Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137410.roa
File: AS137410.roa (raw, json)
Hash identifier: fuD8ROa5S58Uub4wq7IwwE+cLLX3LkfnvZb4mid69mg=
Subject key identifier: F1:39:53:27:35:A1:2D:11:AA:D9:A3:18:98:7D:EE:BA:BC:9B:16:C5
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 22CCADA1DB42C1B9D4F72333F214BD0A2C4E67D9
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137410.roa
Signing time: Wed 04 Nov 2026 09:15:06 +0000
ROA not before: Wed 04 Nov 2026 09:10:06 +0000
ROA not after: Wed 03 Nov 2027 09:15:06 +0000
asID: 137410
IP address blocks: 69.90.224.0/24 maxlen: 24
76.74.212.0/24 maxlen: 24
76.74.214.0/24 maxlen: 24
143.14.16.0/24 maxlen: 24
143.14.35.0/24 maxlen: 24
143.14.81.0/24 maxlen: 24
147.79.55.0/24 maxlen: 24
162.141.13.0/24 maxlen: 24
162.141.69.0/24 maxlen: 24
162.141.126.0/24 maxlen: 24
167.148.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:cc:ad:a1:db:42:c1:b9:d4:f7:23:33:f2:14:bd:0a:2c:4e:67:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 4 09:10:06 2026 GMT
Not After : Nov 3 09:15:06 2027 GMT
Subject: CN=F139532735A12D11AAD9A318987DEEBABC9B16C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:15:f2:b9:3e:a6:c2:2f:83:b9:ec:4c:03:8d:
d3:87:27:8d:fc:96:20:61:0c:2e:3a:97:a4:cf:ab:
40:56:e2:8a:c3:36:a3:44:51:01:7c:94:93:a4:a7:
aa:c5:fa:4b:ff:65:25:c1:29:f0:7b:8b:a7:9b:14:
1f:3c:6c:68:0c:05:94:7b:40:60:e8:b5:33:52:52:
35:35:62:93:87:43:ff:ad:76:ee:32:f4:2d:7a:67:
ea:52:6a:92:bb:1f:7b:ef:de:ab:9e:ac:61:43:dc:
89:df:eb:f5:f4:06:14:bb:18:46:1e:29:a2:d3:c4:
1d:4e:23:d6:4c:0b:1a:de:51:72:0e:29:e2:0c:64:
90:45:90:37:ba:cf:62:32:d9:73:f4:bc:89:c6:8e:
43:e9:13:12:5e:4f:6d:27:98:ef:ce:09:28:10:26:
ac:01:2b:41:74:d7:4d:43:81:60:8f:21:39:d5:85:
8e:e8:3f:5f:eb:82:49:bb:15:e6:e3:56:1f:c6:ae:
13:11:7d:b3:d7:98:3c:dc:e5:ba:29:25:06:8e:a6:
22:a0:21:0c:af:3c:06:72:ca:71:ce:fa:27:5f:e1:
db:da:5c:2f:57:d7:eb:e2:08:18:eb:26:68:e2:0c:
60:76:8f:7b:61:91:ae:64:e7:40:5b:b3:03:54:f4:
d7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:39:53:27:35:A1:2D:11:AA:D9:A3:18:98:7D:EE:BA:BC:9B:16:C5
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137410.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.90.224.0/24
76.74.212.0/24
76.74.214.0/24
143.14.16.0/24
143.14.35.0/24
143.14.81.0/24
147.79.55.0/24
162.141.13.0/24
162.141.69.0/24
162.141.126.0/24
167.148.216.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:22:e3:4e:d7:9c:d3:0c:42:88:da:a7:32:48:e6:46:3e:c8:
34:71:42:51:96:c6:7a:70:3d:ca:6b:1a:4f:b7:bb:d6:b2:c8:
de:95:fd:f8:d7:03:cc:2c:5e:28:db:2f:73:72:c6:fa:a4:3e:
b7:c9:bf:ad:a0:c2:0a:08:d3:91:31:7d:06:82:c0:2f:ba:73:
81:2d:9d:81:8e:c2:27:1d:7a:2a:1e:6d:8f:8f:8e:8b:8c:e7:
04:41:5b:a6:17:8e:65:c9:2b:e2:2a:fa:2d:bd:3a:6e:37:9e:
6f:76:b2:8a:eb:84:4c:c0:83:70:25:d5:97:52:ad:34:29:4d:
b4:43:3f:86:93:6f:a5:af:65:04:3c:aa:44:38:65:fd:af:b3:
23:06:f8:21:a1:71:39:bb:01:8f:f1:a4:0b:21:4b:b3:ba:f8:
0b:28:69:3c:d6:dc:2f:85:47:02:36:4b:ce:18:39:31:ad:4e:
44:7e:18:7f:59:44:a8:ec:16:6a:38:c9:a9:b0:2b:6b:41:df:
19:52:2e:85:93:d8:c5:da:7b:6b:fd:be:a1:1a:c6:42:b6:15:
ac:e4:10:a1:e5:20:4c:97:7a:40:14:fb:e6:e5:14:6e:5b:53:
12:12:4b:2a:c8:48:c7:13:19:cc:1f:28:e3:87:52:bf:2e:60:
0c:2f:36:ee
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUIsytodtCwbnU9yMz8hS9CixOZ9kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjExMDQwOTEwMDZaFw0yNzExMDMwOTE1MDZaMDMxMTAvBgNV
BAMTKEYxMzk1MzI3MzVBMTJEMTFBQUQ5QTMxODk4N0RFRUJBQkM5QjE2QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSFfK5PqbCL4O57EwDjdOHJ438
liBhDC46l6TPq0BW4orDNqNEUQF8lJOkp6rF+kv/ZSXBKfB7i6ebFB88bGgMBZR7
QGDotTNSUjU1YpOHQ/+tdu4y9C16Z+pSapK7H3vv3querGFD3Inf6/X0BhS7GEYe
KaLTxB1OI9ZMCxreUXIOKeIMZJBFkDe6z2Iy2XP0vInGjkPpExJeT20nmO/OCSgQ
JqwBK0F0101DgWCPITnVhY7oP1/rgkm7FebjVh/GrhMRfbPXmDzc5bopJQaOpiKg
IQyvPAZyynHO+idf4dvaXC9X1+viCBjrJmjiDGB2j3thka5k50BbswNU9NdzAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQU8TlTJzWhLRGq2aMYmH3uurybFsUwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTM3NDEwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQARVrg
AwQATErUAwQATErWAwQAjw4QAwQAjw4jAwQAjw5RAwQAk083AwQAoo0NAwQAoo1F
AwQAoo1+AwQAp5TYMA0GCSqGSIb3DQEBCwUAA4IBAQBbIuNO15zTDEKI2qcySOZG
Psg0cUJRlsZ6cD3KaxpPt7vWssjelf341wPMLF4o2y9zcsb6pD63yb+toMIKCNOR
MX0GgsAvunOBLZ2BjsInHXoqHm2Pj46LjOcEQVumF45lySviKvotvTpuN55vdrKK
64RMwINwJdWXUq00KU20Qz+Gk2+lr2UEPKpEOGX9r7MjBvghoXE5uwGP8aQLIUuz
uvgLKGk81twvhUcCNkvOGDkxrU5Efhh/WUSo7BZqOMmpsCtrQd8ZUi6Fk9jF2ntr
/b6hGsZCthWs5BCh5SBMl3pAFPvm5RRuW1MSEksqyEjHExnMHyjjh1K/LmAMLzbu
-----END CERTIFICATE-----
Generated at Sun Nov 8 07:17:44 2026 by rpki-client