Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137235.roa
File: AS137235.roa (raw, json)
Hash identifier: eumsiTwfeo9uuX/wm9rqOZYbYmo7deUvkY2SvZOPbcI=
Subject key identifier: F7:15:CC:CA:A9:C8:5A:A0:1C:53:92:78:55:80:C7:AF:70:80:2F:C2
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 163672668B2480E812B70F46431E052B49393D12
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137235.roa
Signing time: Mon 25 May 2026 06:04:54 +0000
ROA not before: Mon 25 May 2026 05:59:54 +0000
ROA not after: Mon 24 May 2027 06:04:54 +0000
asID: 137235
IP address blocks: 82.47.55.0/24 maxlen: 24
178.83.93.0/24 maxlen: 24
178.83.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:36:72:66:8b:24:80:e8:12:b7:0f:46:43:1e:05:2b:49:39:3d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 25 05:59:54 2026 GMT
Not After : May 24 06:04:54 2027 GMT
Subject: CN=F715CCCAA9C85AA01C5392785580C7AF70802FC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:a7:33:46:42:17:f4:51:73:54:1e:f3:e6:
97:40:36:31:ec:cc:31:aa:b9:53:6c:07:db:e0:dd:
be:f8:5e:8f:20:eb:60:7d:e4:a0:68:4b:73:4d:31:
99:a7:39:f7:21:81:24:a9:7a:23:17:b4:a2:f3:e9:
28:ae:48:10:7a:af:a4:55:f8:2b:07:25:46:18:57:
f5:59:01:cf:4d:ca:c7:b7:db:95:6b:cd:42:65:f9:
77:a6:53:4a:37:6c:48:ef:a8:63:be:ab:99:c2:d7:
6a:42:9f:11:e0:78:10:76:3c:fe:1b:3d:e5:65:c8:
5f:03:18:94:e1:62:bf:db:71:87:4c:fc:2b:68:8e:
03:6f:a5:d5:0e:da:ea:ce:e2:56:30:9f:ab:52:26:
1c:79:ee:68:53:b9:fa:57:c3:7d:09:17:f2:b2:58:
0f:4b:8b:67:da:d1:78:a6:b1:43:c6:a2:b1:ae:c7:
14:c7:9c:19:10:db:1b:be:49:e2:59:c5:8b:0f:dc:
65:a6:2c:09:ac:ba:5d:89:cd:18:ef:5d:b6:9b:7f:
5c:ff:b9:2d:cc:04:7e:fa:61:75:47:bf:fe:2a:25:
6a:60:8a:0f:9e:af:c6:5d:0e:c0:41:b7:b8:10:77:
4e:98:6b:5f:0d:f6:92:5f:29:1c:1f:a2:42:b6:1f:
86:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:15:CC:CA:A9:C8:5A:A0:1C:53:92:78:55:80:C7:AF:70:80:2F:C2
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.55.0/24
178.83.93.0/24
178.83.190.0/24
Signature Algorithm: sha256WithRSAEncryption
96:b0:88:ae:a8:15:63:48:83:dd:37:8c:cf:d1:18:40:78:40:
93:56:d0:88:62:7a:e5:a5:09:70:7b:44:7e:97:3e:dc:09:b5:
db:d6:ca:96:a5:bb:1a:72:20:01:1a:ed:21:c8:44:8b:3b:97:
18:55:07:74:bc:54:43:18:5a:e6:ef:cb:04:24:f0:ba:fa:bc:
d4:75:d2:93:e1:96:36:3d:81:83:d0:da:1a:3c:0f:5f:de:01:
28:a6:9e:b2:35:09:3c:88:69:1e:b5:cf:9d:27:ba:5c:a6:7c:
e1:38:c7:84:1b:28:a9:cf:64:08:bb:b2:d0:66:89:89:78:ee:
74:53:09:e1:fe:6b:aa:14:2a:7d:59:74:24:e7:23:3b:8a:e7:
07:36:b7:15:99:2e:c2:2b:a5:7c:69:a6:f0:81:90:46:cb:50:
ef:10:76:90:7d:41:ff:70:9f:30:d9:5a:3b:dd:98:20:36:f7:
6e:1f:67:21:e3:1e:b1:76:e2:ed:93:76:99:0d:9e:d1:48:28:
69:4b:96:db:0a:4f:f9:93:0f:e9:2e:bf:3b:46:05:f3:c5:5f:
ba:e4:ac:40:9c:2c:3c:3d:8c:ce:e7:f2:8e:c1:e2:0c:9b:3e:
b4:41:67:28:58:6d:ce:4d:20:74:96:d1:ff:97:5a:5b:88:ec:
f0:c1:a4:a1
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUFjZyZoskgOgStw9GQx4FK0k5PRIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA1MjUwNTU5NTRaFw0yNzA1MjQwNjA0NTRaMDMxMTAvBgNV
BAMTKEY3MTVDQ0NBQTlDODVBQTAxQzUzOTI3ODU1ODBDN0FGNzA4MDJGQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5uqczRkIX9FFzVB7z5pdANjHs
zDGquVNsB9vg3b74Xo8g62B95KBoS3NNMZmnOfchgSSpeiMXtKLz6SiuSBB6r6RV
+CsHJUYYV/VZAc9Nyse325VrzUJl+XemU0o3bEjvqGO+q5nC12pCnxHgeBB2PP4b
PeVlyF8DGJThYr/bcYdM/CtojgNvpdUO2urO4lYwn6tSJhx57mhTufpXw30JF/Ky
WA9Li2fa0XimsUPGorGuxxTHnBkQ2xu+SeJZxYsP3GWmLAmsul2JzRjvXbabf1z/
uS3MBH76YXVHv/4qJWpgig+er8ZdDsBBt7gQd06Ya18N9pJfKRwfokK2H4YVAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQU9xXMyqnIWqAcU5J4VYDHr3CAL8IwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTM3MjM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUi83
AwQAslNdAwQAslO+MA0GCSqGSIb3DQEBCwUAA4IBAQCWsIiuqBVjSIPdN4zP0RhA
eECTVtCIYnrlpQlwe0R+lz7cCbXb1sqWpbsaciABGu0hyESLO5cYVQd0vFRDGFrm
78sEJPC6+rzUddKT4ZY2PYGD0NoaPA9f3gEopp6yNQk8iGketc+dJ7pcpnzhOMeE
Gyipz2QIu7LQZomJeO50Uwnh/muqFCp9WXQk5yM7iucHNrcVmS7CK6V8aabwgZBG
y1DvEHaQfUH/cJ8w2Vo73ZggNvduH2ch4x6xduLtk3aZDZ7RSChpS5bbCk/5kw/p
Lr87RgXzxV+65KxAnCw8PYzO5/KOweIMmz60QWcoWG3OTSB0ltH/l1pbiOzwwaSh
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:11:29 2026 by rpki-client