Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS136725.roa
File: AS136725.roa (raw, json)
Hash identifier: WZ4AvosT8gdji8l6tC26ep5Hpfq6nkA4zj7eeW+TUmE=
Subject key identifier: 65:09:98:1F:2B:BF:D1:4E:8B:AE:B7:47:0B:53:DC:F2:24:62:AA:93
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 724A2EE5B4C3D50B088183CE97D375DC36AB69A9
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS136725.roa
Signing time: Sat 25 Jul 2026 05:18:12 +0000
ROA not before: Sat 25 Jul 2026 05:13:12 +0000
ROA not after: Sat 24 Jul 2027 05:18:12 +0000
asID: 136725
IP address blocks: 82.139.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 04:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:4a:2e:e5:b4:c3:d5:0b:08:81:83:ce:97:d3:75:dc:36:ab:69:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Jul 25 05:13:12 2026 GMT
Not After : Jul 24 05:18:12 2027 GMT
Subject: CN=6509981F2BBFD14E8BAEB7470B53DCF22462AA93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:30:ef:4d:1c:5e:7f:c1:69:f6:ac:70:44:43:
cc:ed:97:63:a3:ed:bf:29:e1:ac:1d:ab:c7:79:b6:
b2:97:36:cb:45:27:3f:f7:98:1f:58:5b:9b:5a:6a:
fa:15:a0:44:ef:ca:f7:5f:b3:85:11:80:31:60:fb:
2d:3a:63:2c:fe:1b:90:c0:69:6c:1e:ca:a1:52:47:
33:c7:91:c0:51:b5:0b:33:90:ec:cb:1b:a6:ba:41:
77:73:43:ab:e7:f4:a2:b3:53:25:bc:22:7b:52:eb:
09:5a:80:ed:7f:89:de:10:d2:41:36:98:f8:23:ab:
da:99:58:aa:8f:70:00:3c:fc:2e:d9:03:39:67:2f:
21:1d:7f:45:21:34:0a:ff:76:a5:67:21:8a:2b:3f:
a3:86:d5:2b:d6:c9:ee:f6:8c:89:e5:25:01:38:30:
b5:0d:78:d3:07:3a:c7:3b:8b:26:69:69:11:ff:56:
40:c4:23:20:1a:5e:9c:2f:2d:20:50:3f:b8:d3:88:
43:4e:ca:7f:43:f2:dc:1f:92:1d:3a:a3:40:6e:86:
20:2e:f4:62:17:90:e2:ad:4c:3f:1e:88:ae:f4:54:
af:dd:d5:16:0e:42:2c:6f:c1:72:86:2a:10:6a:f5:
d2:55:61:2b:74:ae:a5:07:04:8d:6e:3b:fb:29:94:
75:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:09:98:1F:2B:BF:D1:4E:8B:AE:B7:47:0B:53:DC:F2:24:62:AA:93
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS136725.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.229.0/24
Signature Algorithm: sha256WithRSAEncryption
37:04:34:79:46:a4:c2:a3:4b:d5:0e:58:d5:14:74:96:3d:d9:
ec:22:4e:2e:1d:0d:6b:df:5b:7b:a9:9c:1e:21:86:a9:b9:49:
25:e4:da:b8:d6:74:40:51:ff:b3:4b:a7:04:6e:a8:1f:f1:d0:
12:a6:11:96:8f:b2:d9:a0:95:3f:ac:a8:8b:b1:99:23:34:68:
d5:b2:86:2e:03:24:db:43:c3:65:c1:7c:fb:4c:2d:42:d6:dd:
a2:5f:6a:5c:cb:24:8c:d5:5b:4a:57:23:19:08:6f:a9:0f:ab:
e2:94:0d:30:e5:87:de:80:ab:52:22:ba:2a:31:fa:29:39:a4:
13:df:47:36:86:e5:34:99:55:fe:1d:db:56:4d:9e:11:78:88:
38:b6:97:e6:2e:d1:54:09:16:06:31:2b:1f:86:78:2f:fa:04:
e4:4c:7f:3d:4e:8d:49:75:04:6a:47:fb:21:fc:c1:e0:cf:26:
f2:94:b8:ea:ae:4e:09:48:32:58:ba:74:17:6e:3e:6d:cf:61:
b6:89:b3:fd:3d:9b:56:63:6b:fb:01:30:c4:7f:b7:81:7f:12:
df:22:ea:96:12:b0:18:ca:e4:78:48:57:7e:68:d2:dc:d4:54:
02:01:c2:90:be:30:66:33:fd:3b:d3:ae:a9:dd:f2:0a:7a:07:
d3:1d:64:2d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUckou5bTD1QsIgYPOl9N13DaraakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNjA3MjUwNTEzMTJaFw0yNzA3MjQwNTE4MTJaMDMxMTAvBgNV
BAMTKDY1MDk5ODFGMkJCRkQxNEU4QkFFQjc0NzBCNTNEQ0YyMjQ2MkFBOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUMO9NHF5/wWn2rHBEQ8ztl2Oj
7b8p4awdq8d5trKXNstFJz/3mB9YW5taavoVoETvyvdfs4URgDFg+y06Yyz+G5DA
aWweyqFSRzPHkcBRtQszkOzLG6a6QXdzQ6vn9KKzUyW8IntS6wlagO1/id4Q0kE2
mPgjq9qZWKqPcAA8/C7ZAzlnLyEdf0UhNAr/dqVnIYorP6OG1SvWye72jInlJQE4
MLUNeNMHOsc7iyZpaRH/VkDEIyAaXpwvLSBQP7jTiENOyn9D8twfkh06o0BuhiAu
9GIXkOKtTD8eiK70VK/d1RYOQixvwXKGKhBq9dJVYSt0rqUHBI1uO/splHWZAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUZQmYHyu/0U6LrrdHC1Pc8iRiqpMwHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt
NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMTM2NzI1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUovl
MA0GCSqGSIb3DQEBCwUAA4IBAQA3BDR5RqTCo0vVDljVFHSWPdnsIk4uHQ1r31t7
qZweIYapuUkl5Nq41nRAUf+zS6cEbqgf8dASphGWj7LZoJU/rKiLsZkjNGjVsoYu
AyTbQ8NlwXz7TC1C1t2iX2pcyySM1VtKVyMZCG+pD6vilA0w5YfegKtSIroqMfop
OaQT30c2huU0mVX+HdtWTZ4ReIg4tpfmLtFUCRYGMSsfhngv+gTkTH89To1JdQRq
R/sh/MHgzybylLjqrk4JSDJYunQXbj5tz2G2ibP9PZtWY2v7ATDEf7eBfxLfIuqW
ErAYyuR4SFd+aNLc1FQCAcKQvjBmM/07066p3fIKegfTHWQt
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:59:55 2026 by rpki-client