Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS135375.roa
File: AS135375.roa (raw, json)
Hash identifier: euNfWDqV8voiFCk8mVaK3jtRBT1+t0D1VWgpzxadBdc=
Subject key identifier: F5:FC:C8:68:64:DC:93:2E:1C:2E:BF:BF:32:FD:5D:7E:2D:00:1A:F1
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 49ED67AED639857E3755B667607434EBFD70E86E
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS135375.roa
Signing time: Tue 26 May 2026 01:47:17 +0000
ROA not before: Tue 26 May 2026 01:42:17 +0000
ROA not after: Tue 25 May 2027 01:47:17 +0000
asID: 135375
IP address blocks: 45.133.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:ed:67:ae:d6:39:85:7e:37:55:b6:67:60:74:34:eb:fd:70:e8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: May 26 01:42:17 2026 GMT
Not After : May 25 01:47:17 2027 GMT
Subject: CN=F5FCC86864DC932E1C2EBFBF32FD5D7E2D001AF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2c:89:97:32:60:17:5e:7f:a6:91:f7:d4:b2:
31:87:7b:23:2d:f0:ed:a3:b0:51:3e:cd:78:72:cb:
c9:bb:74:13:b6:ec:17:63:72:bb:94:af:60:e1:1a:
ef:ee:c8:93:30:00:b6:fe:eb:7e:ac:70:d9:54:6d:
f9:88:ab:da:84:10:40:fa:03:a2:67:77:08:79:c3:
80:72:0f:a0:3c:bb:f1:43:f1:50:60:db:f8:77:f6:
cf:2a:ca:df:fa:3e:ff:1e:ad:43:ab:fd:0f:4a:53:
74:7b:d3:a0:39:fe:de:1d:a7:dc:82:6b:04:3e:0a:
54:74:ae:40:bb:4f:c8:89:9e:0b:77:a8:aa:8f:64:
8a:51:2d:6f:c2:15:c6:8a:16:ad:f2:3d:44:90:32:
b0:d3:81:5f:4f:72:24:86:ed:73:81:65:99:cb:2b:
67:d6:a0:da:71:8e:3d:f5:7f:41:56:08:66:bb:08:
6d:e5:ea:1d:2b:e8:95:77:57:a8:58:82:9a:2c:61:
8f:3e:ea:91:9c:a3:82:ca:73:f7:e8:02:ff:5a:85:
31:4e:a3:a1:74:49:e3:dc:12:a7:6c:86:69:af:30:
2a:fc:9f:6e:a5:92:b0:82:fa:55:24:b7:41:9a:3a:
73:f5:6e:89:7f:c6:96:76:c9:57:dd:3d:c0:dc:71:
97:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FC:C8:68:64:DC:93:2E:1C:2E:BF:BF:32:FD:5D:7E:2D:00:1A:F1
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS135375.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.168.0/24
Signature Algorithm: sha256WithRSAEncryption
91:9f:8c:94:ee:67:df:70:cf:6b:97:b2:1d:31:eb:5d:a9:f4:
4e:47:b8:69:af:21:4d:73:e9:f2:e9:2a:50:67:3c:fa:4d:6f:
db:0f:25:01:7a:20:89:75:e2:72:97:34:53:7b:6d:69:ec:46:
b1:2b:06:b1:af:69:11:d1:92:9c:d2:1d:d1:ad:d2:a9:a9:43:
96:4b:ae:8e:57:58:2d:7b:f3:f0:3f:b0:63:84:ff:77:4e:d9:
71:41:7a:e7:4b:da:d5:02:f6:65:a5:c1:d9:1e:9b:96:47:f7:
24:b6:2f:40:08:c5:bd:bd:ca:fb:ca:d0:91:1e:eb:7f:27:7b:
ad:37:d2:de:f3:f4:9d:76:74:bd:43:3c:ac:ad:c7:8c:4c:8f:
28:bc:a1:49:c5:3f:33:95:bc:d5:d1:29:3d:71:68:80:05:fe:
50:e3:b0:85:1b:56:f9:a2:f7:3c:f1:ee:ca:6b:7e:00:f1:64:
e3:2b:bc:1e:e5:e2:be:4f:9c:99:1b:59:a4:a9:e0:bd:4b:93:
93:be:dc:57:1e:d0:22:3b:c8:3a:e3:0d:c0:5a:7c:88:02:75:
e3:c2:94:db:97:bd:ea:70:37:ab:24:cf:e5:96:1e:da:e5:62:
3c:64:c9:1d:06:36:42:8f:6d:83:06:22:6f:0b:7e:a1:15:3d:
4a:40:b4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:13:39 2026 by rpki-client