Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS136809.roa
File: AS136809.roa (raw, json)
Hash identifier: 9OQMIHeKb+aeGSLvJ6xvX0OmPw+4SE+zUSrNSV5jY60=
Subject key identifier: 27:F1:81:9C:2D:12:03:7F:B6:16:21:82:05:91:C0:05:83:4D:ED:CB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 789FB7333FE75510BBDA3A7F3396B4CCB03533A7
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS136809.roa
Signing time: Tue 20 Oct 2026 11:07:16 +0000
ROA not before: Tue 20 Oct 2026 11:02:16 +0000
ROA not after: Tue 19 Oct 2027 11:07:16 +0000
asID: 136809
IP address blocks: 82.21.66.0/24 maxlen: 24
82.38.23.0/24 maxlen: 24
82.47.36.0/24 maxlen: 24
84.75.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 16:15:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:9f:b7:33:3f:e7:55:10:bb:da:3a:7f:33:96:b4:cc:b0:35:33:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 20 11:02:16 2026 GMT
Not After : Oct 19 11:07:16 2027 GMT
Subject: CN=27F1819C2D12037FB61621820591C005834DEDCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:56:21:d6:8c:30:ad:a5:80:71:8d:a1:cf:
d3:17:ec:5b:10:93:52:36:7f:ae:8d:1d:8c:ab:a3:
ec:ea:a2:ea:87:47:71:48:d7:29:58:8b:85:99:9d:
84:a8:fc:76:15:56:fb:51:1f:09:8f:12:57:cb:c6:
00:b9:13:e7:ae:4f:6c:f9:4e:9a:b4:73:41:7b:cb:
ac:69:39:fb:0d:55:de:a2:1c:2e:ee:58:f6:aa:10:
01:c2:55:de:7e:19:4c:7a:23:15:42:94:3e:5d:f2:
f0:01:65:77:d4:17:70:86:b9:ad:4c:72:7e:0e:74:
02:7a:d2:eb:41:3d:73:95:14:87:09:d6:32:db:88:
a4:ee:af:9b:91:39:3c:bc:f5:fb:7d:bf:d7:3d:3e:
55:15:11:d3:ca:75:04:23:f5:92:db:3f:ff:80:24:
0b:05:a0:38:92:c5:ef:03:e5:f7:6b:91:54:f2:df:
a3:2e:48:16:55:76:f6:7c:ab:e6:e5:4c:71:43:7f:
01:16:58:d6:9e:40:b7:ca:c3:b6:bd:1b:07:28:ac:
39:db:78:c5:ca:51:b6:1f:62:34:b8:c5:b6:9a:10:
8d:88:3b:fb:4f:1a:f4:fe:f6:88:3d:2e:81:2d:ba:
5d:c7:94:00:c6:c3:c3:97:bd:11:a3:b6:8f:10:35:
cc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F1:81:9C:2D:12:03:7F:B6:16:21:82:05:91:C0:05:83:4D:ED:CB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS136809.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.66.0/24
82.38.23.0/24
82.47.36.0/24
84.75.36.0/24
Signature Algorithm: sha256WithRSAEncryption
56:6f:04:d2:55:97:67:e4:0c:13:f8:af:a4:cd:12:68:0a:c4:
34:e7:91:b3:ee:32:f1:8a:39:5e:2d:5a:f3:9b:eb:f5:99:bd:
53:e6:1b:d4:9b:91:a3:e2:4f:c2:a7:83:4c:96:93:13:4c:92:
2e:85:ac:ed:5d:99:be:8c:17:58:cf:ee:25:20:d5:ab:35:c6:
93:c5:72:7e:8f:33:87:1d:fb:e3:91:a6:35:84:37:96:1d:1b:
e7:85:83:0e:9f:5a:ca:1b:0c:4a:65:fa:52:4d:92:a8:d5:f3:
1e:33:62:b2:87:21:b0:59:3e:aa:32:8e:af:e5:ea:2e:8a:df:
9a:2d:b2:03:9f:30:f0:91:9d:bf:32:15:21:ce:fe:34:c9:46:
3c:0a:cb:f0:72:e9:b0:e0:c6:12:ca:ec:d9:43:56:4e:4d:b9:
7d:40:1f:f3:68:11:2a:2d:50:66:31:e5:dc:2b:8e:dc:0a:ec:
2e:3a:50:72:f8:71:61:31:a3:2c:45:2f:72:99:14:cb:f8:96:
db:bd:49:3a:fe:e8:b1:2b:d9:ef:a8:86:ef:b9:5e:c5:88:4e:
48:6f:91:b7:23:fc:84:c0:88:4d:90:c5:15:22:6f:4a:9a:96:
ef:3d:16:4f:84:82:23:10:36:ee:51:26:79:55:01:56:d7:da:
e2:26:f4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:37:21 2026 by rpki-client