Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS135444.roa
File: AS135444.roa (raw, json)
Hash identifier: UoGkMiFEZQHUU6hIXu2ZR6UBIqI2YcwQJg0oGNC64rk=
Subject key identifier: 37:7D:A0:BE:A9:BF:0B:C3:D6:68:4A:9A:C9:88:97:81:D1:4B:8E:2A
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 233BA17DA6161A6E3EB985319E1154F1524DE68E
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS135444.roa
Signing time: Wed 01 Jul 2026 09:04:15 +0000
ROA not before: Wed 01 Jul 2026 08:59:15 +0000
ROA not after: Wed 30 Jun 2027 09:04:15 +0000
asID: 135444
IP address blocks: 141.11.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 21:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:3b:a1:7d:a6:16:1a:6e:3e:b9:85:31:9e:11:54:f1:52:4d:e6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 1 08:59:15 2026 GMT
Not After : Jun 30 09:04:15 2027 GMT
Subject: CN=377DA0BEA9BF0BC3D6684A9AC9889781D14B8E2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9f:f3:47:73:15:23:91:c6:68:1a:33:d9:7c:
b6:33:9f:1e:68:5a:b7:f9:3d:1e:e6:d7:4b:2a:18:
e3:b0:60:a4:03:4c:5f:b1:10:b8:69:d1:b3:c8:6c:
4e:83:b5:26:b3:16:d1:79:e2:dd:76:cd:68:38:55:
2c:4d:18:4f:09:a6:01:17:de:8a:76:29:47:f9:10:
78:ec:30:6c:de:4a:01:bd:2b:bf:7f:c6:6b:f8:91:
a4:1b:98:d2:50:00:a1:9c:d1:b1:20:a2:46:ee:84:
16:9b:cb:e9:04:81:0b:d8:06:25:bf:66:cd:3c:18:
69:c4:03:2c:c0:ec:5b:e2:03:0e:99:6a:72:5d:27:
02:cd:eb:3f:cf:71:c1:b3:93:10:81:7c:b6:51:fd:
67:83:f2:89:76:dc:b0:a4:22:ab:87:0c:64:2e:eb:
a7:a0:45:1c:9f:39:ba:80:f6:31:a4:6d:61:54:07:
75:ab:c6:40:18:38:d2:cb:85:1a:55:b7:8d:fd:79:
69:7a:26:74:b8:42:74:16:e7:78:6a:e6:7a:1a:14:
a4:e4:8d:2e:97:15:08:d2:f2:6a:b4:e3:c8:a1:9b:
fb:94:40:5a:1e:b0:fe:99:b4:8b:92:a7:9a:dd:81:
23:c7:e3:84:ab:da:b9:e3:f5:18:65:34:b4:39:fa:
34:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7D:A0:BE:A9:BF:0B:C3:D6:68:4A:9A:C9:88:97:81:D1:4B:8E:2A
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS135444.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.78.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:5d:26:ce:cb:fd:1a:e5:0c:ed:30:6f:d3:d4:93:05:b3:19:
ed:a9:26:14:20:f0:dd:4a:ee:61:04:52:b9:1a:26:a1:c0:86:
bb:92:c3:05:06:74:2a:91:5e:64:a1:4a:0c:f7:7d:0e:ca:8b:
43:44:7f:e4:03:96:43:45:1d:aa:43:f1:74:41:06:fd:04:62:
22:35:6b:1b:1c:27:1f:35:b3:cc:b5:d6:47:2f:1d:39:4a:c7:
50:4c:79:04:7f:f2:7f:7e:1b:8e:ba:0b:31:45:ab:48:25:26:
39:05:49:f3:6a:34:e8:24:7d:82:49:40:7f:14:f0:fb:f4:a8:
67:8d:7c:69:ee:4a:67:7d:94:61:47:7b:6c:14:a8:7e:be:a2:
4a:12:e3:34:2d:b3:d7:21:19:de:a9:3b:09:94:72:bf:a8:1e:
76:0d:21:e6:47:62:03:b9:3d:02:01:77:99:d5:a1:5c:de:c7:
24:b6:ea:c3:3e:17:e5:7a:ef:7b:bc:50:44:c2:23:92:0e:ae:
9b:60:b5:92:22:83:03:42:39:c2:65:5b:58:f5:9a:1b:b8:e5:
b2:69:c6:84:f8:51:44:21:85:b4:cf:0a:7f:26:2e:e9:e7:19:
dc:12:9a:38:ea:55:16:2b:d7:0f:1a:01:1c:79:20:2d:18:e2:
59:1f:c8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:06:07 2026 by rpki-client