Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS137409.roa
File: AS137409.roa (raw, json)
Hash identifier: /bOMi1r6dcmG8bFPmNnLRBFJy0YW4F7xRphiSiznCWQ=
Subject key identifier: 6C:E4:71:02:00:57:55:AA:87:F7:C5:01:DE:81:A3:AC:1E:F1:31:8F
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 785CC1BDEF0C70D0F307663D1A7623CC745813A2
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS137409.roa
Signing time: Tue 01 Sep 2026 04:50:21 +0000
ROA not before: Tue 01 Sep 2026 04:45:21 +0000
ROA not after: Tue 31 Aug 2027 04:50:21 +0000
asID: 137409
IP address blocks: 188.220.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:5c:c1:bd:ef:0c:70:d0:f3:07:66:3d:1a:76:23:cc:74:58:13:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 1 04:45:21 2026 GMT
Not After : Aug 31 04:50:21 2027 GMT
Subject: CN=6CE47102005755AA87F7C501DE81A3AC1EF1318F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c1:c5:14:d9:f1:11:0a:ed:e6:00:3f:fd:29:
ef:9a:61:10:c9:c6:fc:36:9b:61:5f:41:67:28:af:
f8:46:08:52:12:f1:77:6d:bc:4c:40:1f:3e:d0:1a:
c5:3a:9b:22:ba:dc:aa:68:bf:f3:1a:6c:4b:2d:33:
ff:33:d0:63:c0:0a:bf:c8:55:7a:37:2a:a3:ed:52:
66:83:95:67:60:29:71:55:8a:97:28:e3:a1:bc:e6:
d5:ee:d5:34:e3:53:fc:29:ab:b4:01:b1:39:c5:9e:
05:70:9d:2c:6d:a9:13:7c:fd:c9:7a:eb:a6:f0:8a:
0f:46:71:39:7b:d3:5b:c2:1c:dc:5d:93:bd:1f:49:
50:94:0b:6a:f6:df:18:0c:b4:3a:5d:2b:50:8d:d6:
a3:29:b0:6d:f4:b2:f5:06:fc:05:3b:cf:32:f8:c6:
b1:3d:67:b2:f8:eb:1e:df:ec:4a:04:70:28:a9:be:
cf:f4:1a:d6:9f:14:fd:b2:43:a7:3c:46:01:69:37:
5d:bf:1a:02:81:5c:d5:a1:f1:f0:fb:f5:34:50:f3:
e2:2f:3d:22:9c:a9:9a:f8:a0:bc:09:ef:10:21:2e:
51:28:c8:b9:2a:48:d7:3e:1c:ff:81:3c:d3:bd:ed:
3b:43:a3:69:b2:b5:e2:58:6d:bf:e8:32:19:c3:58:
96:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E4:71:02:00:57:55:AA:87:F7:C5:01:DE:81:A3:AC:1E:F1:31:8F
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS137409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.164.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:df:0f:54:1a:6c:00:7c:75:08:ec:d9:a8:84:e1:fe:09:c8:
e8:14:73:b7:13:b5:2a:7f:5f:1d:72:1c:d5:e0:d6:fb:7b:e1:
bd:a9:a6:35:35:f7:aa:7a:de:02:e2:b9:48:8e:f5:0e:79:b8:
79:e3:fd:f2:fe:d0:31:2e:7d:2a:1d:5a:4b:e5:3d:5d:c1:2f:
91:4e:9a:b2:21:9f:4d:27:fc:45:9d:b2:04:49:6f:03:bb:eb:
73:a0:f0:df:5e:11:9a:b6:a4:c6:f7:7b:ab:6a:2a:82:65:10:
ee:8f:7c:91:c0:11:1e:41:63:96:fb:5a:01:c8:41:68:6e:9e:
d6:07:84:aa:22:95:ee:10:12:6b:fb:2c:cb:04:75:6d:16:a0:
d6:b2:9f:cd:27:4c:4b:92:6c:37:57:31:ea:7a:15:3a:eb:a5:
73:66:b3:1b:17:8c:05:ea:b0:de:6f:9a:c8:81:e5:bc:ad:fe:
a5:fa:69:e8:a4:84:ae:f8:34:5b:98:fb:f3:db:e7:79:7e:7f:
b7:85:e2:d3:36:51:63:de:3b:d0:e4:1e:73:41:3c:30:67:c1:
bb:61:0c:a0:6c:7d:77:75:38:d4:30:28:a1:ef:4d:b8:5b:7b:
e9:10:e4:9b:90:7b:92:84:63:ab:98:12:11:2e:1d:55:6b:28:
f6:f9:33:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:35 2026 by rpki-client