Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS135391.roa
File: AS135391.roa (raw, json)
Hash identifier: 2dpZhZrvZui8FJDnCoYy2TOqSoZuGIrjRWXtXLJfb8U=
Subject key identifier: D6:82:2E:C5:19:B9:BA:E0:CD:A2:2A:E6:D1:88:F9:B1:A4:CC:91:CE
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 79DB92585F11FC5B43A1549232BA7FAAEAF6E6D8
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS135391.roa
Signing time: Mon 28 Jul 2025 06:04:01 +0000
ROA not before: Mon 28 Jul 2025 05:59:01 +0000
ROA not after: Mon 27 Jul 2026 06:04:01 +0000
asID: 135391
IP address blocks: 146.103.31.0/24 maxlen: 24
147.79.56.0/24 maxlen: 24
155.117.1.0/24 maxlen: 24
162.141.39.0/24 maxlen: 24
162.141.65.0/24 maxlen: 24
162.141.140.0/24 maxlen: 24
162.141.179.0/24 maxlen: 24
162.141.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:db:92:58:5f:11:fc:5b:43:a1:54:92:32:ba:7f:aa:ea:f6:e6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 28 05:59:01 2025 GMT
Not After : Jul 27 06:04:01 2026 GMT
Subject: CN=D6822EC519B9BAE0CDA22AE6D188F9B1A4CC91CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:27:e3:12:af:20:fa:82:36:19:b2:34:5a:fc:
7c:9e:83:56:25:5a:b2:4e:b4:23:27:97:80:d0:63:
29:8c:87:77:00:52:05:be:3c:66:e9:29:23:8b:9b:
e8:c5:13:83:57:06:ee:0f:61:94:c4:79:7f:2c:f9:
0e:07:7c:80:f7:08:c5:8a:4c:29:45:57:65:ea:55:
a9:7f:fc:b4:29:6e:cd:0b:b2:ca:33:b6:81:40:b8:
eb:67:7d:2d:76:5a:b9:be:80:f8:9a:c7:41:83:08:
27:ed:6d:8d:7b:66:0a:51:bb:c6:b2:4c:a9:35:c6:
cd:d8:c5:6c:bb:b9:1e:95:37:fd:cf:69:e1:7a:f8:
3f:d5:7d:c7:b1:ce:1c:85:89:e2:c7:3e:d5:cb:a6:
da:cf:f7:50:aa:ce:46:c8:2f:78:13:53:9b:7d:3c:
24:bf:74:31:a6:f7:2f:3f:0b:25:28:e6:62:4a:92:
e8:e2:8c:9b:b1:bb:cc:a3:6e:f0:61:a5:34:d5:34:
d0:37:0d:03:0d:b7:d9:31:49:b3:d0:44:76:8d:51:
9a:59:8d:a8:d7:98:72:cb:fa:45:3f:6d:33:c7:5d:
6d:32:b2:81:c3:5c:cd:ef:e5:1d:57:83:aa:77:47:
e7:56:10:ac:35:6f:97:b2:33:f4:9c:bb:bf:58:16:
a1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:82:2E:C5:19:B9:BA:E0:CD:A2:2A:E6:D1:88:F9:B1:A4:CC:91:CE
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS135391.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.31.0/24
147.79.56.0/24
155.117.1.0/24
162.141.39.0/24
162.141.65.0/24
162.141.140.0/24
162.141.179.0/24
162.141.183.0/24
Signature Algorithm: sha256WithRSAEncryption
94:8f:0c:85:cc:88:af:ca:46:49:e3:ec:e2:05:ef:58:ea:68:
8f:c0:fe:a6:65:6e:de:e5:37:d3:38:73:92:15:5c:89:1b:b6:
fe:7f:6d:ce:ba:4a:74:d8:b4:de:af:7f:3d:f5:04:c5:b4:d0:
71:a5:e3:a8:ad:66:c9:1b:f4:ca:d1:d6:3e:25:8b:23:47:a2:
af:ed:65:5d:ba:09:11:e8:c5:d4:e9:49:01:45:b2:31:bf:d9:
44:46:f4:18:06:a1:df:9c:03:61:f7:65:2b:91:a7:ec:c2:e3:
db:2e:5c:33:7e:a0:5d:d2:f7:aa:ef:69:d0:93:47:95:6c:45:
ff:59:91:7c:fd:c6:16:a0:c4:c9:4f:a9:68:17:e5:1f:6a:0a:
c8:fe:52:74:9f:ac:5f:50:f2:26:7c:20:6f:62:4e:1c:3f:19:
07:80:93:28:0e:9f:63:ac:f8:bc:4d:55:a9:d7:f4:87:a6:16:
f5:63:07:17:10:f2:1b:87:c9:63:13:97:5a:cc:3f:00:f5:ac:
c2:e3:61:e1:7f:50:49:c0:12:68:ca:65:9e:3c:7c:52:bf:8f:
f2:70:d3:b6:79:3d:01:5e:c4:13:b2:bf:53:fc:e7:d2:ee:b3:
e7:b0:ba:47:89:5b:0e:fa:b6:aa:84:d1:ee:d6:b7:4c:e0:2b:
27:73:f5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:44:13 2025 by rpki-client