Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS137517.roa
File: AS137517.roa (raw, json)
Hash identifier: gzDNvba4MMlpSy+xqlRBeupS97a0eS95w+bNmPGdCIc=
Subject key identifier: 5E:D1:97:CD:9F:DC:BA:5C:B4:68:57:F8:90:43:22:00:9E:91:0E:49
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 06EC6C04EFF40A9360CF22BB48721E0F2C834D14
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS137517.roa
Signing time: Fri 15 May 2026 01:42:30 +0000
ROA not before: Fri 15 May 2026 01:37:30 +0000
ROA not after: Fri 14 May 2027 01:42:30 +0000
asID: 137517
IP address blocks: 141.11.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:ec:6c:04:ef:f4:0a:93:60:cf:22:bb:48:72:1e:0f:2c:83:4d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: May 15 01:37:30 2026 GMT
Not After : May 14 01:42:30 2027 GMT
Subject: CN=5ED197CD9FDCBA5CB46857F8904322009E910E49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ea:f7:f9:e8:c7:a5:5d:97:94:f9:d8:5b:49:
e7:0a:19:2c:74:48:77:7a:8e:29:da:3d:d7:b1:98:
60:37:d0:29:0c:c3:f8:31:8e:d8:cb:0e:65:a8:25:
11:c4:b5:a7:ea:dc:a7:60:5e:c0:44:d0:55:69:13:
0f:73:96:61:a8:5d:a5:3e:e1:2c:8e:fc:6c:d6:1b:
52:00:3e:b3:ef:f5:10:a6:e9:0d:ec:cb:f2:d5:86:
78:f0:12:09:bb:b2:2b:93:f5:27:5d:8b:46:d5:6a:
b3:a1:80:77:57:89:fe:9b:3f:f2:64:25:6a:d2:ac:
16:a8:13:02:20:37:34:52:2e:f9:9c:01:27:7b:8b:
5f:ca:b2:10:8d:4d:d9:9c:40:6f:62:01:3e:7c:50:
41:cc:bd:a9:a4:0a:72:a7:90:a8:32:14:59:4b:99:
50:57:a2:a2:37:91:13:bb:d2:d5:47:b7:a4:30:fb:
41:8f:1a:49:8b:50:90:8b:ac:81:b5:db:f3:84:dc:
0e:bc:3e:7d:52:ec:bf:80:1a:b0:e6:36:82:80:5c:
a2:0e:cd:42:94:a4:2e:d6:ff:81:40:f1:02:8f:b6:
db:47:5b:b6:bf:6c:24:74:2c:30:50:f8:83:ed:a1:
4d:39:e3:7b:b2:a4:09:f1:3f:02:93:cc:39:f5:61:
0d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D1:97:CD:9F:DC:BA:5C:B4:68:57:F8:90:43:22:00:9E:91:0E:49
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS137517.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.124.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:df:e5:9d:3b:b5:d2:c7:91:5d:ba:bb:b3:87:df:68:f7:ad:
25:4b:ae:e8:ae:3c:07:26:51:91:c5:ed:e6:42:b4:b7:c4:16:
ec:81:d9:8f:c7:46:15:a6:3d:f2:39:96:72:f3:74:a7:42:1d:
41:45:29:cf:f0:5e:5c:d5:ae:4a:03:29:00:33:ce:d8:75:a6:
5f:19:a2:1f:26:b8:b6:90:49:90:ac:2c:7c:01:90:a7:bf:96:
15:65:40:01:28:f2:fa:8c:7c:80:d4:6e:ad:7a:82:91:ef:0a:
9c:e9:ff:f0:cb:f3:ab:29:44:94:ce:68:8c:42:be:5f:a0:01:
36:c2:5c:e5:fe:d5:eb:ce:7e:36:a2:ac:25:c5:a4:37:33:77:
fc:a9:af:3e:e9:29:6a:23:f9:85:2f:08:61:90:c6:b2:22:d0:
d5:92:8b:6a:30:41:8d:3c:75:e3:39:b3:9c:d8:73:aa:d1:54:
f9:4d:e2:73:9e:63:b4:e9:19:dc:fb:77:e3:5e:b7:a9:01:22:
96:e7:bc:89:18:be:b2:77:1a:92:5d:c4:78:b2:80:d9:e5:90:
40:ed:65:48:c0:5a:f3:b2:9f:ff:34:d5:bf:38:db:67:e2:de:
d2:03:95:48:5d:2b:04:1d:af:46:56:28:08:d1:fa:a4:ec:ff:
c7:18:ad:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 23:33:56 2026 by rpki-client