Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS134926.roa
File: AS134926.roa (raw, json)
Hash identifier: JTJemhD/Z4YY7xIEv4eWSj6yvRcUN8Nv8iO++o7x9Ps=
Subject key identifier: 54:C2:F5:76:2C:E0:04:8F:DF:5D:0A:50:E9:FB:7D:2D:AC:A4:43:16
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 55C15B57EB9F0FFD9A2687721A1D5080D9EE44B1
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS134926.roa
Signing time: Mon 31 Aug 2026 14:17:38 +0000
ROA not before: Mon 31 Aug 2026 14:12:38 +0000
ROA not after: Mon 30 Aug 2027 14:17:38 +0000
asID: 134926
IP address blocks: 178.92.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 14:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:c1:5b:57:eb:9f:0f:fd:9a:26:87:72:1a:1d:50:80:d9:ee:44:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 31 14:12:38 2026 GMT
Not After : Aug 30 14:17:38 2027 GMT
Subject: CN=54C2F5762CE0048FDF5D0A50E9FB7D2DACA44316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ff:ac:d0:fc:58:50:bb:52:9e:64:bf:63:c8:
7c:97:fb:f7:fe:d7:20:1c:9a:cd:78:71:60:ee:bd:
35:e6:3c:c7:21:b6:ef:47:a3:8a:ef:13:ae:05:01:
1a:d8:4b:36:ff:7e:58:6a:c4:6b:1a:ad:0a:48:8c:
cc:a3:47:a1:3b:4f:f4:6c:6d:51:b6:b2:e9:8a:e2:
d6:69:2e:ed:70:81:f0:6d:78:76:a0:44:c2:0a:1d:
b7:9f:bb:70:a2:ec:ed:7e:14:db:d4:08:bf:72:40:
92:74:33:e1:c9:34:7f:6d:16:f7:cd:4a:23:d1:d7:
37:dc:fe:be:d2:be:a7:b7:9f:9c:1c:4f:b6:c1:83:
91:ec:c4:a7:9d:b2:a6:c3:a1:68:24:6b:74:4e:47:
8b:78:91:90:7c:db:d5:0a:89:17:30:62:ee:fb:ff:
f4:94:9f:c9:86:95:06:bd:89:89:29:b4:d1:45:d0:
5a:93:7e:a8:f0:e6:dd:82:5f:0a:3b:d0:46:2d:f3:
a8:a8:42:ef:5c:b9:d8:51:8b:bb:48:04:2b:87:21:
77:d6:97:56:6f:29:b8:5b:7f:94:b6:7b:9e:d3:f4:
3a:b7:c2:96:5e:dd:8c:a2:9c:98:a4:e1:df:87:a9:
26:ba:c5:d4:4b:64:9a:ca:84:e5:00:03:b2:27:bf:
ba:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C2:F5:76:2C:E0:04:8F:DF:5D:0A:50:E9:FB:7D:2D:AC:A4:43:16
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS134926.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.72.0/24
Signature Algorithm: sha256WithRSAEncryption
85:ef:04:52:e5:b2:d4:2e:a2:f8:86:35:ed:73:82:5f:ae:2e:
75:c8:31:a3:d6:dc:3d:60:37:82:d1:e1:7b:d7:ff:1b:06:56:
35:ed:1a:d1:b6:fd:e9:23:33:13:00:15:78:56:ba:db:a9:3b:
98:72:67:fb:bc:34:52:f5:60:55:3b:67:a0:d4:4d:c5:7a:94:
84:b5:44:9b:28:07:c9:64:48:11:cc:9f:42:4c:f2:8f:f6:ef:
d7:dd:84:83:a8:c5:7c:73:d8:3e:74:62:4b:fc:c8:e6:a1:93:
51:03:7f:bb:ae:68:38:f8:5d:12:42:93:26:3d:9b:93:8e:12:
33:48:c8:10:91:81:65:7a:4c:fc:a9:7f:17:3e:76:2c:f9:ab:
92:a6:f9:95:49:78:8e:d2:ea:5b:99:14:63:1b:c1:c8:ca:f1:
f2:d3:c1:34:80:e4:e3:ef:fe:dc:4b:c5:43:5c:51:a5:2c:86:
60:89:33:2f:2a:2b:c2:75:96:e9:2c:83:af:99:84:98:84:ee:
96:3c:e9:bd:51:12:05:a9:d2:1c:4a:e0:e9:22:5e:66:87:30:
d8:12:38:3e:b9:4b:bc:08:df:77:9a:dd:5f:87:b3:42:79:c9:
f6:2b:d0:d3:45:f9:d6:b3:72:50:d7:bd:98:3b:95:fa:b0:84:
bd:07:05:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 16:25:37 2026 by rpki-client