Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS137409.roa
File: AS137409.roa (raw, json)
Hash identifier: /agey5gTTHptnMzn3TEJGJqyh06nQ/3NBC1wvtvjuwg=
Subject key identifier: DC:41:35:64:B3:F1:90:A7:2D:FE:09:A7:53:CC:B1:1C:7A:DC:AA:34
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3A5B447B57848A5B89005E39D2FAE18E32C941A0
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS137409.roa
Signing time: Tue 08 Sep 2026 07:33:40 +0000
ROA not before: Tue 08 Sep 2026 07:28:40 +0000
ROA not after: Tue 07 Sep 2027 07:33:40 +0000
asID: 137409
IP address blocks: 5.252.80.0/24 maxlen: 24
179.61.203.0/24 maxlen: 24
181.214.73.0/24 maxlen: 24
181.214.122.0/24 maxlen: 24
185.141.167.0/24 maxlen: 24
191.96.164.0/24 maxlen: 24
2a0a:8e00::/32 maxlen: 48
2a0a:9606::/32 maxlen: 48
2a0a:9607::/32 maxlen: 48
2a0a:be00::/32 maxlen: 48
2a0a:ce00::/32 maxlen: 48
2a0a:ce01::/32 maxlen: 48
2a0a:ce03::/32 maxlen: 48
2a0a:ce04::/32 maxlen: 48
2a0a:ce05::/32 maxlen: 48
2a0a:ce06::/32 maxlen: 48
2a0a:ce07::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:5b:44:7b:57:84:8a:5b:89:00:5e:39:d2:fa:e1:8e:32:c9:41:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 8 07:28:40 2026 GMT
Not After : Sep 7 07:33:40 2027 GMT
Subject: CN=DC413564B3F190A72DFE09A753CCB11C7ADCAA34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:45:ae:ef:b5:4e:80:a5:ea:57:d7:8e:bc:fe:
71:a2:e0:f3:99:93:ee:2e:dc:2a:97:f6:eb:27:77:
63:3a:ae:1e:b2:1e:8d:3d:84:c7:e2:22:f8:d5:6b:
a7:1d:07:8b:be:21:90:d7:5d:34:46:1f:90:75:0b:
ec:08:2d:ce:e4:fb:97:28:8a:3a:79:44:7f:3c:f3:
e1:2e:ca:21:4d:89:81:0e:d0:00:a3:d9:5a:d1:3c:
97:ed:9e:fd:3e:08:26:ba:96:85:55:70:d8:22:f3:
1d:bb:fa:d5:7e:72:1e:01:7c:88:d5:f1:cc:88:ae:
33:ab:25:0b:b1:25:fd:21:a4:f4:5b:3b:42:6b:8c:
01:ed:d7:ff:35:3d:1e:02:60:57:c6:c0:4b:11:dc:
24:a8:0b:c8:cd:01:9d:85:9b:03:6a:dc:05:a1:c6:
77:cc:d9:7d:6e:9c:cc:68:78:8f:bc:b6:b2:23:75:
8a:cc:b4:75:71:02:50:90:e5:9d:bc:eb:e0:6b:af:
61:c3:38:35:eb:f6:97:e7:87:37:95:80:bb:8e:5d:
24:2c:49:1d:1e:54:af:0a:12:fa:78:1a:5d:01:20:
26:08:2a:c9:e3:29:aa:6d:21:6a:f9:51:0b:e1:15:
66:08:52:3a:cf:79:11:95:e0:6b:2c:f4:74:a6:de:
bb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:41:35:64:B3:F1:90:A7:2D:FE:09:A7:53:CC:B1:1C:7A:DC:AA:34
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS137409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.80.0/24
179.61.203.0/24
181.214.73.0/24
181.214.122.0/24
185.141.167.0/24
191.96.164.0/24
IPv6:
2a0a:8e00::/32
2a0a:9606::/31
2a0a:be00::/32
2a0a:ce00::/31
2a0a:ce03::-2a0a:ce07:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
41:a2:0f:79:ad:59:d3:93:e2:49:fa:c3:90:79:1f:8b:2a:5f:
5c:e7:67:21:ce:18:b2:c4:84:af:11:34:cb:fc:ed:05:69:17:
2f:e2:01:1b:7a:03:ee:9b:3a:1d:64:95:6a:ad:90:f9:12:19:
98:b9:05:a1:43:de:ba:7f:4c:45:ae:75:61:29:d1:9b:7e:49:
42:bc:7a:d0:90:d1:ef:91:da:fd:45:98:29:68:6d:9c:08:7a:
7e:03:6b:52:bf:68:1d:ab:08:d1:63:f7:b0:f3:c6:c5:04:e0:
f7:2b:8a:f4:57:fc:b9:ba:5c:7c:d9:3f:2c:fe:de:d5:5f:86:
aa:08:72:cf:79:46:2d:b1:f9:a1:bc:f6:50:8c:91:95:3c:5a:
3f:0d:c0:8d:54:ff:2a:83:87:53:3a:95:f6:26:4c:f2:ac:3d:
f1:e8:64:79:f6:5a:29:62:12:7a:53:8e:06:51:49:4b:06:10:
7f:e7:f1:3a:bb:d0:bb:32:99:b2:f6:93:c4:e0:c2:12:89:b0:
59:7e:e5:2a:0e:60:a6:29:93:86:06:69:db:42:36:b4:c2:e5:
fb:f0:7a:cf:4d:6b:05:8e:9b:b9:e0:c2:2c:78:b7:00:aa:a1:
c9:ff:b1:32:61:42:51:d7:a2:76:31:93:28:b8:23:ff:da:ad:
da:d9:b1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:33:56 2026 by rpki-client