Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS137178.roa
File: AS137178.roa (raw, json)
Hash identifier: lRJENrg/SIsPl+Y4knfRMfdaPho40xDcs/fIcRFO9Oo=
Subject key identifier: 68:9D:89:F7:A1:F4:55:46:17:40:95:C3:9D:5A:E2:26:E6:5E:11:06
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5D52DC638D411602BBCD12432167E5D4B3E4A080
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS137178.roa
Signing time: Tue 23 Jun 2026 11:00:08 +0000
ROA not before: Tue 23 Jun 2026 10:55:08 +0000
ROA not after: Tue 22 Jun 2027 11:00:08 +0000
asID: 137178
IP address blocks: 51.194.221.0/24 maxlen: 24
51.241.133.0/24 maxlen: 24
188.221.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:52:dc:63:8d:41:16:02:bb:cd:12:43:21:67:e5:d4:b3:e4:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 23 10:55:08 2026 GMT
Not After : Jun 22 11:00:08 2027 GMT
Subject: CN=689D89F7A1F45546174095C39D5AE226E65E1106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:42:6e:ce:13:0e:65:b7:32:83:b5:b5:c2:
77:37:98:aa:70:af:40:8f:6a:a7:b9:4c:1f:4e:03:
f2:46:79:d9:6c:20:f5:e1:ec:1f:ce:14:0e:3b:98:
e1:7e:5f:91:10:d0:14:96:c8:e4:27:cc:03:d0:51:
11:fb:c9:a7:e8:b4:d7:66:77:45:c4:b1:fb:d2:4b:
93:71:ae:ba:44:17:4f:2c:c2:e9:7a:fd:fe:7f:55:
5b:93:d2:5e:39:65:0f:f4:3d:81:a8:05:13:4d:7a:
70:3d:39:d7:41:cd:76:a8:50:f6:ee:ac:bf:00:ca:
a2:d3:ca:87:a6:d4:ed:18:f2:e1:4a:65:f5:f6:db:
73:85:58:cd:c6:2b:6e:ab:3c:41:7f:08:88:6b:f2:
0a:ea:21:e1:17:f8:9d:97:80:c5:f9:b3:4e:9c:b5:
85:ae:b6:4b:08:52:42:58:7a:db:77:94:b1:3d:39:
f0:06:46:12:03:73:fa:1a:50:5a:c8:2d:f7:96:20:
03:23:58:dd:e3:ba:e3:c1:0d:9b:3b:ae:4e:f8:1d:
b9:5e:1b:f4:8b:72:41:20:f3:9f:4b:6b:c2:97:ad:
36:5b:b6:a2:85:59:ea:ab:bc:1a:9d:40:51:d5:09:
9b:d8:6b:1d:13:f4:9f:91:82:b7:0c:20:a0:13:ce:
2c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9D:89:F7:A1:F4:55:46:17:40:95:C3:9D:5A:E2:26:E6:5E:11:06
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS137178.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.221.0/24
51.241.133.0/24
188.221.149.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:fe:52:a8:08:90:69:9d:58:0c:8d:23:15:2b:be:62:e5:ea:
15:31:f5:2b:33:e8:ca:80:8a:f7:0e:fc:58:26:e6:9c:15:8a:
2f:06:21:6d:86:07:94:06:91:ef:c9:9d:8f:5f:68:c2:df:e1:
c7:6a:e1:91:98:36:57:06:67:01:83:1f:45:8d:c5:7c:63:e5:
6e:8f:a1:58:ff:a3:ed:83:7d:1c:9b:9e:23:d5:9d:b7:32:54:
b6:d6:23:0c:06:03:0b:d8:ab:9f:45:e9:d3:4d:fa:72:3d:c2:
4a:4a:fb:c3:db:d5:0b:7b:3e:2b:29:c5:57:04:72:20:e3:ec:
1b:9a:a1:0b:4b:5f:11:ef:d0:33:c2:1f:3b:fb:b9:26:19:f6:
5b:d2:af:a6:2f:d0:2e:b6:2d:bb:3a:db:1e:04:6c:52:27:51:
6a:5a:9a:64:ba:cd:12:55:cc:7d:e4:2e:3f:59:66:47:f3:df:
b6:44:7f:e7:a1:d6:24:aa:60:be:8b:dd:3f:71:92:08:a9:d5:
cd:cc:53:7a:49:63:95:86:5f:86:53:bf:32:55:23:a7:dd:be:
8a:0c:69:37:a0:17:9c:12:89:65:77:a7:0d:db:c7:50:95:1e:
58:e7:9e:ba:57:41:28:ed:ee:20:65:46:de:a2:55:25:9f:2d:
00:93:dc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:42:55 2026 by rpki-client