Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135598.roa
File: AS135598.roa (raw, json)
Hash identifier: E7GFzHI6qdBGZ2Kv/SI72u8YN73TX++UfMtPp/A2F7w=
Subject key identifier: D7:7A:52:EE:EE:F0:F5:8C:27:F1:D2:D4:EC:3D:0C:AB:1A:E5:EA:14
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 05591090EC16305D2CF58BC5899A3C8A60F0B1B7
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135598.roa
Signing time: Wed 21 Oct 2026 02:31:12 +0000
ROA not before: Wed 21 Oct 2026 02:26:12 +0000
ROA not after: Wed 20 Oct 2027 02:31:12 +0000
asID: 135598
IP address blocks: 82.22.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:59:10:90:ec:16:30:5d:2c:f5:8b:c5:89:9a:3c:8a:60:f0:b1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 21 02:26:12 2026 GMT
Not After : Oct 20 02:31:12 2027 GMT
Subject: CN=D77A52EEEEF0F58C27F1D2D4EC3D0CAB1AE5EA14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bc:00:e6:68:02:61:f8:32:09:94:7e:ae:6b:
40:df:66:d8:44:91:4d:5d:e1:17:07:2d:9c:4a:b5:
50:04:f1:16:06:12:d8:7b:4a:af:ac:60:35:5f:a4:
78:01:82:4f:a5:a2:53:e3:0b:66:1a:38:48:08:f8:
6e:61:24:9f:b0:23:9a:4f:64:52:a8:f9:a5:ea:bf:
eb:7d:ac:1e:62:ed:8c:59:6c:dc:f5:06:5e:b1:23:
b7:e0:88:3d:e2:be:71:c3:d3:69:41:8a:e6:5b:dc:
6d:50:74:06:83:8d:31:2e:f3:b1:87:4d:1a:88:76:
66:51:6e:43:a9:32:4a:32:4b:32:f6:a4:1d:8f:f3:
79:3d:59:84:e8:f7:b2:95:99:95:fe:69:cf:ce:f1:
d1:23:02:47:7e:6a:a0:7d:51:64:65:c2:4b:79:a0:
fe:fa:06:59:a5:7b:15:70:f7:95:d1:12:85:d0:1a:
7f:47:a2:0c:9b:a6:64:c9:08:db:c4:e2:d5:24:04:
ff:8a:a5:b0:80:66:d9:e6:0d:03:9e:7f:9c:b9:19:
fb:b0:40:b3:b9:55:3d:2a:1f:f9:d8:1c:17:0f:be:
a9:31:ed:d4:29:30:b4:4f:7b:9e:1d:28:28:1f:7d:
51:33:bc:1a:73:a0:66:c1:ef:a1:63:d7:89:d7:e0:
bf:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7A:52:EE:EE:F0:F5:8C:27:F1:D2:D4:EC:3D:0C:AB:1A:E5:EA:14
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135598.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.63.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:2c:66:72:1b:63:17:6a:09:0d:67:09:85:ae:be:a2:9a:fa:
e7:a4:8a:d1:cb:b8:8b:d5:63:5b:ce:cc:e2:47:ee:66:f6:c4:
1e:72:90:93:43:3d:3e:00:58:06:af:a1:dc:e6:51:1d:38:79:
76:f1:3e:eb:40:8e:4a:18:5a:3c:98:a5:f9:2f:90:8b:7d:fb:
4c:09:71:fc:d7:a8:1b:88:95:6f:e0:c9:13:be:28:19:4b:4d:
f3:fc:55:d9:26:4e:bf:37:38:9f:ab:93:e8:b4:a7:56:86:15:
69:4d:bc:83:5f:15:35:00:3d:f4:a5:6c:6f:4f:89:65:ff:54:
9e:1d:1f:39:9e:e6:d1:02:74:a9:52:f0:b9:97:88:a8:8c:3a:
ac:d3:83:a5:ec:a2:d1:e5:89:50:e8:e3:a0:b9:af:79:7d:5e:
da:1e:c7:17:18:c0:a8:aa:1d:0c:b6:33:ff:5c:b8:4d:a7:27:
d5:19:8a:89:0d:d1:12:5e:5e:a3:22:35:13:e2:0b:e3:16:27:
19:d6:88:f5:52:f8:da:e9:40:62:ae:c6:d1:aa:d5:35:e8:1d:
42:b4:f1:47:4f:89:54:8b:da:56:93:02:6d:86:36:91:0b:e6:
59:66:6d:b9:29:1b:74:51:77:14:3b:78:22:c1:d3:f7:c6:3f:
ec:b4:72:62
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUBVkQkOwWMF0s9YvFiZo8imDwsbcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjEwMjEwMjI2MTJaFw0yNzEwMjAwMjMxMTJaMDMxMTAvBgNV
BAMTKEQ3N0E1MkVFRUVGMEY1OEMyN0YxRDJENEVDM0QwQ0FCMUFFNUVBMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/vADmaAJh+DIJlH6ua0DfZthE
kU1d4RcHLZxKtVAE8RYGEth7Sq+sYDVfpHgBgk+lolPjC2YaOEgI+G5hJJ+wI5pP
ZFKo+aXqv+t9rB5i7YxZbNz1Bl6xI7fgiD3ivnHD02lBiuZb3G1QdAaDjTEu87GH
TRqIdmZRbkOpMkoySzL2pB2P83k9WYTo97KVmZX+ac/O8dEjAkd+aqB9UWRlwkt5
oP76BlmlexVw95XREoXQGn9HogybpmTJCNvE4tUkBP+KpbCAZtnmDQOef5y5Gfuw
QLO5VT0qH/nYHBcPvqkx7dQpMLRPe54dKCgffVEzvBpzoGbB76Fj14nX4L+hAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU13pS7u7w9Ywn8dLU7D0Mqxrl6hQwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTM1NTk4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhY/
MA0GCSqGSIb3DQEBCwUAA4IBAQCaLGZyG2MXagkNZwmFrr6imvrnpIrRy7iL1WNb
zsziR+5m9sQecpCTQz0+AFgGr6Hc5lEdOHl28T7rQI5KGFo8mKX5L5CLfftMCXH8
16gbiJVv4MkTvigZS03z/FXZJk6/Nzifq5PotKdWhhVpTbyDXxU1AD30pWxvT4ll
/1SeHR85nubRAnSpUvC5l4iojDqs04Ol7KLR5YlQ6OOgua95fV7aHscXGMCoqh0M
tjP/XLhNpyfVGYqJDdESXl6jIjUT4gvjFicZ1oj1Uvja6UBirsbRqtU16B1CtPFH
T4lUi9pWkwJthjaRC+ZZZm25KRt0UXcUO3giwdP3xj/stHJi
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:56:07 2026 by rpki-client