Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136725.roa
File: AS136725.roa (raw, json)
Hash identifier: B8nWtwgEP3kb957urvfKKiU4IXhkQe6rwm+mJqU3ryQ=
Subject key identifier: E9:81:6D:D2:0E:20:C0:A7:09:80:4E:C6:5C:7B:AC:0E:EE:A8:73:B0
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 53EB3EF777AD8E9D63AEA157538B7DA4A59C077F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136725.roa
Signing time: Sat 25 Jul 2026 05:18:11 +0000
ROA not before: Sat 25 Jul 2026 05:13:11 +0000
ROA not after: Sat 24 Jul 2027 05:18:11 +0000
asID: 136725
IP address blocks: 155.117.138.0/24 maxlen: 24
162.141.140.0/24 maxlen: 24
168.222.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:eb:3e:f7:77:ad:8e:9d:63:ae:a1:57:53:8b:7d:a4:a5:9c:07:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 25 05:13:11 2026 GMT
Not After : Jul 24 05:18:11 2027 GMT
Subject: CN=E9816DD20E20C0A709804EC65C7BAC0EEEA873B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:07:42:75:40:c0:53:b7:33:64:e9:f5:bc:36:
c9:2f:38:4e:7a:e4:c4:3e:f5:77:46:5f:2c:b3:70:
3f:af:cb:49:e3:db:13:76:38:80:71:ee:3e:38:49:
13:1d:1b:0e:8a:7d:48:2d:96:e4:9e:e7:49:de:b7:
35:ca:65:74:0c:42:0d:b8:92:72:40:50:4e:79:94:
f5:6d:87:dd:e6:b0:d1:fe:26:28:39:41:6b:f6:13:
19:8f:fe:0e:76:5a:d2:51:47:50:10:fb:d3:6c:27:
be:e3:2a:fb:6f:20:39:c3:08:b5:47:29:ac:7a:a5:
42:f0:57:03:7f:4c:59:71:6e:ce:d8:1a:81:7e:2e:
a0:47:31:50:8c:ec:a8:bc:34:50:83:50:c3:58:53:
df:f8:9f:c9:34:83:9f:06:c1:a6:52:a0:85:a4:de:
76:56:69:ab:d5:5a:9a:0b:8a:a2:c4:52:0e:0b:21:
e6:59:18:f2:9a:47:bd:ae:75:5a:02:f6:7e:bd:15:
04:f3:61:98:ab:d0:4c:65:b3:21:71:e1:37:d5:f6:
a5:ee:b3:b0:42:9e:55:be:cb:c9:74:45:40:54:75:
5c:ca:b8:9a:0b:fe:1d:4a:55:0b:0e:60:7e:fa:0f:
86:03:26:bb:e2:ad:30:9a:0a:7e:b8:df:83:38:aa:
6e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:81:6D:D2:0E:20:C0:A7:09:80:4E:C6:5C:7B:AC:0E:EE:A8:73:B0
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136725.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.138.0/24
162.141.140.0/24
168.222.18.0/24
Signature Algorithm: sha256WithRSAEncryption
24:e2:71:5f:c8:5b:e9:e6:02:8c:eb:ca:22:b0:b9:28:44:c5:
de:d3:84:ef:f9:46:0d:2f:72:a5:ac:ad:d6:13:81:1d:11:d8:
33:f7:f3:72:a1:da:25:fa:06:74:f5:cb:c8:1e:00:27:b3:b7:
09:4d:70:8f:72:6a:fd:3a:4f:2d:e0:23:08:be:70:40:3f:93:
e7:f3:82:ed:5e:bd:cc:03:54:39:b1:ea:9b:01:03:aa:bb:9e:
bf:e4:20:db:32:d2:e1:d6:9c:5c:7f:69:6f:cd:d8:4d:39:38:
83:8d:eb:dc:36:d2:df:cd:1d:93:4f:5f:50:c2:76:e9:e7:41:
65:27:fd:a6:05:98:45:3e:99:c6:d0:03:85:0a:0e:42:90:40:
49:1c:71:3a:a5:99:07:95:20:29:5a:71:24:7b:17:5d:f0:64:
bc:fb:0d:63:85:51:d4:ef:a9:fb:32:a9:f1:57:8d:42:63:c9:
8e:b7:d7:ad:2f:ee:77:ef:f6:ea:36:21:81:3e:32:de:f3:e6:
f2:dc:88:e6:68:b3:5a:25:85:38:9c:56:b4:96:b9:5c:55:64:
99:84:67:ef:b1:03:60:4e:c5:43:4b:18:cf:45:1b:e9:f2:9a:
be:88:e7:8e:58:16:fd:e5:aa:2d:aa:39:4e:da:d2:ff:b1:58:
23:a1:43:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:00:08 2026 by rpki-client