Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS136510.roa
File: AS136510.roa (raw, json)
Hash identifier: 446mfNGsqDDUdt5zfbDYiY0efC3ymrHCXy7dcbAx3ow=
Subject key identifier: 37:1D:39:D0:44:8B:10:A1:B6:59:52:F9:34:C8:4E:F1:D3:7E:5F:1D
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 69D910AB02FE26D39D217D19249DD2FC0F26CD40
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS136510.roa
Signing time: Mon 22 Jun 2026 10:47:48 +0000
ROA not before: Mon 22 Jun 2026 10:42:48 +0000
ROA not after: Mon 21 Jun 2027 10:47:48 +0000
asID: 136510
IP address blocks: 141.11.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 21:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:d9:10:ab:02:fe:26:d3:9d:21:7d:19:24:9d:d2:fc:0f:26:cd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 22 10:42:48 2026 GMT
Not After : Jun 21 10:47:48 2027 GMT
Subject: CN=371D39D0448B10A1B65952F934C84EF1D37E5F1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:db:48:ea:77:7d:52:c8:7c:77:e9:bd:ff:
81:dd:06:21:e2:ec:b0:45:54:66:22:37:f6:2b:60:
69:b7:36:55:07:41:3c:60:dc:26:f1:15:52:ec:03:
75:12:d2:fa:e9:7d:66:48:9f:21:83:6d:09:7c:6e:
c3:f8:79:27:f2:bb:a6:41:a9:fc:fc:ac:77:fa:ef:
60:17:fe:33:04:19:8a:4b:c8:d5:dd:e3:e6:b5:e9:
72:16:d3:f0:52:b2:a4:88:49:3e:4b:65:c8:78:d9:
85:ed:3a:ad:3e:39:8d:4f:58:de:b3:d5:31:5f:fd:
fa:88:35:5e:f5:27:b2:5c:d9:52:4a:09:3a:ef:b8:
59:00:7e:45:c3:11:d4:e0:07:f2:15:78:1c:60:70:
ed:49:85:8d:5c:d0:e8:6e:bf:b8:4b:23:d2:43:a1:
21:20:18:e1:f8:34:84:3a:5b:2c:cf:1a:87:38:fc:
6b:d9:77:f9:94:a9:ac:79:a2:2b:ef:26:f6:e2:fa:
a0:88:29:ab:52:d3:c1:25:25:f3:39:1a:65:e3:59:
06:ae:4a:dd:e5:cf:a2:d2:8e:1b:c4:bd:87:e6:37:
f1:bf:b5:6f:36:ed:e7:a3:e0:fb:3f:38:9d:10:4e:
80:86:53:fc:23:89:96:58:90:e3:cd:67:b1:52:15:
54:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1D:39:D0:44:8B:10:A1:B6:59:52:F9:34:C8:4E:F1:D3:7E:5F:1D
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS136510.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.43.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:55:6f:16:65:8d:cd:30:18:25:6d:89:3b:cd:b2:08:de:ac:
b8:fd:a4:a5:04:00:32:47:52:7c:f9:4c:90:b7:fd:01:a5:de:
21:84:ec:aa:5c:ed:09:aa:04:70:87:49:0f:72:3d:78:7d:10:
8c:e4:87:97:b4:ee:e8:45:2c:86:ec:f7:ff:09:30:e2:c1:34:
6d:fb:bc:d4:2c:bb:69:d2:51:92:6d:f1:bc:29:27:70:6b:f7:
cc:b4:85:bf:4e:ae:9b:73:8e:74:5c:7c:bd:5a:fe:7c:e4:4f:
64:27:3f:ff:60:42:98:3a:d7:ab:b6:46:cd:28:21:38:59:b1:
14:93:8c:b4:68:a4:f7:b7:80:94:0e:78:56:f8:e7:29:e6:fe:
b8:97:e6:7d:41:04:bf:04:33:80:7c:48:8a:c3:01:0d:66:3f:
22:56:ed:25:f7:09:e7:25:25:b5:d5:26:da:e9:50:54:03:4e:
29:92:16:ca:24:21:08:30:cc:ca:96:f4:3b:ed:1e:5e:db:7e:
bc:03:0a:91:a5:44:0b:02:3b:b1:4c:45:8d:54:b3:a4:d6:6e:
31:d5:c0:00:55:80:b4:ef:e3:f7:4b:98:c5:b8:86:ed:74:1e:
c7:4f:20:63:32:25:bd:d8:64:33:4d:c6:85:26:e0:d3:23:88:
15:08:20:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:06:38 2026 by rpki-client