Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS134677.roa
File: AS134677.roa (raw, json)
Hash identifier: SKCZ+TshIgOVLUgjJzOhQA9nuHuTNkBoasHIdAvIJwU=
Subject key identifier: D0:7A:4E:0C:EA:4A:A4:8E:DF:BB:71:29:09:55:E3:B0:14:AC:DA:38
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 78155A41478DDA18F7B1CB16DA606BACC04590F5
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS134677.roa
Signing time: Wed 11 Feb 2026 10:10:04 +0000
ROA not before: Wed 11 Feb 2026 10:05:04 +0000
ROA not after: Wed 10 Feb 2027 10:10:04 +0000
asID: 134677
IP address blocks: 181.41.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 01:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:15:5a:41:47:8d:da:18:f7:b1:cb:16:da:60:6b:ac:c0:45:90:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 11 10:05:04 2026 GMT
Not After : Feb 10 10:10:04 2027 GMT
Subject: CN=D07A4E0CEA4AA48EDFBB71290955E3B014ACDA38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:45:4c:a2:b6:9d:05:43:f9:d2:cb:eb:2d:fa:
b6:ad:89:93:7e:d1:26:4b:3f:a0:0d:cd:12:13:f1:
98:48:26:90:5f:86:c4:14:8d:5f:29:fa:10:0e:9e:
63:8a:fd:6c:95:26:42:52:3d:b6:23:8a:5b:0a:61:
06:c9:42:83:ec:6e:cd:c5:b1:b7:04:25:be:05:36:
08:6f:94:7f:c1:98:3e:1a:ac:ad:87:fd:d6:c1:27:
32:b2:61:5d:a0:a3:34:71:db:75:b9:dc:fa:dc:82:
a0:bd:c3:ea:43:78:7f:16:4e:88:33:41:11:5f:00:
bb:fc:59:1d:6c:e1:72:16:91:22:c6:69:5d:f0:ad:
b7:86:97:00:63:69:9d:c8:8c:52:63:c7:a6:3f:8d:
25:db:57:76:a4:fd:11:3f:06:a6:ca:17:c2:72:b8:
35:de:d6:c6:c9:a5:be:dd:be:82:85:27:4d:bf:a9:
cf:93:49:8d:49:9d:25:33:44:68:f2:e6:57:1a:30:
43:ad:b3:51:2e:3b:9a:cc:e4:73:bd:89:30:02:5a:
51:7b:e8:2f:a2:20:d9:72:05:7b:b5:b1:d9:4f:84:
cd:2c:de:83:ec:85:7f:bb:d5:ea:10:23:9c:ee:bc:
9a:21:d9:05:07:4a:ab:d0:69:5f:de:a6:12:7e:fd:
a9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7A:4E:0C:EA:4A:A4:8E:DF:BB:71:29:09:55:E3:B0:14:AC:DA:38
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS134677.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.217.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:fe:47:2a:78:2f:20:79:37:26:f9:1a:be:1b:4c:0b:fd:04:
4a:ec:ad:e7:74:9d:df:d4:48:4f:e4:f3:0d:93:cd:6c:21:7e:
5f:b1:d5:a0:6b:92:86:dc:67:f2:36:4e:ee:ee:0c:ee:db:b9:
6f:ac:14:49:57:f5:cc:5b:03:e0:e6:32:22:1c:1c:c9:9a:5e:
04:bd:58:c5:80:99:17:64:8a:7c:25:05:2e:b3:b3:0e:cc:c1:
64:14:76:65:a2:a2:8e:c5:70:fb:1a:71:93:13:8d:79:ed:88:
e6:4d:74:93:47:ce:42:6a:29:5d:a8:77:93:55:52:e8:b4:0c:
2c:c1:14:5a:be:ce:d3:ba:46:16:aa:cc:53:ca:19:0c:2f:7d:
71:07:a7:80:b6:f3:9d:a0:6a:f5:49:5f:c6:52:bf:a3:c7:ff:
25:1a:16:77:2d:98:25:96:03:39:1e:8a:58:ff:a7:7c:42:11:
33:12:a3:17:8e:ce:9a:d0:d0:a9:99:ae:6a:5d:a3:77:eb:b1:
a2:60:0e:06:4b:9f:1f:11:09:e1:2b:ad:14:26:a8:40:fc:ae:
8a:40:89:fd:70:c2:55:74:02:69:81:08:da:15:f3:7e:c8:a3:
0d:13:bd:b9:71:68:0f:3a:7a:c7:61:ee:91:fe:72:03:cf:9f:
6d:ec:bb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:33:51 2026 by rpki-client