Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS135230.roa
File: AS135230.roa (raw, json)
Hash identifier: 0vfyaZeqJ4APYpWPb9FxcTz1LfDHr7V5WERY/CDT3+E=
Subject key identifier: 61:E7:E7:03:F6:7D:1E:0C:F8:17:BF:82:36:C9:9F:EA:BF:A8:CE:23
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 47FF99BFE7D4F122BEAC3BAB52E6ADAA6925F2F9
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS135230.roa
Signing time: Wed 15 Jul 2026 07:36:00 +0000
ROA not before: Wed 15 Jul 2026 07:31:00 +0000
ROA not after: Wed 14 Jul 2027 07:36:00 +0000
asID: 135230
IP address blocks: 188.220.233.0/24 maxlen: 24
188.221.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:ff:99:bf:e7:d4:f1:22:be:ac:3b:ab:52:e6:ad:aa:69:25:f2:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 15 07:31:00 2026 GMT
Not After : Jul 14 07:36:00 2027 GMT
Subject: CN=61E7E703F67D1E0CF817BF8236C99FEABFA8CE23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:43:6b:79:bc:eb:e0:1d:c3:87:42:bb:3a:01:
21:27:c7:34:28:9e:0e:cf:b3:01:5f:12:da:2b:96:
23:95:1a:02:6d:70:b1:63:bb:86:25:98:c1:42:c8:
92:04:25:78:06:8c:e5:10:4d:57:ed:63:31:16:87:
5b:4e:97:49:c4:f5:af:98:41:e3:81:c4:a0:c6:84:
67:27:c3:d8:27:d8:92:31:91:3d:1a:85:ef:4c:4e:
32:63:fe:b6:11:47:6f:92:1e:25:94:ba:ce:d4:57:
b4:0c:a2:3e:dc:7e:23:ba:01:15:93:03:1c:40:3f:
0a:93:03:8b:d2:b7:93:82:b2:4d:ba:fb:13:15:dc:
61:81:f8:cb:f2:ae:c3:e9:9e:76:0a:e4:14:69:c3:
12:a5:4c:b2:f0:3a:10:9e:56:b1:2e:00:23:a4:de:
39:18:a2:55:00:a8:60:58:12:7b:38:d6:7c:2a:19:
9a:27:bf:a1:a7:01:a4:3d:23:1a:bd:10:12:e8:15:
09:af:88:e6:53:02:53:36:f5:b5:4f:41:f5:ad:69:
d8:de:d7:bd:da:2e:31:6d:d4:a9:13:54:76:01:3f:
cf:63:c6:4a:ef:ee:a4:7b:fd:19:0f:f4:c3:eb:17:
3a:24:64:6d:d4:9d:27:ae:36:c6:6a:d7:67:57:36:
da:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E7:E7:03:F6:7D:1E:0C:F8:17:BF:82:36:C9:9F:EA:BF:A8:CE:23
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS135230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.233.0/24
188.221.253.0/24
Signature Algorithm: sha256WithRSAEncryption
59:83:be:70:17:b4:22:88:60:9c:17:9c:9c:b7:2d:5d:dc:94:
e5:11:b5:ab:f6:79:e0:ab:99:1f:95:35:b2:f8:55:5f:cf:2c:
6f:8c:b0:e7:ec:c1:2d:84:a6:86:ba:1a:46:fd:b5:f6:af:e2:
56:1c:f9:12:06:a2:5e:23:b7:bf:ad:3a:3f:6a:2a:73:37:5b:
15:f4:a3:03:06:04:92:4e:6d:0a:df:d9:58:26:dd:98:93:69:
c7:a1:9d:94:31:d3:25:c7:bb:2e:8f:df:b8:40:70:40:0c:48:
bd:de:7a:01:03:5c:7d:6d:46:0c:41:aa:58:b8:93:19:3e:8d:
51:e0:5c:fe:58:30:a7:9e:25:dd:aa:ff:55:60:0f:4e:ad:35:
b7:c0:f4:71:59:68:7e:51:b2:d4:31:88:77:d4:72:de:e2:17:
f7:01:9f:9d:52:6d:ce:81:f8:2d:d3:64:97:d3:a7:b5:98:79:
1c:f1:d6:7c:0e:8f:92:0b:dc:86:15:6c:e4:68:51:79:12:be:
72:aa:c6:a8:5c:fa:07:1c:b2:94:63:e2:2f:e9:70:0b:65:f8:
f6:4a:a3:05:ee:1b:ea:a4:ec:31:9f:96:30:b7:ea:e8:b4:43:
a3:0d:17:2a:48:ac:c6:c2:e2:a8:22:4f:97:2b:e0:86:14:74:
b2:c3:c5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:43:23 2026 by rpki-client