Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS137410.roa
File: AS137410.roa (raw, json)
Hash identifier: gmCVObu4lBxgsra7ALpgwOWFk1Am6zvREZzP+l959nU=
Subject key identifier: 42:F3:9F:87:F3:FE:38:89:95:7C:6A:82:84:AB:50:F4:6E:7D:9D:39
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 634CA59E70C2FCC02C24B19F79C84B26F3B32D7B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS137410.roa
Signing time: Mon 10 Aug 2026 06:40:21 +0000
ROA not before: Mon 10 Aug 2026 06:35:21 +0000
ROA not after: Mon 09 Aug 2027 06:40:21 +0000
asID: 137410
IP address blocks: 51.241.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:4c:a5:9e:70:c2:fc:c0:2c:24:b1:9f:79:c8:4b:26:f3:b3:2d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 10 06:35:21 2026 GMT
Not After : Aug 9 06:40:21 2027 GMT
Subject: CN=42F39F87F3FE3889957C6A8284AB50F46E7D9D39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f5:a1:0d:9e:9a:02:62:06:04:00:80:9a:fb:
e2:06:20:ac:a0:00:f2:81:1f:d2:86:06:a0:77:de:
d8:46:82:b4:6c:f7:9e:ad:91:b0:29:9a:09:2b:3e:
4e:48:19:69:51:57:78:a7:ad:39:68:df:03:58:20:
c2:dd:40:d4:c9:95:8c:df:5b:44:7e:52:a4:cd:ae:
01:db:21:00:63:4c:ef:ed:4a:52:84:6a:7b:5e:07:
85:61:b2:f4:9d:e3:a7:bc:9d:11:18:fd:23:e6:91:
15:8d:80:4b:31:c6:79:ee:11:31:66:69:1d:bf:c9:
7e:82:77:12:7c:56:bc:53:fb:85:10:dc:5a:da:18:
f2:8d:40:0a:44:73:a6:1a:c7:da:78:f1:43:3a:f9:
22:30:48:15:da:f2:b7:97:fa:72:48:9d:68:5c:ae:
17:b3:9b:77:17:01:f3:e1:7a:59:1e:2d:e2:b6:ef:
bc:00:ae:0d:8a:a9:4a:c4:d1:aa:15:39:e6:85:2a:
62:9e:c5:b4:08:41:f9:53:12:a0:05:68:23:3c:51:
6b:82:ce:0b:33:b5:fd:68:d0:04:f4:93:a9:32:d5:
fd:8e:53:35:e9:87:4d:1f:59:d3:ce:41:57:ab:3f:
60:c6:89:2c:ed:ba:35:11:b6:3a:00:d6:1d:32:c5:
c6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F3:9F:87:F3:FE:38:89:95:7C:6A:82:84:AB:50:F4:6E:7D:9D:39
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS137410.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.5.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:6b:cb:ee:f3:7e:a8:2b:1b:9b:e2:07:b2:d9:7b:8f:7a:e6:
ba:c2:87:a3:6e:33:71:48:8a:5c:fa:c8:35:67:e2:ca:c9:de:
44:80:bc:ff:58:fb:1a:0c:b1:c5:8b:49:f2:f4:83:d4:7c:e7:
e9:65:b9:14:8b:0c:d6:05:fe:7d:03:7a:e8:85:13:9e:b3:d2:
65:d1:a8:e4:3e:ae:a8:4d:aa:5d:8b:1f:dc:1f:29:a4:be:8a:
49:af:f6:f8:1d:e1:f0:d7:a5:83:13:78:4e:6e:57:e9:05:bf:
56:f7:bd:de:64:34:b3:d3:a6:c7:60:e0:db:96:b9:71:4b:54:
de:7f:65:ec:86:9a:2f:07:7d:a8:95:fc:80:39:f0:fd:70:51:
64:4a:fe:fc:49:e7:73:23:39:9f:f4:1f:bb:d8:fe:14:e6:55:
0c:18:05:fb:2f:56:85:ec:55:85:69:8d:70:ab:a5:ed:0e:3c:
ab:2d:22:ee:80:84:d1:37:a8:05:6a:dd:1d:51:19:2d:6b:6a:
37:54:fe:42:34:27:c0:60:a7:89:3c:32:84:80:b0:6a:ba:1c:
77:79:66:72:b2:fb:e8:98:ef:50:d0:5d:5e:0f:c8:2f:28:85:
77:38:b1:77:d1:16:8f:64:29:bf:04:be:03:68:91:a3:99:0e:
d4:0b:48:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:34 2026 by rpki-client