Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137410.roa
File: AS137410.roa (raw, json)
Hash identifier: RbdcBvk8gsWRSKS4Um4xr3zQYSfFFn7E4LKFsXqTPFk=
Subject key identifier: 67:69:3E:4E:B9:76:F5:39:18:38:DD:6C:5D:02:6C:0A:17:D7:9D:EB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3549326A5DB326C89E3877FCD0D487C8655D2E57
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137410.roa
Signing time: Thu 06 Aug 2026 02:33:26 +0000
ROA not before: Thu 06 Aug 2026 02:28:26 +0000
ROA not after: Thu 05 Aug 2027 02:33:26 +0000
asID: 137410
IP address blocks: 82.24.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:49:32:6a:5d:b3:26:c8:9e:38:77:fc:d0:d4:87:c8:65:5d:2e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 6 02:28:26 2026 GMT
Not After : Aug 5 02:33:26 2027 GMT
Subject: CN=67693E4EB976F5391838DD6C5D026C0A17D79DEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:9b:09:15:2c:3a:87:ac:55:02:60:da:b3:
2e:4c:9a:7c:cf:75:f8:aa:c2:b2:a0:38:61:6a:89:
c3:5d:17:ad:25:39:8e:b5:64:c6:fc:ea:79:a0:06:
7a:f3:de:16:29:7c:1e:52:d0:96:39:e0:88:e1:7a:
95:aa:0f:ab:46:ff:0f:33:03:60:a4:7b:7d:cd:1a:
ae:6c:51:d1:65:42:25:01:42:89:e8:2e:fe:4c:83:
9a:34:1b:90:e5:27:d7:69:74:7c:1e:d5:38:1f:22:
7f:31:f7:00:f0:8f:fe:23:e6:ea:38:0f:cf:28:5f:
0a:64:20:0f:52:33:9f:e5:9d:df:e5:b8:69:ef:50:
5c:78:90:9c:51:b9:11:ea:41:19:73:a9:5e:71:a7:
5d:05:a8:11:8d:00:80:c9:ab:11:5d:98:e1:cd:9d:
29:da:33:d0:ac:c6:cf:61:7f:9c:f0:22:36:3b:5e:
c1:06:f7:5e:b4:0c:da:7d:30:72:c6:1d:74:a8:04:
45:b0:47:dc:e6:fe:dc:21:43:29:4c:93:bb:b9:83:
e7:c8:98:0d:00:a3:bc:0f:64:43:0e:43:67:8e:8d:
05:5f:2a:be:ac:92:86:af:69:a2:48:b9:45:77:18:
79:18:7f:d1:ec:59:4b:b9:1c:37:40:9e:9b:f5:b4:
10:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:69:3E:4E:B9:76:F5:39:18:38:DD:6C:5D:02:6C:0A:17:D7:9D:EB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137410.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.68.0/24
Signature Algorithm: sha256WithRSAEncryption
89:5d:33:85:97:ef:5f:be:7d:e4:a0:0d:53:00:29:f6:f4:0c:
52:25:f9:0e:7f:ac:70:08:83:48:da:2e:04:6e:80:2a:1c:90:
0e:e6:1b:53:d7:0d:62:4c:6b:34:10:3a:41:a5:7d:35:ce:e9:
a8:5f:27:18:f2:86:5e:da:23:cd:ff:a5:58:c2:20:99:e0:62:
ee:61:7a:da:0a:64:45:07:bf:03:a1:bc:c2:82:b9:fc:0d:26:
86:f3:ee:f7:67:4f:74:ed:94:8f:ba:72:5e:25:47:03:c7:e9:
05:35:45:4a:7d:7c:96:6d:27:e7:70:14:08:bf:f7:dd:1a:55:
a1:d1:de:62:e6:9c:f6:9a:15:f0:38:f4:c5:0e:1f:94:86:cf:
45:04:83:a5:76:31:15:60:eb:47:60:02:fa:14:e5:a7:aa:f4:
ec:3b:bf:a5:bf:46:06:0d:11:1e:d2:ab:51:b0:a2:42:0b:0d:
cf:1f:35:26:e0:c2:37:61:61:05:70:85:b0:98:5b:9d:ac:c1:
47:4c:c7:95:eb:db:12:0f:bc:e4:6d:ae:6a:f6:10:ca:60:bc:
83:94:50:a9:e4:9e:41:32:f1:ea:d9:74:d4:88:e1:2b:28:b1:
cf:eb:44:4c:20:f3:c2:bb:e0:4f:3c:b0:34:92:06:46:5e:3d:
98:d7:17:54
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUNUkyal2zJsieOHf80NSHyGVdLlcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA4MDYwMjI4MjZaFw0yNzA4MDUwMjMzMjZaMDMxMTAvBgNV
BAMTKDY3NjkzRTRFQjk3NkY1MzkxODM4REQ2QzVEMDI2QzBBMTdENzlERUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzupsJFSw6h6xVAmDasy5MmnzP
dfiqwrKgOGFqicNdF60lOY61ZMb86nmgBnrz3hYpfB5S0JY54IjhepWqD6tG/w8z
A2Cke33NGq5sUdFlQiUBQonoLv5Mg5o0G5DlJ9dpdHwe1TgfIn8x9wDwj/4j5uo4
D88oXwpkIA9SM5/lnd/luGnvUFx4kJxRuRHqQRlzqV5xp10FqBGNAIDJqxFdmOHN
nSnaM9Csxs9hf5zwIjY7XsEG9160DNp9MHLGHXSoBEWwR9zm/twhQylMk7u5g+fI
mA0Ao7wPZEMOQ2eOjQVfKr6skoavaaJIuUV3GHkYf9HsWUu5HDdAnpv1tBDfAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUZ2k+Trl29TkYON1sXQJsChfXneswHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTM3NDEwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhhE
MA0GCSqGSIb3DQEBCwUAA4IBAQCJXTOFl+9fvn3koA1TACn29AxSJfkOf6xwCINI
2i4EboAqHJAO5htT1w1iTGs0EDpBpX01zumoXycY8oZe2iPN/6VYwiCZ4GLuYXra
CmRFB78DobzCgrn8DSaG8+73Z0907ZSPunJeJUcDx+kFNUVKfXyWbSfncBQIv/fd
GlWh0d5i5pz2mhXwOPTFDh+Uhs9FBIOldjEVYOtHYAL6FOWnqvTsO7+lv0YGDREe
0qtRsKJCCw3PHzUm4MI3YWEFcIWwmFudrMFHTMeV69sSD7zkba5q9hDKYLyDlFCp
5J5BMvHq2XTUiOErKLHP60RMIPPCu+BPPLA0kgZGXj2Y1xdU
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:15 2026 by rpki-client