Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136897.roa
File: AS136897.roa (raw, json)
Hash identifier: 9hdR5ELRksvfY9u/27VJ8eRljAsBdcEg92umK++cWh0=
Subject key identifier: C1:F5:AF:60:FC:1C:E0:FD:19:F9:6B:AD:97:5E:5D:E4:04:6C:78:BD
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 45E54A3CF4D3ECAEEE3E5EB4AA6F3CF4FAADA1A6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136897.roa
Signing time: Tue 09 Jun 2026 08:30:54 +0000
ROA not before: Tue 09 Jun 2026 08:25:54 +0000
ROA not after: Tue 08 Jun 2027 08:30:54 +0000
asID: 136897
IP address blocks: 146.103.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:e5:4a:3c:f4:d3:ec:ae:ee:3e:5e:b4:aa:6f:3c:f4:fa:ad:a1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 9 08:25:54 2026 GMT
Not After : Jun 8 08:30:54 2027 GMT
Subject: CN=C1F5AF60FC1CE0FD19F96BAD975E5DE4046C78BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:32:9d:f5:1b:0d:e8:41:21:25:24:54:9e:
74:9f:b8:94:51:52:4e:4a:85:4a:ff:d8:3e:b9:ae:
69:1f:9d:bb:c1:97:12:54:ab:06:7c:98:77:68:41:
26:02:79:8c:c1:28:8b:5c:c9:94:c3:e7:00:8a:a8:
6e:5c:54:1b:78:78:38:c3:7c:91:d2:71:66:80:e5:
67:a5:db:7e:82:c6:63:02:9b:14:50:5d:2a:49:e8:
cc:2e:0e:cf:3a:e7:76:25:23:7e:90:2c:df:45:48:
f3:e1:77:55:dc:0d:61:4c:65:f0:eb:55:4e:a8:f3:
3e:5b:99:c0:d9:78:91:8e:12:2f:dc:19:44:36:6a:
f7:e5:44:31:72:04:76:60:78:01:0d:52:e8:df:02:
5d:72:08:0b:4f:16:e8:b6:b3:13:30:47:bb:b5:c2:
db:7c:b9:e7:0c:0d:c3:b2:d5:35:63:6e:b3:c4:7e:
1d:15:b2:cb:f8:4e:d0:a1:8d:45:71:d4:82:75:c2:
d1:37:ff:76:db:4d:ae:8b:32:c0:ca:15:c3:13:f0:
ea:8a:eb:fc:56:67:03:84:29:66:ff:7b:31:50:57:
3d:4a:60:9e:41:de:09:7d:09:bf:d1:99:04:46:4c:
46:bc:fb:1a:ab:f5:32:12:69:ca:03:69:fc:f2:25:
ec:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F5:AF:60:FC:1C:E0:FD:19:F9:6B:AD:97:5E:5D:E4:04:6C:78:BD
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136897.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.11.0/24
Signature Algorithm: sha256WithRSAEncryption
94:1c:51:19:b6:e6:05:d4:59:3e:a9:52:11:ea:63:97:f7:f5:
91:f3:4e:d3:c8:b4:45:2c:04:fd:2d:30:1e:4c:d9:36:ef:51:
cd:bd:87:ce:66:a7:18:39:67:15:3d:50:43:f5:25:f4:22:b6:
6f:c8:2c:49:36:29:9a:91:c6:65:f4:2d:c3:1c:a2:99:1b:94:
08:bf:e4:85:d9:08:88:4e:be:bf:30:2f:4f:e1:d6:34:e0:b2:
13:87:77:5f:b4:c5:54:55:17:fa:d6:28:36:39:e5:3e:9f:fe:
e2:fb:e8:76:80:c6:eb:55:58:92:37:5a:1f:f8:3b:8f:a0:25:
cd:09:a9:5f:5f:e8:ab:37:7f:1c:56:b9:15:3e:12:c9:3a:09:
af:f3:6a:68:04:97:f7:56:f5:41:9b:2c:86:08:e4:f2:b8:7a:
78:b8:1e:24:9d:3c:cf:6e:0f:a5:a1:c9:93:a2:2a:0c:57:64:
71:0f:fb:96:3c:25:82:85:fd:47:3f:32:fa:1c:90:76:84:d0:
d5:8b:16:0e:74:87:20:7f:b1:04:05:e8:d8:d2:50:f7:26:87:
3e:98:4a:a5:46:ff:59:79:51:bb:2d:52:31:51:c8:46:be:dd:
25:43:f1:6b:ef:6c:bd:1c:37:a1:c9:fc:d2:4c:4d:68:a5:80:
c1:d2:5a:c2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUReVKPPTT7K7uPl60qm889PqtoaYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA2MDkwODI1NTRaFw0yNzA2MDgwODMwNTRaMDMxMTAvBgNV
BAMTKEMxRjVBRjYwRkMxQ0UwRkQxOUY5NkJBRDk3NUU1REU0MDQ2Qzc4QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ojKd9RsN6EEhJSRUnnSfuJRR
Uk5KhUr/2D65rmkfnbvBlxJUqwZ8mHdoQSYCeYzBKItcyZTD5wCKqG5cVBt4eDjD
fJHScWaA5Wel236CxmMCmxRQXSpJ6MwuDs8653YlI36QLN9FSPPhd1XcDWFMZfDr
VU6o8z5bmcDZeJGOEi/cGUQ2avflRDFyBHZgeAENUujfAl1yCAtPFui2sxMwR7u1
wtt8uecMDcOy1TVjbrPEfh0Vssv4TtChjUVx1IJ1wtE3/3bbTa6LMsDKFcMT8OqK
6/xWZwOEKWb/ezFQVz1KYJ5B3gl9Cb/RmQRGTEa8+xqr9TISacoDafzyJezZAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUwfWvYPwc4P0Z+Wutl15d5ARseL0wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTM2ODk3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkmcL
MA0GCSqGSIb3DQEBCwUAA4IBAQCUHFEZtuYF1Fk+qVIR6mOX9/WR807TyLRFLAT9
LTAeTNk271HNvYfOZqcYOWcVPVBD9SX0IrZvyCxJNimakcZl9C3DHKKZG5QIv+SF
2QiITr6/MC9P4dY04LITh3dftMVUVRf61ig2OeU+n/7i++h2gMbrVViSN1of+DuP
oCXNCalfX+irN38cVrkVPhLJOgmv82poBJf3VvVBmyyGCOTyuHp4uB4knTzPbg+l
ocmToioMV2RxD/uWPCWChf1HPzL6HJB2hNDVixYOdIcgf7EEBejY0lD3Joc+mEql
Rv9ZeVG7LVIxUchGvt0lQ/Fr72y9HDehyfzSTE1opYDB0lrC
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:37:52 2026 by rpki-client