Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS134494.roa
File: AS134494.roa (raw, json)
Hash identifier: XeAVw/jrf0pnhTTUYM8exIqVXACCYjuexIJiYs5/mTU=
Subject key identifier: 0A:1D:CD:73:70:A8:03:D9:5F:89:47:34:9D:F5:48:E9:89:C0:89:C4
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7B7D4FB0481F8FD57408FDDCDCE04795704C43EF
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS134494.roa
Signing time: Wed 28 Oct 2026 13:18:20 +0000
ROA not before: Wed 28 Oct 2026 13:13:20 +0000
ROA not after: Wed 27 Oct 2027 13:18:20 +0000
asID: 134494
IP address blocks: 181.214.27.0/24 maxlen: 24
191.101.97.0/24 maxlen: 24
194.53.141.0/24 maxlen: 24
194.110.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:7d:4f:b0:48:1f:8f:d5:74:08:fd:dc:dc:e0:47:95:70:4c:43:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 28 13:13:20 2026 GMT
Not After : Oct 27 13:18:20 2027 GMT
Subject: CN=0A1DCD7370A803D95F8947349DF548E989C089C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:be:ae:17:ad:9b:b4:78:34:6a:03:7a:ce:93:
c1:bf:a4:be:05:ec:95:ee:dd:28:1f:ce:ad:2f:db:
93:ad:ad:d2:7f:d1:1f:f5:92:a2:a9:d7:3d:db:ee:
ed:05:0c:01:d6:ca:71:20:a3:24:55:80:a7:f3:12:
1f:15:9a:85:94:bb:b0:53:ef:c3:e7:43:71:63:7b:
3e:21:95:9f:5b:50:2e:5f:93:98:5c:a8:ee:55:10:
ba:40:6b:0b:70:90:df:1f:8e:c0:36:df:8a:8e:f1:
e6:d7:c1:06:eb:c9:e1:85:67:0f:98:f1:fa:56:da:
9a:44:0b:6e:9a:33:2f:7a:bf:af:a3:52:f4:a9:d8:
e3:26:5e:6b:ff:cc:45:a6:78:43:a9:30:f3:0b:41:
ef:db:6e:84:31:38:59:52:e9:64:38:6e:29:68:7e:
20:38:96:53:ee:6f:7a:0c:d8:75:2a:eb:4e:d6:8b:
1e:d0:05:82:20:c4:e1:66:a3:af:e2:89:20:58:b9:
0f:bb:6d:63:a7:08:25:16:90:47:38:02:e5:4a:60:
af:cc:f2:03:70:93:82:41:96:f5:d6:5b:79:3a:db:
ad:fe:f7:a4:b2:b7:7d:6a:18:8a:18:68:cc:e5:8d:
94:a0:be:ef:aa:e4:21:67:d2:cc:de:3c:f1:d3:54:
cb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1D:CD:73:70:A8:03:D9:5F:89:47:34:9D:F5:48:E9:89:C0:89:C4
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS134494.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.27.0/24
191.101.97.0/24
194.53.141.0/24
194.110.13.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:1f:77:f6:90:08:5c:db:be:7e:b5:f2:4a:fc:da:1c:d0:13:
53:2f:9f:ee:1d:0c:d3:4a:b5:44:f8:2d:2f:b8:b6:8c:64:39:
23:c0:ec:4a:02:7b:f8:76:fe:d9:78:8a:e7:bd:51:c8:26:a9:
a0:4e:e5:6f:f7:b5:68:2b:e6:33:75:be:c9:d2:3a:05:74:e5:
08:82:25:0d:c9:8d:d9:f1:5e:19:74:90:cb:1d:e0:7e:63:ac:
c6:ba:14:2c:d5:60:d8:f0:93:df:e8:d6:d2:1e:d7:4e:7c:f6:
60:c8:c2:26:4d:26:21:39:30:2a:5a:07:34:7f:ba:b1:35:f1:
ba:34:8e:75:44:cb:4d:b2:d2:db:c1:8e:34:39:5b:29:b8:3c:
4b:ce:7c:65:5b:d9:9b:bb:2f:3a:38:2f:fb:56:52:61:ff:22:
70:1b:e9:fb:7b:e1:69:20:f6:19:23:54:46:f2:78:6e:53:59:
7e:46:d6:54:0a:be:bc:e2:d8:5d:57:12:77:6a:21:00:ef:0b:
de:11:c6:e7:4e:19:77:ec:94:84:46:d9:c0:aa:9c:2d:c9:20:
c0:65:ae:48:7b:87:57:ab:5d:c0:a5:57:65:5c:72:85:6e:86:
e2:d7:16:1f:74:71:a4:62:43:51:2f:e5:ad:23:5f:0c:42:9b:
b7:8f:aa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:54:29 2026 by rpki-client