Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135402.roa
File: AS135402.roa (raw, json)
Hash identifier: NHmCiIslUzOaYD3ojd6jA9Tgq+kfWu44oWjsz114cPg=
Subject key identifier: 14:33:51:D7:D3:D4:58:83:D7:68:12:81:64:B0:DB:05:FB:89:80:D7
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 24BF7A6042D970EDDA11111A18DC8D4DDA65D0BF
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135402.roa
Signing time: Tue 24 Feb 2026 10:14:54 +0000
ROA not before: Tue 24 Feb 2026 10:09:54 +0000
ROA not after: Tue 23 Feb 2027 10:14:54 +0000
asID: 135402
IP address blocks: 82.21.204.0/24 maxlen: 24
82.24.120.0/24 maxlen: 24
82.39.155.0/24 maxlen: 24
178.83.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:bf:7a:60:42:d9:70:ed:da:11:11:1a:18:dc:8d:4d:da:65:d0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 24 10:09:54 2026 GMT
Not After : Feb 23 10:14:54 2027 GMT
Subject: CN=143351D7D3D45883D768128164B0DB05FB8980D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f0:2a:f3:28:fc:c2:e7:72:0f:f2:d2:31:78:
ad:41:d2:8f:d0:cd:4a:6f:58:59:01:65:fa:58:d3:
9b:2a:49:52:98:fc:d7:b6:8c:33:26:7a:e5:5b:a7:
c4:f4:01:7e:ec:6c:75:36:a7:82:69:17:77:94:89:
e8:b4:5f:c7:83:da:5e:b9:e2:5b:6c:eb:15:79:ed:
74:32:5b:8f:fd:e8:b6:fb:fe:36:cf:0e:49:0e:07:
22:0f:5f:94:dd:e6:07:cf:2f:01:a1:b4:f1:c1:2d:
5c:2e:0a:92:9e:01:43:ce:d6:2a:cf:fc:3a:a6:3a:
2a:31:e1:6a:12:36:6f:b5:eb:b2:30:f5:60:32:8d:
2c:58:94:7d:06:ca:d4:92:05:95:74:a4:0c:5b:30:
72:76:6e:0d:ae:62:fb:f0:5e:91:9f:40:9c:5d:56:
5d:be:f6:2c:92:22:ab:83:c8:95:e2:8a:29:bc:e4:
dd:f4:67:53:3a:c5:25:6a:84:4b:95:24:10:8a:4e:
5b:dc:41:90:3a:99:39:b0:ff:44:4b:40:6a:1e:67:
87:8c:eb:1a:45:45:ca:05:23:cb:a9:47:69:50:a5:
d8:20:20:8d:f2:2e:ac:f6:f5:63:1b:bf:4f:f0:1e:
e5:d6:46:c0:8e:17:0d:91:5f:b1:5a:fa:1c:12:02:
65:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:33:51:D7:D3:D4:58:83:D7:68:12:81:64:B0:DB:05:FB:89:80:D7
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135402.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.204.0/24
82.24.120.0/24
82.39.155.0/24
178.83.195.0/24
Signature Algorithm: sha256WithRSAEncryption
76:95:09:b9:b3:fa:3b:d1:f7:d4:e7:5b:7b:49:a7:38:3a:4c:
59:0c:7a:32:77:99:25:86:dc:da:b1:4b:d5:36:78:73:83:d8:
c8:e3:a4:02:41:8c:d8:12:ea:6e:30:7b:87:4c:29:69:60:20:
1b:90:de:1a:8f:64:49:3a:ff:41:6d:5a:ac:b8:8a:8a:3f:ef:
63:2b:04:d3:49:9a:6c:a0:86:e3:34:26:c5:17:fc:8b:cf:ba:
33:2a:5a:40:0c:3c:ed:0f:2b:04:61:54:49:af:88:cf:ae:c0:
ec:d5:66:d4:19:ec:e1:f0:3c:ca:eb:96:41:ca:f7:e6:ba:6b:
38:f7:60:ce:07:fa:f9:5b:3b:5c:a4:de:cd:7d:2d:ee:f5:70:
04:75:e4:97:15:05:bf:55:fa:ae:96:31:a2:0a:88:6f:98:22:
0d:8c:43:07:21:d6:e1:4f:db:9b:f4:14:ca:1b:9c:37:9a:8d:
9b:11:1a:ba:fd:a5:9e:fa:69:56:4d:fd:0b:a9:fb:2f:ae:fd:
42:04:fa:a7:f6:47:d5:99:29:98:aa:6f:da:45:bf:f5:b2:9f:
0e:37:00:33:ca:54:9a:fd:fe:39:ce:8b:0f:9f:dd:0b:78:3b:
cb:fc:17:60:b9:84:d8:84:58:11:59:f3:cd:13:a6:a2:52:47:
dd:f6:cd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:35:05 2026 by rpki-client