Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS136557.roa
File: AS136557.roa (raw, json)
Hash identifier: fBWEmv8aPJQKUUDBL9ZNVPfZu8vqVlVK9WUtHhbXdes=
Subject key identifier: 72:8E:E8:11:8D:06:11:4F:EA:A7:B1:1B:3E:DF:04:DB:73:6A:97:0A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6ED263307D6F84D383338EB474CD9C1B9F72F111
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS136557.roa
Signing time: Fri 03 Jul 2026 06:48:53 +0000
ROA not before: Fri 03 Jul 2026 06:43:53 +0000
ROA not after: Fri 02 Jul 2027 06:48:53 +0000
asID: 136557
IP address blocks: 2a13:9500:7e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:d2:63:30:7d:6f:84:d3:83:33:8e:b4:74:cd:9c:1b:9f:72:f1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 3 06:43:53 2026 GMT
Not After : Jul 2 06:48:53 2027 GMT
Subject: CN=728EE8118D06114FEAA7B11B3EDF04DB736A970A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e7:2d:b6:48:39:f0:f4:26:5c:fa:c0:61:54:
fa:15:dd:ac:e2:9c:f1:ca:40:a4:22:e5:a5:ef:eb:
53:26:f0:50:23:0f:6d:f7:b9:7f:80:e7:56:1c:72:
2c:5e:05:78:3e:77:6e:be:dd:e5:69:e6:c0:5d:22:
be:e0:22:42:58:5e:01:f2:27:33:fa:9c:75:1e:4a:
df:98:7f:8c:74:db:89:3e:61:d2:7d:db:fe:cf:7d:
f6:45:26:ce:58:d7:28:b1:0f:10:b6:b2:fe:ec:0d:
f6:d7:91:86:04:77:bb:7e:3e:dc:92:b8:20:ae:ef:
04:20:db:ac:ab:03:6e:66:af:0c:d2:ca:5e:dc:68:
46:6b:9d:43:08:1d:54:04:f1:1e:db:2d:60:bb:f5:
96:e6:b8:e0:f6:b6:73:90:49:31:04:25:47:4e:a2:
95:e9:c9:ee:81:f3:fd:3b:da:66:6b:f7:e8:dc:0e:
a6:e6:8f:ef:19:d9:ca:ed:b3:8c:6a:2a:2f:80:60:
fc:eb:e0:0b:e5:54:92:02:a6:83:b3:88:05:ff:8b:
dd:c8:2f:2b:cd:ce:f9:32:e7:bf:ff:72:d5:6e:7e:
5a:20:45:db:2c:03:be:84:20:9f:d5:61:1e:d3:07:
4e:eb:1e:45:92:6a:7e:5b:43:c8:ba:12:47:9c:0a:
67:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8E:E8:11:8D:06:11:4F:EA:A7:B1:1B:3E:DF:04:DB:73:6A:97:0A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS136557.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:7e::/48
Signature Algorithm: sha256WithRSAEncryption
92:e4:59:27:53:57:eb:c4:0e:31:d2:8c:d6:fe:eb:ed:f0:b3:
c8:cb:3f:ef:ef:cd:aa:40:99:e7:63:d7:05:d5:c2:56:76:41:
98:91:67:c6:cf:80:88:e4:7e:9b:ce:0f:52:c1:6c:eb:44:b0:
94:b7:5a:b5:e2:56:bc:e5:dc:d2:23:2d:88:af:dd:32:9e:6c:
90:6d:de:36:03:5c:b6:b5:4b:e2:9c:70:2b:54:2d:24:95:7b:
1e:82:9f:80:cd:cc:08:c3:f0:c9:be:6f:cc:aa:f2:45:a3:e2:
54:46:f5:27:0d:f9:a0:11:75:48:d1:6e:29:ac:a6:aa:fe:46:
9a:4e:a3:cd:ec:7f:db:33:53:83:f2:0d:3d:0f:58:92:3e:86:
18:7c:17:34:a0:df:6a:ad:63:46:55:a5:6a:ff:e9:1c:76:15:
7e:d6:4c:de:a5:9e:6c:46:f9:a4:8a:16:0e:19:b2:f8:e9:bd:
fc:62:9c:9d:25:b7:d3:37:4a:25:f8:ce:b7:d2:a9:f0:54:68:
9d:02:09:26:1e:01:ae:8b:32:96:52:1e:fb:ea:19:64:9a:83:
0f:72:42:c2:b2:74:f4:a2:b3:77:b3:d4:5a:c9:f7:a1:bf:46:
35:d5:03:76:51:ae:30:03:b7:d2:8a:0e:6d:cc:e6:04:8d:38:
01:9d:11:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:38:01 2026 by rpki-client