Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS134666.roa
File: AS134666.roa (raw, json)
Hash identifier: r/vk4h/xyR0/OYJ9hHql1At7FSCK41QHObORGSDo+rE=
Subject key identifier: FC:05:84:B5:D0:14:87:63:E4:5D:59:6C:C1:D9:D9:EC:1C:39:70:3F
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 4182401E54071107F709F4D284C378AED2ADAD46
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS134666.roa
Signing time: Tue 30 Jun 2026 06:32:22 +0000
ROA not before: Tue 30 Jun 2026 06:27:22 +0000
ROA not after: Tue 29 Jun 2027 06:32:22 +0000
asID: 134666
IP address blocks: 2a14:7580:e00a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:82:40:1e:54:07:11:07:f7:09:f4:d2:84:c3:78:ae:d2:ad:ad:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 30 06:27:22 2026 GMT
Not After : Jun 29 06:32:22 2027 GMT
Subject: CN=FC0584B5D0148763E45D596CC1D9D9EC1C39703F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ee:1e:74:fc:0c:3c:a4:d7:01:8b:d5:7a:8b:
49:bd:8b:2f:33:87:79:7e:a9:46:8e:7f:10:47:13:
3a:f2:27:89:6d:c9:df:9a:17:28:56:2b:44:7b:6d:
53:c9:d9:9b:4b:bd:a0:c6:53:44:3f:26:d6:b6:8b:
bd:5b:7d:20:dd:2b:07:86:16:28:46:40:61:66:7c:
2f:bf:3f:58:39:50:64:d9:72:61:3c:d7:43:6e:79:
e0:b5:0e:e6:1a:42:1c:80:df:99:71:ef:ae:31:0d:
fa:ee:38:bd:aa:63:c3:8f:0e:a7:eb:fe:63:da:58:
70:e4:a0:cd:8b:1f:0d:01:61:18:d0:80:90:e9:46:
94:68:b3:13:cd:90:7d:b3:5c:27:8c:f1:66:93:a1:
cf:e5:93:b3:55:d2:4f:30:14:de:be:f5:50:95:10:
8f:77:1b:ab:50:c0:d5:55:f8:87:ff:65:e6:8d:16:
7d:24:c7:06:5c:ce:50:1c:fe:c8:79:d2:e0:5e:f7:
0b:e5:6b:df:15:fd:11:83:2f:1c:27:98:6a:cc:3f:
7c:f7:cc:af:ed:50:50:cc:1f:d5:c1:1d:05:f9:c4:
34:ac:53:c7:7f:82:f9:15:f7:a7:50:49:db:55:d9:
00:82:ff:0e:fc:9a:8f:b7:0d:4f:18:fd:53:00:65:
88:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:05:84:B5:D0:14:87:63:E4:5D:59:6C:C1:D9:D9:EC:1C:39:70:3F
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS134666.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:e00a::/48
Signature Algorithm: sha256WithRSAEncryption
15:10:ad:70:1e:c4:d3:ab:f7:b7:95:fc:80:9a:af:86:4b:1b:
1e:0f:74:4b:8c:8b:30:53:2d:bf:b8:0b:c3:fc:a1:29:31:92:
48:d4:76:30:1b:dd:11:04:91:68:7e:92:1d:39:7f:5d:f7:34:
a4:09:a9:f8:76:00:51:f3:59:14:69:05:a8:9e:21:b3:ee:8a:
ed:ef:06:4e:d0:83:20:76:72:86:f1:e4:9f:a1:8d:a2:16:db:
22:e0:6a:9f:0e:49:a0:e4:1a:a3:21:33:5e:7a:c5:11:09:35:
c4:96:24:8d:34:c5:9a:c6:9a:c6:a6:56:63:ff:09:e0:9b:6f:
3a:51:6a:53:d5:cb:1d:80:89:1c:1a:97:26:41:6c:17:87:11:
96:6b:90:1a:16:eb:58:5c:7c:79:99:bf:4d:a7:1a:4c:98:45:
66:1f:0b:70:5d:76:6c:a0:29:5a:bc:70:8b:6b:a8:e5:f1:6f:
d9:53:95:71:e1:1a:a2:d3:52:d6:76:37:82:43:1e:82:6a:1a:
00:e6:08:bd:a1:a0:84:6b:88:6b:cd:55:21:fc:00:ce:87:07:
55:dc:fe:89:63:f6:1b:b9:e8:f4:4f:65:6e:fd:42:b8:f8:8a:
66:8e:ac:25:e8:d0:36:7c:c3:c1:b6:d3:ab:47:f2:e6:24:29:
75:aa:25:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:52:43 2026 by rpki-client