Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS136809.roa
File: AS136809.roa (raw, json)
Hash identifier: 92hNWi/IVOj77vISEe1s2IEEZ9LQ2nWToa9eyBgMMBM=
Subject key identifier: ED:46:B6:78:33:AE:81:D4:3F:DC:54:D6:F5:51:85:B2:37:A8:C7:D6
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 5DC8A2C51579F720A30FAC1330F09B22FC44CFAE
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS136809.roa
Signing time: Tue 20 Oct 2026 11:07:15 +0000
ROA not before: Tue 20 Oct 2026 11:02:15 +0000
ROA not after: Tue 19 Oct 2027 11:07:15 +0000
asID: 136809
IP address blocks: 90.96.81.0/24 maxlen: 24
143.20.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:c8:a2:c5:15:79:f7:20:a3:0f:ac:13:30:f0:9b:22:fc:44:cf:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 20 11:02:15 2026 GMT
Not After : Oct 19 11:07:15 2027 GMT
Subject: CN=ED46B67833AE81D43FDC54D6F55185B237A8C7D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:17:64:7f:35:cb:de:ce:aa:ae:b0:71:c7:c2:
57:fb:28:09:cf:27:cc:fc:dc:0c:9b:88:7f:0f:b7:
da:70:73:85:4b:63:0a:cb:7d:2f:83:c9:5c:d2:6c:
2a:b7:51:30:b3:de:0e:69:e0:80:52:69:15:04:23:
ee:47:14:5b:5f:26:62:05:85:34:8a:00:11:53:c6:
4f:c9:96:66:39:37:7e:94:34:f9:21:48:e2:1e:28:
2a:db:be:d9:e9:9d:7a:75:4e:4e:07:71:98:ff:5e:
6f:09:f8:79:80:04:a5:54:f2:ac:94:ec:98:16:64:
f9:33:15:ac:5e:e0:b7:7e:c2:4d:8d:8b:81:23:8e:
17:ad:0d:5e:7c:b5:3c:0f:ab:a1:4d:08:38:89:fc:
1d:c2:3b:96:64:61:a8:77:ab:8b:af:aa:8e:0a:b6:
a1:0c:ff:24:c0:50:f7:09:5b:51:71:af:1a:f1:f8:
99:9a:50:ab:c4:21:8b:fe:65:44:e6:7c:c8:8d:a6:
2d:d0:c5:fc:a5:f0:f9:81:39:3a:b9:71:94:ab:46:
3e:ab:9f:6b:ac:52:04:89:5e:c2:fc:ce:be:5c:ee:
d3:66:c3:32:f6:63:d8:1c:8a:ea:b5:46:81:6d:ce:
62:e8:b0:14:b1:4c:75:b7:d3:f6:61:23:8b:17:6a:
b4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:46:B6:78:33:AE:81:D4:3F:DC:54:D6:F5:51:85:B2:37:A8:C7:D6
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS136809.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.96.81.0/24
143.20.35.0/24
Signature Algorithm: sha256WithRSAEncryption
16:f1:ae:81:1e:76:8d:29:16:87:ba:32:fe:ef:b9:6e:9e:98:
3a:da:7b:65:9b:10:b1:f1:53:6d:e6:59:44:e3:3d:68:cd:5a:
e3:ce:9e:df:0e:08:bd:18:1c:61:1d:59:5f:be:f5:f1:22:97:
a1:de:98:c3:2b:07:96:6f:bb:ea:c4:9e:e0:68:35:9b:b5:0b:
2d:f8:48:8a:10:21:63:ad:62:ae:9b:c1:5e:87:e2:e6:b8:60:
33:85:e1:24:69:fb:8b:87:2d:4a:b6:95:da:fa:95:36:19:32:
86:07:3f:fe:d0:3d:19:36:18:d5:60:cb:22:ac:df:26:70:2b:
80:da:80:61:50:e2:e9:93:e1:fe:99:23:28:56:3d:fa:2b:03:
0b:b4:2d:99:07:ce:28:89:f0:2d:dc:2e:0c:cd:4d:ce:98:c3:
e5:24:f9:94:d3:af:3d:34:46:08:2c:d4:56:5e:b0:bc:3a:c5:
4d:29:1a:d1:5c:55:c6:3b:cd:26:25:09:95:0e:a4:30:dd:96:
37:06:22:18:38:48:04:c2:7f:d9:8c:0d:25:0c:42:a2:e2:c4:
dd:62:61:67:45:21:f0:8b:f4:42:ed:a2:65:5b:c4:f1:31:59:
e8:d1:4f:3d:1e:cd:75:7a:fa:48:03:8e:82:a0:1e:fc:30:e5:
df:78:15:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:37:15 2026 by rpki-client