Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS133731.roa
File: AS133731.roa (raw, json)
Hash identifier: 1R5WS62DV5e90ybi2Rnjd7xNTqc4VUzTSRkV/KOtWtM=
Subject key identifier: CA:38:41:6C:27:F8:B9:A6:26:DE:B6:13:F5:7F:0C:47:15:7A:A0:71
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 18A66D24C82F5C8FF4DDC57944AC019C3BA2DEAD
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS133731.roa
Signing time: Thu 04 Jun 2026 05:47:27 +0000
ROA not before: Thu 04 Jun 2026 05:42:27 +0000
ROA not after: Thu 03 Jun 2027 05:47:27 +0000
asID: 133731
IP address blocks: 82.23.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:a6:6d:24:c8:2f:5c:8f:f4:dd:c5:79:44:ac:01:9c:3b:a2:de:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 4 05:42:27 2026 GMT
Not After : Jun 3 05:47:27 2027 GMT
Subject: CN=CA38416C27F8B9A626DEB613F57F0C47157AA071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:15:20:d3:10:06:4f:11:2a:3e:10:60:1a:58:
32:18:99:48:37:69:38:e1:93:6d:e3:a1:fc:82:84:
4c:4c:4b:30:a8:81:ff:11:ad:b9:d1:1d:91:25:e4:
10:2f:29:f1:02:29:f5:ab:1b:87:70:dc:7e:d0:12:
42:2b:79:9b:a1:91:bf:f8:81:36:e7:f2:db:d0:79:
cf:88:50:e7:79:f2:21:f0:57:03:21:1c:92:da:da:
72:36:26:c0:82:fc:0c:3c:05:70:03:0c:dd:8a:38:
42:4d:31:6c:77:fa:92:0e:64:b1:81:2d:4a:34:62:
3b:7a:17:09:6c:ba:41:b9:f7:32:d2:7f:d8:e0:ee:
3a:1d:8c:96:43:92:60:be:a6:da:07:18:b8:4f:39:
4a:ab:28:0d:a5:97:f3:2b:65:c0:f1:a0:0c:53:c6:
6a:69:be:8e:72:e7:c5:fa:0a:e8:d3:a8:e4:c9:c0:
0e:e6:c7:4c:a0:76:b5:20:75:13:5c:f9:91:a6:bc:
46:1b:03:fc:66:04:fa:a8:05:de:c4:8a:3a:5c:28:
89:3f:57:2e:81:c7:a6:0c:71:67:1f:a3:20:09:e4:
4b:95:91:fe:55:c8:e1:b6:f6:3c:25:14:47:08:b2:
98:90:e3:1e:84:bd:d0:13:6d:63:c3:e6:85:25:0e:
96:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:38:41:6C:27:F8:B9:A6:26:DE:B6:13:F5:7F:0C:47:15:7A:A0:71
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS133731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.23.246.0/24
Signature Algorithm: sha256WithRSAEncryption
31:ea:38:03:2a:a5:02:d3:d9:d6:30:2e:da:a2:74:a2:7e:b1:
86:d9:d3:02:e8:31:74:c3:cc:f8:cb:9d:21:c9:67:b4:62:35:
37:75:88:23:bd:71:5e:0e:36:e1:f2:c4:9d:05:13:05:d1:8b:
75:9d:52:56:a8:d8:6a:69:68:bd:67:d7:5e:a5:42:4f:b0:98:
58:7a:4e:4b:97:d2:08:6c:bb:f0:09:8d:d7:1a:a1:f4:4a:b0:
74:91:89:8d:03:3a:8d:2c:01:22:26:be:34:50:0a:d2:9e:13:
e8:d8:87:9e:c3:a5:13:20:a1:d0:8d:85:d4:71:91:3b:91:85:
c0:be:6b:f4:59:d7:36:88:57:b6:15:ab:62:07:89:34:cd:ff:
5c:41:59:57:e8:83:7e:32:93:ee:95:f8:19:f0:cb:ff:e2:36:
0e:37:11:25:07:bc:e2:1b:c4:27:c2:36:d2:cf:d9:9a:ed:34:
88:51:11:c4:b1:5c:27:45:3f:6a:a7:16:a9:f0:57:09:a2:a8:
5f:67:cc:84:04:7d:b9:da:ce:c2:5d:49:7e:db:e7:26:b8:d3:
09:44:fc:b6:82:08:19:4b:df:1a:6b:b5:0a:fb:2a:f6:cb:da:
5b:12:33:51:55:31:a9:cb:68:52:79:b5:c4:bd:c5:b4:22:f5:
ea:5a:01:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:26:08 2026 by rpki-client