Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135754.roa
File: AS135754.roa (raw, json)
Hash identifier: 0Q0BnMuvipDk9W9/iTy/WcYpBGy6gNvP8w/ojD5xkr0=
Subject key identifier: 2C:48:CB:1B:37:56:9F:4C:AE:5A:87:68:BE:45:3F:6C:70:C2:EF:46
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 188CB5C22B9BB13E2838CDDB82A731AE60DC7E2A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135754.roa
Signing time: Sun 14 Jun 2026 18:32:53 +0000
ROA not before: Sun 14 Jun 2026 18:27:53 +0000
ROA not after: Sun 13 Jun 2027 18:32:53 +0000
asID: 135754
IP address blocks: 178.83.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 14:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:8c:b5:c2:2b:9b:b1:3e:28:38:cd:db:82:a7:31:ae:60:dc:7e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 14 18:27:53 2026 GMT
Not After : Jun 13 18:32:53 2027 GMT
Subject: CN=2C48CB1B37569F4CAE5A8768BE453F6C70C2EF46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:35:32:51:3a:7c:92:d6:68:d8:89:cd:2d:61:
cd:64:3f:f8:37:fc:fc:87:05:01:41:07:8c:ae:38:
5e:8a:db:22:5d:1b:83:f5:db:34:a0:df:4c:00:03:
83:8f:0e:42:cf:a7:11:12:9a:dc:62:5b:91:28:50:
b0:70:ef:67:48:eb:2d:51:ac:1a:b0:5e:46:51:cf:
46:ce:be:90:29:e3:1f:7f:2d:24:04:6c:d7:af:bf:
b4:cf:37:35:88:79:f6:4d:c0:da:ec:bc:9d:5a:e4:
71:09:04:26:8d:33:99:f2:b7:41:fe:8b:3c:86:e1:
cc:3a:c9:e4:96:d6:d9:02:0f:cc:13:04:d0:d3:bb:
e6:ac:8c:71:8c:8e:29:37:2d:6c:00:d5:59:70:96:
a0:ff:66:06:19:92:28:56:e8:58:c3:67:9b:c6:ee:
81:dc:1d:33:b5:b3:0b:c6:5a:60:7c:1e:c1:d2:f3:
24:31:b3:7c:72:b3:7b:94:96:e7:d4:ee:1c:4d:72:
56:9b:5d:2e:24:68:17:cd:dc:4a:e7:47:31:6e:75:
50:f0:b4:4a:72:07:11:71:5f:0e:f8:fb:b3:c3:9f:
65:68:aa:c7:96:d5:ab:a7:0b:36:02:0a:25:4d:30:
60:13:12:7c:82:89:48:38:94:7a:6d:bc:25:27:27:
c4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:48:CB:1B:37:56:9F:4C:AE:5A:87:68:BE:45:3F:6C:70:C2:EF:46
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135754.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.71.0/24
Signature Algorithm: sha256WithRSAEncryption
96:6e:39:89:7d:cd:8f:24:37:51:31:d6:e0:c0:3f:34:d8:1d:
ae:c3:30:d9:37:61:31:59:ba:3e:a9:90:65:0c:8c:a0:5b:6b:
62:09:17:05:be:b1:59:e7:b1:17:11:c1:06:ef:d0:bb:de:42:
07:9d:6e:27:60:b1:44:c4:4e:a4:1e:2a:a6:90:b4:d2:a5:21:
e2:24:70:18:3a:b8:2b:55:87:73:ae:90:37:29:f1:2d:b7:ad:
81:c9:71:93:71:5c:e3:d7:f8:25:68:35:9b:9a:5e:8d:0f:95:
41:f4:e4:d6:16:a4:94:ff:8f:d1:55:e9:4a:5e:28:8e:d4:5f:
dd:75:64:bb:9f:40:07:a4:2c:42:93:d8:8d:87:46:0b:86:87:
77:7f:9f:a5:ff:61:67:0e:21:46:ac:1f:cd:fd:97:4c:0a:61:
94:56:0e:6a:d2:b5:da:24:45:48:38:16:aa:75:12:bb:fd:1f:
46:c8:5b:2d:b3:cb:fe:ad:ab:9e:99:c9:d6:b0:f2:84:c3:4a:
a2:c7:8e:f0:61:2c:c7:c6:4c:45:6f:99:95:94:33:00:17:f3:
5b:5a:3b:a7:84:ba:89:10:26:bf:59:44:eb:d8:fb:b3:f1:98:
f5:ca:db:60:af:11:91:98:4c:20:ab:cc:f3:74:82:fb:fc:98:
34:73:7b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 22:38:14 2026 by rpki-client