Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS134413.roa
File: AS134413.roa (raw, json)
Hash identifier: Xu8n+LFVrLeoqlXh6d7y/HfIVBNC3vZY6G3Ddoq4XPg=
Subject key identifier: 68:C7:F7:94:AE:85:EF:DE:27:BD:70:DD:19:E5:75:CE:F2:E3:D9:B0
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5389D0B6E7E64B21CCD1952444DC02AE2326961E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS134413.roa
Signing time: Wed 15 Apr 2026 06:21:31 +0000
ROA not before: Wed 15 Apr 2026 06:16:31 +0000
ROA not after: Wed 14 Apr 2027 06:21:31 +0000
asID: 134413
IP address blocks: 82.38.7.0/24 maxlen: 24
82.38.42.0/23 maxlen: 24
82.38.46.0/23 maxlen: 24
82.38.80.0/23 maxlen: 24
178.83.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:89:d0:b6:e7:e6:4b:21:cc:d1:95:24:44:dc:02:ae:23:26:96:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 15 06:16:31 2026 GMT
Not After : Apr 14 06:21:31 2027 GMT
Subject: CN=68C7F794AE85EFDE27BD70DD19E575CEF2E3D9B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:4d:dd:e3:a6:70:8a:5b:c2:f5:2f:ec:80:
00:ea:3f:7f:ed:db:62:ec:8d:bb:ef:91:57:85:22:
21:19:5e:eb:8e:26:98:a0:4a:c8:e5:17:dc:e6:b8:
72:1d:4c:31:df:45:90:c3:89:e4:6e:d8:74:2f:46:
95:f4:67:4b:ae:b2:40:69:38:bc:1b:05:e1:fd:ed:
aa:01:d6:d6:f6:6c:e5:d6:52:67:22:d1:28:64:62:
06:63:7f:92:c8:44:4c:d4:98:d1:62:82:06:b0:01:
b5:b1:5b:12:34:7c:50:ba:b1:8d:36:26:3f:ca:fb:
bd:fb:f9:84:cb:c9:df:40:6f:10:fa:03:ca:94:b7:
7e:01:22:5b:4d:39:fb:fe:6f:3c:db:a6:1f:a1:eb:
63:31:06:04:77:77:65:03:d8:08:27:08:f1:d6:e6:
d8:5b:96:62:2e:c0:ce:09:32:19:ef:19:26:1b:66:
9c:d1:fa:5b:ee:a8:6b:65:b1:76:80:65:e8:3a:d7:
1b:23:31:7c:93:dc:21:c5:ff:8a:c6:c4:b4:94:f6:
1b:fb:f0:02:50:1a:44:6c:05:f9:d0:2a:ec:a1:9a:
19:38:0f:a3:84:0a:53:8f:6f:61:68:07:25:4b:b7:
c0:7f:3c:3c:92:b3:1c:04:54:b6:f0:bd:cf:a5:f5:
5f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C7:F7:94:AE:85:EF:DE:27:BD:70:DD:19:E5:75:CE:F2:E3:D9:B0
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS134413.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.7.0/24
82.38.42.0/23
82.38.46.0/23
82.38.80.0/23
178.83.82.0/23
Signature Algorithm: sha256WithRSAEncryption
96:aa:14:26:97:e8:c8:05:5e:6c:02:6d:3b:09:60:24:e7:d6:
b1:c4:19:3d:bf:b5:6d:c4:f5:e3:a7:a3:2b:d0:00:8b:be:66:
40:8e:31:f5:8f:1a:54:41:56:2a:b7:c5:78:1a:f0:dd:49:a1:
4a:a8:ca:e4:10:8f:4a:db:f8:1f:8a:f9:e7:52:90:27:46:61:
21:86:67:1b:e6:7a:41:67:32:fb:4b:db:b8:24:25:ba:93:02:
ef:92:66:cf:60:e9:27:34:e5:36:e0:da:06:e1:ee:ad:94:17:
0a:42:df:bf:35:b3:23:0d:1e:ed:74:fa:fd:40:8e:7e:a7:0b:
65:9a:b1:49:0e:ff:bf:1f:a7:9a:a3:4e:4b:32:92:e7:02:48:
5b:4d:0a:69:b7:91:07:8f:3a:62:e8:13:84:27:88:47:3a:e3:
b4:27:3e:0f:4c:88:7f:36:6b:55:2b:57:46:09:80:18:3d:d3:
23:8b:b8:b7:21:de:f3:b2:59:ff:18:51:70:93:2d:9c:dd:a4:
91:ff:4d:d8:a9:6e:01:f7:3f:be:79:68:5e:85:98:bc:44:70:
9b:9c:85:21:21:e5:4f:21:1d:9b:3d:5c:46:40:a9:96:a1:df:
eb:aa:79:21:ca:79:5b:79:f6:b4:c2:5b:da:1a:4d:27:bd:fd:
35:d3:58:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:04 2026 by rpki-client