Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS133150.roa
File: AS133150.roa (raw, json)
Hash identifier: CvER3dCYK1mcWjjPMo+6dNWn65hHTfAT1RsRw34m4R8=
Subject key identifier: A4:00:6A:82:74:0A:66:FB:BB:53:69:93:18:51:73:26:36:29:89:83
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5DE952A6ED0BD7F8E64B5D8C9F406868F7073185
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS133150.roa
Signing time: Sat 04 Jul 2026 19:28:03 +0000
ROA not before: Sat 04 Jul 2026 19:23:03 +0000
ROA not after: Sat 03 Jul 2027 19:28:03 +0000
asID: 133150
IP address blocks: 95.135.173.0/24 maxlen: 24
178.95.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:e9:52:a6:ed:0b:d7:f8:e6:4b:5d:8c:9f:40:68:68:f7:07:31:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 4 19:23:03 2026 GMT
Not After : Jul 3 19:28:03 2027 GMT
Subject: CN=A4006A82740A66FBBB5369931851732636298983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:80:17:fd:a6:f2:e3:e7:34:f8:6e:16:cf:60:
7f:b6:9a:8e:3b:0d:74:cd:76:67:1d:9e:a2:c3:6b:
f4:63:6d:b1:51:56:57:bd:99:ec:ff:4c:47:fa:58:
39:55:0e:db:83:a9:43:2a:be:55:d4:70:84:a6:a4:
53:7b:f4:3b:dd:e7:76:19:ac:a0:7e:ee:1d:81:a0:
d1:a6:0a:f8:0b:f6:76:48:16:f8:12:5d:a6:94:23:
c7:24:ea:2c:a5:a3:31:c7:f1:11:ed:49:44:a5:55:
8f:99:b8:03:7b:c6:23:71:75:50:12:41:08:90:90:
2f:f7:d2:66:66:3c:8c:8a:cb:67:a0:81:24:75:17:
fb:50:b9:c8:f2:a5:94:1b:ee:34:89:2f:fe:c3:41:
86:70:bb:0f:15:24:22:90:be:5f:a0:cb:8a:d9:89:
ed:23:40:d3:b9:66:a5:b1:1c:c2:da:4a:95:69:76:
2b:26:9a:b1:fb:dd:ca:64:30:bf:03:57:cb:f1:5a:
c6:1d:d9:5a:e1:a8:e3:84:02:60:d4:93:7e:c2:16:
7f:78:12:c1:4b:f9:37:44:cc:8a:5d:b5:4b:63:89:
e4:7b:07:d2:05:c5:b4:21:ec:07:52:c2:0c:59:d8:
54:16:de:af:03:60:4b:39:1e:17:3c:ae:43:ca:d5:
d5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:00:6A:82:74:0A:66:FB:BB:53:69:93:18:51:73:26:36:29:89:83
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS133150.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.173.0/24
178.95.81.0/24
Signature Algorithm: sha256WithRSAEncryption
09:b7:ab:2f:34:81:0b:a2:67:68:e5:e7:42:b0:ee:b6:12:b9:
57:62:cc:5e:95:c6:ff:ca:be:15:4f:c9:04:e2:8d:4b:16:ee:
31:8d:c4:f5:bb:fb:f3:9b:d9:dd:da:27:2b:5c:8b:2e:b4:d8:
c9:bb:f4:35:b2:96:43:9b:47:b6:8e:89:5d:aa:04:2f:2d:2f:
00:41:b1:16:b3:d7:37:22:6f:bb:38:94:ac:5e:00:a0:04:be:
29:2b:f0:40:4b:43:2b:56:7e:5f:03:f9:86:1c:b3:71:ec:8e:
30:40:16:45:f5:27:8f:83:d6:31:d4:87:2b:ce:3a:bf:8a:7e:
bf:5a:cc:16:f6:40:2d:52:9c:97:f0:8b:dc:fe:51:00:ea:4c:
fe:23:dd:20:67:7f:ae:06:a0:95:00:3a:4e:e8:72:21:81:18:
73:a2:33:d1:03:80:99:1e:8b:93:bc:d3:a8:da:26:3e:cd:0f:
45:c2:01:64:6f:bc:7f:cf:2f:d9:85:ba:23:ff:c5:9c:56:d8:
90:86:45:5b:82:02:dc:9b:4d:bb:53:0c:20:ae:c4:11:d5:df:
4a:8d:cc:9c:56:c7:18:99:a2:1e:6c:d1:97:b4:28:31:85:3b:
08:33:91:a7:46:5b:d9:64:c0:5c:d2:f6:1a:cf:1d:78:8e:8d:
81:42:1c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 02:55:28 2026 by rpki-client