:70:d7:e0:ae:55:f0:d3:
1c:62:d0:fd:ca:59:9f:54:d2:78:9a:93:73:b7:1b:
3a:2c:31:46:0c:1f:e9:c2:6c:7a:c5:1b:9f:b9:87:
05:0b:63:25:d8:85:5c:d0:85:a8:88:ee:52:c0:b5:
aa:60:55:e2:74:b4:3b:37:7f:df:b2:65:c5:30:d3:
41:16:ab:f0:26:31:38:64:6e:b1:7d:73:7c:9d:7a:
c9:23:2b:3f:ea:60:45:bb:69:cc:cd:19:4f:a5:d9:
9f:d5:6e:7a:ea:fc:60:73:ae:84:3d:33:61:3c:a0:
af:e7:4c:c8:fd:12:25:a3:83:75:21:de:8c:4c:88:
26:97:c3:1e:cb:64:ac:a8:9c:64:82:05:80:22:4c:
cf:db:89:22:1c:f1:85:47:8c:4c:8f:06:7f:f9:a2:
6c:3a:8d:f7:a7:1d:01:68:dc:04:84:0b:6e:71:f3:
4d:45:79:11:97:50:a5:4a:65:a1:a7:5d:ba:85:d1:
68:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8D:D2:A9:50:88:24:CD:CF:3C:00:A4:2A:BB:4E:58:B6:96:8A:83
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135402.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.204.0/24
82.41.136.0/24
178.83.101.0/24
178.83.195.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:36:13:75:28:10:87:fa:fb:6c:b0:f3:2d:56:13:d3:b1:e5:
3b:04:1d:77:5e:66:2d:e2:25:3a:f8:c9:4d:e9:ab:10:5f:8f:
aa:41:31:e5:da:9b:66:3a:2b:4a:83:e7:54:4b:e5:23:c1:c0:
e0:30:62:0d:c0:8d:15:89:76:51:55:67:d3:1e:41:e5:5b:50:
fc:5d:7c:45:6f:c9:8e:ff:2f:cd:aa:a2:14:c5:9b:e3:4e:d7:
cc:39:51:dc:49:5d:e4:ba:e8:0f:88:8f:14:27:70:f0:34:d5:
53:ee:34:63:65:ed:6d:9e:62:35:dd:8d:6e:80:85:58:5e:3d:
be:11:cc:35:df:ce:d0:cd:21:42:9f:fa:b3:88:8b:83:28:4a:
82:09:5f:7b:6b:f8:82:4f:d8:d0:45:3e:c2:a5:76:f1:c8:ad:
50:53:60:52:00:26:ab:01:17:ae:f4:4e:09:6e:36:24:8c:48:
dd:2e:b9:a9:14:6d:9d:bf:a6:cd:fe:46:be:8d:44:04:39:41:
1f:72:2a:d7:a4:e0:92:d0:2a:47:a6:d5:cd:46:1b:74:ea:e1:
5c:d9:1d:84:3c:4f:88:5f:04:4a:37:67:3e:42:d2:80:86:b0:
4b:7f:29:4e:0a:0e:ff:71:ea:b1:0b:75:76:f5:8d:2c:fc:b4:
9a:14:fe:e7
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIUShQfNQJ1serYLtgJFdmagPwz4L0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA2MDIwODM0MTFaFw0yNzA2MDEwODM5MTFaMDMxMTAvBgNV
BAMTKDg4OEREMkE5NTA4ODI0Q0RDRjNDMDBBNDJBQkI0RTU4QjY5NjhBODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzDZ1or/AWpjnHGDCZ5Mx3d7wR
5hkY6eQLeUtX+pwlKZ9XXIxQ7U2xYDAZ68/S4uCy7thz3vG1HkWWfZoilO3jQKFP
cNfgrlXw0xxi0P3KWZ9U0niak3O3GzosMUYMH+nCbHrFG5+5hwULYyXYhVzQhaiI
7lLAtapgVeJ0tDs3f9+yZcUw00EWq/AmMThkbrF9c3ydeskjKz/qYEW7aczNGU+l
2Z/Vbnrq/GBzroQ9M2E8oK/nTMj9EiWjg3Uh3oxMiCaXwx7LZKyonGSCBYAiTM/b
iSIc8YVHjEyPBn/5omw6jfenHQFo3ASEC25x801FeRGXUKVKZaGnXbqF0WgfAgMB
AAGjggIcMIICGDAdBgNVHQ4EFgQUiI3SqVCIJM3PPACkKrtOWLaWioMwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTM1NDAyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUhXM
AwQAUimIAwQAslNlAwQAslPDMA0GCSqGSIb3DQEBCwUAA4IBAQCPNhN1KBCH+vts
sPMtVhPTseU7BB13XmYt4iU6+MlN6asQX4+qQTHl2ptmOitKg+dUS+UjwcDgMGIN
wI0ViXZRVWfTHkHlW1D8XXxFb8mO/y/NqqIUxZvjTtfMOVHcSV3kuugPiI8UJ3Dw
NNVT7jRjZe1tnmI13Y1ugIVYXj2+Ecw1387QzSFCn/qziIuDKEqCCV97a/iCT9jQ
RT7CpXbxyK1QU2BSACarAReu9E4JbjYkjEjdLrmpFG2dv6bN/ka+jUQEOUEfcirX
pOCS0CpHptXNRht06uFc2R2EPE+IXwRKN2c+QtKAhrBLfylOCg7/ceqxC3V29Y0s
/LSaFP7n
-----END CERTIFICATE-----
Generated at Thu Jun 4 07:09:19 2026 by rpki-client