Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS137409.roa
File: AS137409.roa (raw, json)
Hash identifier: X6yg0POX/fvoKs44kRzPGZyVPWwkQY4silLD8bs9mA4=
Subject key identifier: 48:A9:AA:DD:C4:0B:57:28:EC:2C:C4:D4:C2:43:1B:DA:7E:AC:07:40
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 6B6282B7C4FCE03828B7C5DD062AED38EEC7C389
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS137409.roa
Signing time: Wed 16 Sep 2026 08:49:35 +0000
ROA not before: Wed 16 Sep 2026 08:44:35 +0000
ROA not after: Wed 15 Sep 2027 08:49:35 +0000
asID: 137409
IP address blocks: 82.139.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 01:51:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:62:82:b7:c4:fc:e0:38:28:b7:c5:dd:06:2a:ed:38:ee:c7:c3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 16 08:44:35 2026 GMT
Not After : Sep 15 08:49:35 2027 GMT
Subject: CN=48A9AADDC40B5728EC2CC4D4C2431BDA7EAC0740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c2:3f:98:69:3b:c1:cf:c6:44:fa:95:78:6f:
0e:94:3d:e3:2e:98:ad:e1:b2:d6:be:3b:8e:f6:0e:
4a:c5:50:4a:9c:07:dd:24:d3:fa:27:3a:57:46:65:
fa:38:77:68:ed:d7:d1:c8:92:41:46:13:0c:71:96:
8e:67:01:9a:63:68:f5:1e:5a:4e:f8:3b:3c:bf:5d:
99:e0:f5:2b:f2:bf:3e:bf:86:ba:fb:b2:3a:85:08:
c2:22:78:95:9a:63:b4:70:42:ab:51:34:5a:89:60:
94:2d:af:97:53:d6:e5:92:09:e1:91:cb:5a:f9:cf:
95:0a:2b:cc:d0:f8:e7:11:bb:61:bf:93:56:f3:c6:
49:d5:38:2a:5f:9b:33:eb:6c:72:57:42:93:30:66:
57:f1:ea:e8:5f:9b:76:e2:37:93:2b:19:97:0c:44:
ce:96:61:ff:85:9c:64:90:c3:16:cd:34:ab:23:06:
e8:2c:cd:e7:15:5d:ed:83:96:af:3a:9c:e4:68:58:
ea:81:c0:a0:04:52:98:f4:51:f3:7f:05:a1:c4:f7:
b5:96:6d:12:31:c6:f1:d2:b7:d8:4e:c4:12:2e:c1:
8e:e1:a3:a6:9d:a6:c8:c7:9b:5d:99:8a:33:24:84:
0e:ab:12:22:03:de:40:01:cf:02:f5:4a:c0:7e:65:
2f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A9:AA:DD:C4:0B:57:28:EC:2C:C4:D4:C2:43:1B:DA:7E:AC:07:40
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS137409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.195.0/24
Signature Algorithm: sha256WithRSAEncryption
69:53:44:14:36:ee:cb:94:ab:28:8b:ae:cf:1a:5a:79:61:dd:
09:e7:5d:49:f7:d1:41:80:a5:6c:e2:89:ef:f5:f2:46:d9:4b:
14:55:a3:a9:47:48:1d:79:b2:0a:4e:47:20:1c:75:d0:e4:8d:
02:e9:7e:5f:e7:c7:de:01:be:65:86:af:85:23:bc:c5:1a:f5:
19:e2:47:aa:e9:c8:34:ff:af:d6:93:c2:aa:15:ea:5a:9e:e0:
d0:42:e4:4e:5e:a6:27:5b:99:2d:0e:7a:e7:67:d5:8d:69:e8:
c8:39:d1:b9:25:2c:b8:ab:df:54:ef:73:23:6c:dc:b1:cf:24:
82:9e:8f:87:53:7c:b8:91:97:01:14:b7:2b:8e:b8:32:67:a1:
0c:02:6a:79:c6:b1:b1:b7:38:a8:4d:56:3c:69:7d:75:4b:3c:
fa:13:d1:89:5d:91:9d:88:5e:56:8f:86:ef:8d:3a:f9:4c:6c:
6e:fe:b6:92:b8:f3:e9:aa:9f:da:38:6c:7e:50:c3:e5:eb:01:
7c:c9:47:3d:de:44:74:26:43:f1:3a:98:db:ce:35:27:91:7d:
ed:d9:a6:2c:7c:aa:ef:0d:15:56:e0:6c:23:2c:36:a1:59:bc:
0b:8d:51:f1:f4:2f:74:02:9e:d8:af:3e:8c:5e:a3:4e:90:7a:
b5:ba:e9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:34:48 2026 by rpki-client