Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS135392.roa
File: AS135392.roa (raw, json)
Hash identifier: 8XPsgLIrJRm3yiSKU05NAznHl4bVju8rPyXUaiCT8bA=
Subject key identifier: C3:C8:EB:6C:89:8A:C8:DC:A8:EE:CE:DB:D2:93:34:8E:21:84:70:E7
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 15F292C1EF58AAFA7E26613774C20632C45D545B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS135392.roa
Signing time: Sun 01 Nov 2026 13:30:21 +0000
ROA not before: Sun 01 Nov 2026 13:25:21 +0000
ROA not after: Sun 31 Oct 2027 13:30:21 +0000
asID: 135392
IP address blocks: 188.221.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:f2:92:c1:ef:58:aa:fa:7e:26:61:37:74:c2:06:32:c4:5d:54:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 1 13:25:21 2026 GMT
Not After : Oct 31 13:30:21 2027 GMT
Subject: CN=C3C8EB6C898AC8DCA8EECEDBD293348E218470E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:68:ff:fc:1c:91:57:bd:b8:d7:39:99:f9:
59:f9:e3:e8:2d:06:b6:65:e4:c4:9b:c9:82:42:83:
47:3d:11:71:26:33:96:df:d2:ff:07:23:20:27:f4:
ff:6c:07:3f:4a:be:de:80:da:74:86:c2:b6:9f:63:
fe:40:07:47:e4:59:2a:ed:06:c9:8a:aa:68:d5:2f:
2a:4e:02:05:17:a5:ef:53:e0:ae:9d:8c:9a:19:f9:
91:01:03:e8:87:ad:dd:98:9b:c1:7e:38:28:54:05:
2b:22:b3:42:b6:3f:2d:61:cf:83:36:2c:37:77:2a:
6a:d6:dc:a8:6c:a7:a4:f0:d6:a5:2d:86:3a:3e:34:
06:ee:6c:0e:11:fb:3e:07:cd:d0:29:4c:04:73:9b:
4d:4f:99:ec:ff:a1:9a:78:20:2f:40:59:db:c2:95:
b9:26:dc:34:2b:36:18:09:eb:46:4a:52:0c:2b:27:
a7:f3:ee:55:a4:f2:66:4e:72:b8:51:79:2e:bf:3c:
84:35:90:87:54:7c:dc:39:a1:9d:59:ea:e3:f3:02:
99:fb:ec:fe:36:bd:f8:62:56:86:d2:60:9c:c6:a1:
a6:62:89:f3:df:76:ad:09:bb:97:03:ca:51:88:d7:
15:40:d4:7b:42:48:cc:35:4b:5f:f0:bb:ce:88:c0:
9a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C8:EB:6C:89:8A:C8:DC:A8:EE:CE:DB:D2:93:34:8E:21:84:70:E7
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS135392.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.221.119.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:d0:d6:94:cc:b7:3f:cb:eb:24:65:81:99:0c:68:9f:2f:a9:
e8:3d:67:db:bb:d2:4c:f0:e7:c2:d4:a0:90:a1:da:ad:8e:1f:
14:10:90:05:d8:4b:58:04:42:f7:6a:be:5f:4e:0e:8a:17:a6:
27:16:2b:5a:df:07:e6:c0:58:09:c3:06:8d:84:e1:0a:34:82:
0f:86:34:e7:82:0b:c3:ad:f1:69:bd:a0:76:99:ad:c2:9c:bc:
25:05:42:6c:01:12:5e:3f:1f:e9:68:12:a5:6c:e1:39:b2:08:
71:4d:1b:b4:78:f0:54:53:fa:ae:bc:8d:cc:4c:04:90:5a:20:
5a:d0:bc:7c:96:8e:38:fc:59:8d:ca:97:cd:dc:82:ab:00:05:
d9:2e:60:ab:73:ab:db:0c:37:b8:4f:20:d6:33:10:a2:4b:3e:
b5:b2:3e:93:a2:d3:c1:6a:d5:5e:14:a6:1b:d0:26:80:4a:d6:
0b:8f:7e:2c:73:2d:9b:df:ad:8a:2b:f7:9c:00:a9:54:6e:01:
b8:2d:e6:09:30:48:a1:c5:0e:3a:67:c4:0f:ef:8c:56:cc:df:
e1:c9:67:6f:8e:d7:99:88:ae:49:48:2c:bc:0e:9a:6d:0b:24:
58:ae:d4:99:a4:39:7e:36:8b:c9:ed:e5:ad:63:a3:b2:d6:9f:
ef:7d:45:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:44:36 2026 by rpki-client