Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS136897.roa
File: AS136897.roa (raw, json)
Hash identifier: mPdyXpI9KAJDOhpeo/pNknVGaOMseK99BlrExlvNW+4=
Subject key identifier: FA:63:36:8A:61:63:93:ED:7B:AF:B9:9A:3B:9A:33:D4:7A:97:8F:07
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 204985812596D97D6BB4D8AF53C279398B03846C
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS136897.roa
Signing time: Tue 16 Jun 2026 13:03:07 +0000
ROA not before: Tue 16 Jun 2026 12:58:07 +0000
ROA not after: Tue 15 Jun 2027 13:03:07 +0000
asID: 136897
IP address blocks: 51.241.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:49:85:81:25:96:d9:7d:6b:b4:d8:af:53:c2:79:39:8b:03:84:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 16 12:58:07 2026 GMT
Not After : Jun 15 13:03:07 2027 GMT
Subject: CN=FA63368A616393ED7BAFB99A3B9A33D47A978F07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:08:c3:a2:61:d4:8c:47:4c:94:2c:e6:1c:0f:
c8:62:5e:53:1d:14:20:4d:d4:2f:24:73:22:3a:99:
2e:f5:ed:65:3e:36:e9:3d:28:52:96:fe:28:f8:1c:
5c:11:6a:20:1a:80:41:a7:a5:3d:98:19:a6:52:7f:
dd:fa:01:09:c7:61:f5:11:1a:81:46:a1:81:92:8d:
89:87:72:23:81:78:25:80:97:3e:b2:15:25:63:55:
e8:cc:6d:7a:63:3d:ab:e2:ce:18:c4:17:13:a1:d7:
01:36:a4:c7:15:ca:80:f3:0f:3a:4c:a4:b7:4e:28:
3c:14:56:da:6c:c1:f8:37:2b:17:39:0e:86:59:3c:
99:79:ab:5d:0d:e0:b9:c8:76:c4:eb:96:8f:22:cf:
8d:d8:39:77:5e:37:aa:22:e4:66:76:4f:04:83:25:
ea:99:25:89:31:a7:fb:fa:ef:bb:d5:b6:fa:7b:27:
fd:d6:8f:b6:c5:a9:64:c0:1c:05:67:5b:da:23:37:
81:7e:5f:54:d8:df:82:8b:0e:9b:5a:7e:8f:9c:f2:
26:01:5a:a9:97:21:bf:5a:7c:56:94:ef:85:51:37:
c8:2a:48:a9:bc:c1:a2:49:98:4f:0e:e7:7f:53:26:
bc:10:3e:ee:b6:2b:d1:a0:f6:b6:a0:32:34:ef:b1:
06:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:63:36:8A:61:63:93:ED:7B:AF:B9:9A:3B:9A:33:D4:7A:97:8F:07
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS136897.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.80.0/24
Signature Algorithm: sha256WithRSAEncryption
03:0b:8d:60:21:fc:01:25:7b:7b:5a:4b:5a:52:d9:d9:b2:55:
e1:ed:74:c6:56:20:2f:f1:bb:1a:f7:ea:11:fc:93:21:de:b0:
fe:ce:28:70:44:61:5a:0a:24:95:02:a9:88:a8:c4:a4:10:42:
92:07:a5:c1:52:50:a2:9b:85:78:40:6f:5e:6e:87:3f:80:97:
b4:f7:c1:86:d2:11:f5:11:06:16:2d:77:47:49:8a:4a:bb:64:
b1:f3:cc:7d:a7:42:40:53:39:6f:8f:36:9f:84:10:34:80:c3:
7a:00:f4:d5:ea:7b:ad:00:7c:5c:90:cd:c4:db:b1:c1:5c:f5:
31:a5:d8:fb:b9:b9:3a:e1:a4:68:54:57:ad:e5:d8:4b:07:5e:
54:66:f5:df:f9:75:6f:5b:03:3a:bd:95:00:0d:5d:45:57:12:
fd:6a:d8:d2:e0:e2:71:a2:9e:81:14:45:82:8c:5f:7b:f2:d3:
46:db:1e:82:a5:b5:b8:70:0f:cc:b7:9e:e0:de:df:13:5e:d0:
11:d6:b3:8f:b2:73:30:af:a0:ac:57:ad:67:ff:be:e5:ac:a2:
6a:32:4b:11:ab:88:bc:d5:78:24:27:f5:10:4f:99:bd:c2:07:
78:34:4e:3b:6d:1d:14:b6:48:d7:ac:9d:9a:e1:af:4e:d7:69:
28:28:f2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:42:45 2026 by rpki-client