Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135377.roa
File: AS135377.roa (raw, json)
Hash identifier: lqy3vHFThyfYrQ4S3N/ntSAThKfgEYJQPXScVQLAgNY=
Subject key identifier: 26:75:23:55:7D:48:B6:F3:5F:2A:68:23:AC:A5:68:14:01:F9:D9:B6
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1BD81AFF644032F512F8FA06E7D1E07F895078ED
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135377.roa
Signing time: Mon 14 Sep 2026 03:52:14 +0000
ROA not before: Mon 14 Sep 2026 03:47:14 +0000
ROA not after: Mon 13 Sep 2027 03:52:14 +0000
asID: 135377
IP address blocks: 82.23.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:d8:1a:ff:64:40:32:f5:12:f8:fa:06:e7:d1:e0:7f:89:50:78:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 14 03:47:14 2026 GMT
Not After : Sep 13 03:52:14 2027 GMT
Subject: CN=267523557D48B6F35F2A6823ACA5681401F9D9B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fb:7e:db:34:10:a8:b9:c8:6a:a7:cb:f0:5d:
83:20:2f:16:0c:73:36:fd:29:dc:ef:d4:3c:0b:1d:
41:f8:54:6f:1b:6b:05:94:75:2e:95:73:89:c0:a9:
22:59:c0:21:6c:6c:2e:27:2a:8d:ed:82:3a:55:0e:
5b:df:8e:fa:a3:f5:71:91:83:ac:4e:ac:5d:7d:cc:
21:2a:39:4b:34:b5:e6:a0:9f:1f:6a:20:b4:be:52:
08:47:0e:6f:c0:5e:8c:6e:d3:a3:a4:08:ee:00:cd:
57:0b:6f:1a:44:26:bd:ca:23:57:f1:36:e3:af:30:
84:b5:2d:50:aa:f9:87:94:11:f1:2b:58:ee:1a:cc:
01:e4:05:17:c8:af:b5:91:77:5b:8a:c5:c0:59:67:
f7:5c:a3:aa:7b:21:61:82:83:58:a3:81:f2:65:bb:
58:43:4d:bc:b5:45:fb:0f:38:28:c3:2a:8f:52:b5:
62:39:9b:84:6a:d1:b5:ea:53:05:75:1e:88:af:87:
05:c1:f4:50:44:a9:b7:d0:7f:d8:e4:29:0c:71:56:
33:9f:89:39:22:86:6d:65:95:5f:78:2b:a2:57:bc:
f1:c8:51:48:06:1e:ef:7d:06:66:a9:9f:f4:7e:0c:
b7:2e:ec:3f:5a:ef:7a:d8:97:b7:ab:1f:90:9c:b2:
57:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:75:23:55:7D:48:B6:F3:5F:2A:68:23:AC:A5:68:14:01:F9:D9:B6
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135377.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.23.136.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:93:3c:33:38:7b:f8:ed:53:2a:ee:9f:02:2a:55:f9:ae:4e:
f4:38:c2:21:53:66:0f:8e:05:17:0c:c6:1b:5d:8f:94:1f:9c:
be:25:b8:ea:34:b8:3f:0f:6d:80:e3:35:37:5f:9e:da:c6:07:
43:20:2c:a8:ce:da:86:8d:d5:24:77:be:23:2d:d4:21:09:e8:
d2:59:31:5e:d7:c3:e2:23:23:c0:3e:15:9e:84:cf:a6:23:d5:
df:e4:13:88:50:3b:b6:fd:9d:ac:8c:34:86:53:0f:98:40:67:
07:19:c0:e5:9f:f6:8d:0c:e1:90:a5:1a:79:d7:a1:fe:e9:bf:
f4:f6:f3:6b:74:ca:8f:a7:f1:39:dd:dd:33:61:d0:c0:26:82:
8c:4d:6c:10:4b:ca:52:77:b6:af:23:f1:32:90:37:5f:1a:aa:
4b:72:a9:7e:fa:14:8a:8b:a2:19:4f:86:bc:77:6c:d4:cb:ac:
09:54:7c:67:ae:2c:74:d7:76:22:4a:6f:21:bc:d4:b7:b2:f3:
d8:2c:7a:d3:46:12:38:ce:45:55:a7:8e:25:12:6c:6e:f7:b2:
dc:7b:79:1e:a9:d4:e7:74:63:a5:06:6d:9a:52:98:9d:6f:ac:
c7:a9:38:ad:7c:f4:0c:be:7a:86:87:9d:d2:9d:4e:08:b9:19:
8d:d4:01:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:30:53 2026 by rpki-client