Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135402.roa
File: AS135402.roa (raw, json)
Hash identifier: VnipkbuhB2mFJavRkqeNtNqiA+JMvGn3eVwFEGualuk=
Subject key identifier: 98:89:07:F3:24:0E:E8:CE:64:46:C8:7C:83:BF:A1:A2:9F:4F:E2:AA
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6384446564DB0BA4156CD4B7F80C623FDF5CA361
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135402.roa
Signing time: Fri 01 Aug 2025 08:01:24 +0000
ROA not before: Fri 01 Aug 2025 07:56:24 +0000
ROA not after: Fri 31 Jul 2026 08:01:24 +0000
asID: 135402
IP address blocks: 82.21.204.0/24 maxlen: 24
82.24.120.0/24 maxlen: 24
82.25.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:84:44:65:64:db:0b:a4:15:6c:d4:b7:f8:0c:62:3f:df:5c:a3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 1 07:56:24 2025 GMT
Not After : Jul 31 08:01:24 2026 GMT
Subject: CN=988907F3240EE8CE6446C87C83BFA1A29F4FE2AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4a:5c:9b:23:9c:e3:61:0b:e6:85:68:4f:74:
66:67:e8:e4:77:4c:d5:d8:63:56:e1:e6:4c:5f:77:
ee:c4:08:b3:76:6c:86:47:e2:ad:67:6d:f8:5f:46:
5f:e8:d8:1b:4a:d7:3b:bb:5c:a2:79:69:70:ec:d2:
01:f1:a9:d8:60:2b:d6:26:8d:99:08:14:74:66:df:
d7:f4:7b:6f:aa:50:76:60:f4:95:f9:07:d3:ad:a6:
be:6c:e2:31:e0:f0:40:7a:d2:8a:bd:f5:97:02:00:
46:8a:91:7d:a1:7b:86:4c:4a:85:eb:fb:dd:2a:69:
a2:b5:fa:a8:f0:7d:6f:ef:04:ea:b2:26:4e:ca:d7:
69:64:8a:f0:11:a6:c9:cc:be:2a:80:b1:2a:9b:80:
18:26:98:3a:1b:6e:08:29:b0:3a:ec:01:c3:e5:3f:
3d:2c:87:62:c5:75:fd:70:00:da:be:36:2f:85:d7:
c8:cb:78:50:08:12:62:45:2e:42:50:c3:60:f8:64:
bc:9c:cd:f4:62:31:f4:cc:95:48:c3:a5:86:d3:35:
86:8d:7c:38:b6:f0:63:ef:f6:42:f8:be:01:05:fa:
3a:02:3e:11:77:7e:49:2c:4b:5f:fb:18:87:9a:55:
62:c0:a6:d1:65:1e:f6:a8:20:c6:f9:8b:3b:42:40:
38:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:89:07:F3:24:0E:E8:CE:64:46:C8:7C:83:BF:A1:A2:9F:4F:E2:AA
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135402.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.204.0/24
82.24.120.0/24
82.25.39.0/24
Signature Algorithm: sha256WithRSAEncryption
81:47:93:11:ce:b8:bb:f3:38:ea:bf:03:1d:3c:c1:fa:38:69:
a4:35:32:ee:0f:e7:7d:f7:4a:70:bf:f5:ab:80:ab:ce:9e:d8:
2b:2f:94:5e:24:19:f4:c6:6c:a2:3c:27:bc:7a:7c:50:10:ac:
6c:66:50:5f:ab:93:3f:b3:30:ab:13:0b:fc:81:f3:d9:50:a1:
5c:6a:17:51:f4:93:72:3e:ac:74:9c:4b:eb:ff:f9:65:4e:a2:
0a:f3:25:90:f8:27:cb:b2:2d:33:0d:bc:54:b5:5d:21:d7:8f:
2d:84:03:02:dc:29:44:7c:73:cb:3e:4d:30:41:d1:ed:41:c7:
8a:1d:b3:d8:01:b0:7a:cd:7a:c2:9b:9e:f3:a8:98:88:f4:5d:
44:e1:5c:b2:f9:36:a1:33:45:85:76:81:42:f0:a5:0a:29:ac:
12:74:6a:bf:7d:be:fb:3b:61:e5:5f:77:69:c4:2f:ac:78:c8:
56:ee:80:dd:7a:f3:ec:24:81:46:36:cc:b0:37:5b:f6:f2:70:
ac:4b:3a:cc:5b:4c:f2:7c:c7:91:d2:ed:f4:8b:b9:a5:36:67:
27:c9:62:f2:17:90:f2:09:8c:c6:1b:7f:8d:fe:10:02:1d:5d:
df:55:26:84:8c:18:aa:fc:6b:71:bf:8d:04:d6:d4:14:df:50:
5d:8f:77:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:39:08 2025 by rpki-client