Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS135402.roa
File: AS135402.roa (raw, json)
Hash identifier: mGMzzXgwMmLuLmGMB4SxqbeNtMhBjkwV11NKJr3nFyQ=
Subject key identifier: 1F:6A:93:D9:B9:06:F8:FE:7E:F8:F2:E3:65:8F:30:C0:AA:33:61:E6
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0BD56A509FB191B2A29A995F22F406DD3E67276C
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS135402.roa
Signing time: Tue 27 Jan 2026 06:29:54 +0000
ROA not before: Tue 27 Jan 2026 06:24:54 +0000
ROA not after: Tue 26 Jan 2027 06:29:54 +0000
asID: 135402
IP address blocks: 5.181.130.0/24 maxlen: 24
45.139.180.0/24 maxlen: 24
193.31.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:d5:6a:50:9f:b1:91:b2:a2:9a:99:5f:22:f4:06:dd:3e:67:27:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 27 06:24:54 2026 GMT
Not After : Jan 26 06:29:54 2027 GMT
Subject: CN=1F6A93D9B906F8FE7EF8F2E3658F30C0AA3361E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:36:3e:4f:79:3e:08:84:a3:9a:d1:21:07:fa:
1b:4f:ca:d0:6a:14:c9:ee:b6:b1:d7:01:9e:a1:4e:
7d:80:ea:c3:39:bf:ea:9f:40:0b:53:6c:08:13:cd:
94:26:7e:fd:a6:9e:5d:cd:98:33:7d:e0:ac:b2:e5:
b2:e7:41:af:b3:76:7f:c1:45:b5:26:b5:e3:ba:cf:
7d:c2:a1:e3:17:32:0e:49:8b:73:d9:7d:d5:c1:a1:
e3:95:58:38:fb:e7:eb:6a:fd:68:9d:aa:8f:2b:0b:
bc:8a:6c:45:5b:4e:2d:75:65:7f:02:47:4a:20:d4:
69:39:10:5a:d4:17:26:91:46:b9:bd:99:ea:75:63:
dd:70:ae:e4:45:58:52:82:e5:b3:e0:83:12:92:cb:
13:3d:7c:dc:a2:71:4f:90:19:8c:2a:b1:4d:70:6b:
0d:6d:a3:94:e7:ea:4f:51:27:ee:82:3f:9a:9d:05:
45:1f:d3:51:2b:7b:d2:c8:54:7f:7d:cd:40:ae:d3:
7b:0a:a3:4e:27:63:a5:fb:78:6b:cd:d9:37:b7:f8:
d0:45:0a:d9:08:fe:19:12:99:31:8e:ec:a9:84:32:
7e:b3:e3:c8:37:81:f3:c9:05:5e:76:d3:c0:bf:23:
56:14:4a:ee:9c:fb:0c:ff:97:a7:7e:ab:23:e8:98:
50:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6A:93:D9:B9:06:F8:FE:7E:F8:F2:E3:65:8F:30:C0:AA:33:61:E6
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS135402.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.130.0/24
45.139.180.0/24
193.31.43.0/24
Signature Algorithm: sha256WithRSAEncryption
46:36:3f:0e:ac:ac:5c:70:bb:a2:fa:21:ec:91:a6:42:6e:8a:
4a:9c:75:91:73:00:01:8b:5b:d8:4e:37:35:2e:9a:b2:c9:19:
10:e2:b2:0a:f2:b0:04:a9:87:c3:9a:b4:5d:2d:87:fd:79:9c:
7c:eb:af:8f:7b:9b:ae:b5:b6:b5:28:94:15:56:21:00:10:bc:
fb:0c:8e:8e:60:a3:1e:bc:f3:95:de:c2:d4:b3:d3:e8:bd:8e:
35:78:e5:cf:17:54:6c:07:7d:a7:64:3a:45:a6:c1:33:76:c5:
f5:28:a7:00:ac:68:da:56:cf:c7:65:41:a1:49:33:f3:7c:0d:
48:d7:8c:e1:e9:c7:67:ad:ec:cd:55:f2:3b:79:7f:ad:57:3d:
d0:38:8e:08:8a:5d:84:64:b0:f5:d0:75:c1:03:54:3c:05:81:
4e:4f:75:4a:82:88:94:2b:99:2e:e6:f1:06:38:14:9c:c8:58:
79:52:40:8d:43:66:d8:d7:e6:9b:bd:3e:e9:d4:4c:0e:aa:a2:
0b:73:89:62:d8:aa:a9:3e:b1:82:63:38:c3:db:5a:d6:0e:7a:
3e:7a:ad:3d:13:51:e6:d0:02:3d:bc:f3:8d:f4:a2:46:7d:dc:
b7:55:b2:5d:0c:aa:e1:87:a8:5e:5b:fd:6f:37:ee:d5:cc:32:
f1:45:4d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:58:12 2026 by rpki-client