Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS135636.roa
File: AS135636.roa (raw, json)
Hash identifier: uZahRcllwJT5Ycjwo3gAcMBgcIwxR2mNX4YpkMPfSL4=
Subject key identifier: 46:21:8F:EC:73:D3:ED:86:A0:88:CE:FC:4D:74:B0:B2:0E:0A:6D:BC
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0E08DF17B6D44E4D388CD9C7FC3191AA323CC30F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS135636.roa
Signing time: Mon 31 Aug 2026 14:49:30 +0000
ROA not before: Mon 31 Aug 2026 14:44:30 +0000
ROA not after: Mon 30 Aug 2027 14:49:30 +0000
asID: 135636
IP address blocks: 178.92.64.0/24 maxlen: 24
178.93.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:08:df:17:b6:d4:4e:4d:38:8c:d9:c7:fc:31:91:aa:32:3c:c3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 31 14:44:30 2026 GMT
Not After : Aug 30 14:49:30 2027 GMT
Subject: CN=46218FEC73D3ED86A088CEFC4D74B0B20E0A6DBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:31:bf:d6:ed:16:99:da:c0:f8:08:29:3c:5b:
48:1b:1e:39:9b:8f:59:29:88:02:eb:c7:44:12:63:
74:a1:48:2d:44:dc:e9:7c:4f:c3:a6:75:19:78:16:
3b:95:f2:a3:0f:c5:f7:ee:fd:93:95:34:e6:1d:50:
13:03:a6:56:ed:f2:23:92:0d:e5:96:06:8a:c0:9d:
6b:5b:64:76:8e:5d:74:f0:08:6b:fa:ac:87:51:d5:
bd:1a:73:36:e1:ea:44:64:b3:5f:75:77:f9:94:a5:
03:5c:5f:22:5e:32:20:65:68:4f:5d:8c:3e:2d:a7:
c0:12:e0:27:fd:e0:f6:b0:83:8b:f7:65:39:be:fe:
5b:fc:e9:92:02:f8:cb:a4:dc:92:c9:62:3d:81:09:
0a:6a:e5:a8:bc:78:5c:47:e6:aa:1b:da:7b:42:99:
72:33:0e:04:41:d5:7f:a7:a8:1e:51:b5:1c:60:7c:
ab:5c:6b:26:f9:c7:9a:d8:ae:92:3d:53:4a:60:d5:
f2:96:63:32:4f:61:bf:ac:5a:ec:cb:0e:6e:22:9d:
a3:ac:42:61:39:68:88:90:a1:57:fe:5b:7d:b1:45:
97:2e:7b:6a:99:d8:85:3b:e1:a4:0b:fc:13:35:fd:
b1:6f:b7:2d:05:ea:5a:a0:80:1c:2a:b4:9f:33:46:
72:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:21:8F:EC:73:D3:ED:86:A0:88:CE:FC:4D:74:B0:B2:0E:0A:6D:BC
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS135636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.64.0/24
178.93.21.0/24
Signature Algorithm: sha256WithRSAEncryption
30:9f:57:93:1b:c4:cf:b3:81:c9:33:11:15:94:a3:6e:e9:10:
47:eb:b6:aa:98:74:c8:f9:e5:35:63:b3:93:19:61:90:d9:d1:
9d:ad:b1:43:f7:c6:5e:2f:1a:7e:04:15:ce:ca:92:8a:fb:42:
e6:a0:16:7f:13:ad:49:cb:6d:6d:bb:fb:5a:fd:9a:40:c7:7a:
5e:4c:38:42:4b:41:cf:d4:0b:15:0c:62:c7:4a:89:96:13:2e:
c4:35:8b:bd:ef:74:0a:6d:f3:30:38:45:a9:49:3d:a9:01:e8:
2d:70:c7:08:78:77:3e:13:1f:da:2e:23:dd:da:ca:7e:c1:21:
f5:43:6a:79:b1:8b:1c:68:96:4a:d9:bf:ca:c8:56:d3:70:28:
8c:d2:09:0a:34:80:02:b6:c7:ac:14:bf:cd:c3:ab:bb:05:8e:
3d:cd:31:75:33:93:54:9c:cd:73:db:d0:e8:d2:af:93:67:e9:
95:84:7f:ec:24:d8:d7:a1:84:72:f5:1f:65:46:9e:1a:1d:85:
d9:ed:77:96:c6:e8:f5:5a:06:f0:25:43:f6:2e:8c:f6:aa:95:
77:d8:f9:00:33:35:15:da:d1:ea:4b:f4:08:25:50:2f:44:d8:
df:0f:27:1b:16:85:32:07:01:9c:8e:cd:8c:5a:35:4e:63:0f:
11:67:50:31
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUDgjfF7bUTk04jNnH/DGRqjI8ww8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA4MzExNDQ0MzBaFw0yNzA4MzAxNDQ5MzBaMDMxMTAvBgNV
BAMTKDQ2MjE4RkVDNzNEM0VEODZBMDg4Q0VGQzRENzRCMEIyMEUwQTZEQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4Mb/W7RaZ2sD4CCk8W0gbHjmb
j1kpiALrx0QSY3ShSC1E3Ol8T8OmdRl4FjuV8qMPxffu/ZOVNOYdUBMDplbt8iOS
DeWWBorAnWtbZHaOXXTwCGv6rIdR1b0aczbh6kRks191d/mUpQNcXyJeMiBlaE9d
jD4tp8AS4Cf94Pawg4v3ZTm+/lv86ZIC+Muk3JLJYj2BCQpq5ai8eFxH5qob2ntC
mXIzDgRB1X+nqB5RtRxgfKtcayb5x5rYrpI9U0pg1fKWYzJPYb+sWuzLDm4inaOs
QmE5aIiQoVf+W32xRZcue2qZ2IU74aQL/BM1/bFvty0F6lqggBwqtJ8zRnKRAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQURiGP7HPT7YagiM78TXSwsg4KbbwwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTM1NjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAslxA
AwQAsl0VMA0GCSqGSIb3DQEBCwUAA4IBAQAwn1eTG8TPs4HJMxEVlKNu6RBH67aq
mHTI+eU1Y7OTGWGQ2dGdrbFD98ZeLxp+BBXOypKK+0LmoBZ/E61Jy21tu/ta/ZpA
x3peTDhCS0HP1AsVDGLHSomWEy7ENYu973QKbfMwOEWpST2pAegtcMcIeHc+Ex/a
LiPd2sp+wSH1Q2p5sYscaJZK2b/KyFbTcCiM0gkKNIACtsesFL/Nw6u7BY49zTF1
M5NUnM1z29Do0q+TZ+mVhH/sJNjXoYRy9R9lRp4aHYXZ7XeWxuj1WgbwJUP2Loz2
qpV32PkAMzUV2tHqS/QIJVAvRNjfDycbFoUyBwGcjs2MWjVOYw8RZ1Ax
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:59:54 2026 by rpki-client