Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135402.roa
File: AS135402.roa (raw, json)
Hash identifier: 1eVm3yRUAhciGGswZDlg8AQLoGyWmACa/gD24/8K/CA=
Subject key identifier: AE:47:85:BC:F0:06:1B:9D:B4:50:76:DA:A0:A7:10:7D:5A:C8:2D:5A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 33D1034E0490852B8F60B72CDC42862AC6AF6BF8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135402.roa
Signing time: Thu 02 Apr 2026 00:11:44 +0000
ROA not before: Thu 02 Apr 2026 00:06:44 +0000
ROA not after: Thu 01 Apr 2027 00:11:44 +0000
asID: 135402
IP address blocks: 82.21.204.0/24 maxlen: 24
178.83.101.0/24 maxlen: 24
178.83.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:d1:03:4e:04:90:85:2b:8f:60:b7:2c:dc:42:86:2a:c6:af:6b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 2 00:06:44 2026 GMT
Not After : Apr 1 00:11:44 2027 GMT
Subject: CN=AE4785BCF0061B9DB45076DAA0A7107D5AC82D5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:67:ff:c0:16:6d:57:e5:62:a2:77:cf:cd:
8a:32:52:b6:cc:e4:ec:01:db:0e:ce:00:37:c3:f6:
c7:f2:bc:a4:03:9d:49:44:15:dc:12:eb:4b:0c:99:
f0:c1:8a:fa:8c:0d:81:68:7c:51:4c:93:b9:9a:c8:
01:42:76:6f:0f:b6:45:14:83:61:17:4d:5d:3b:21:
86:47:ef:e9:62:40:8c:8d:e9:22:dc:bb:de:6f:13:
f6:07:1f:fd:88:07:96:c2:eb:b4:9b:83:77:df:22:
cc:78:88:ec:7d:59:a7:c2:9d:c0:85:37:e2:d4:69:
e8:3c:da:6e:6e:c2:88:74:73:17:26:66:a7:4b:a3:
0d:bc:66:15:fe:e0:e0:97:8a:7e:55:0a:f9:7e:28:
44:24:c6:b9:f8:57:03:20:6f:08:36:e1:fd:c1:f6:
65:04:cc:d1:31:a6:6a:ac:e2:17:c8:21:3c:6b:26:
e2:6c:01:ed:36:17:af:eb:b9:3c:a2:3d:39:4a:a2:
1b:64:0e:b4:5a:68:3e:5e:8d:e9:fc:08:fa:5d:9c:
0e:65:70:ed:f5:26:aa:17:d1:06:5c:b0:52:82:c1:
01:e2:34:5a:6e:3c:35:4d:cb:95:76:f8:06:67:e2:
01:7a:6f:f7:27:ce:90:80:f2:ae:f8:cb:4d:08:2b:
5e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:47:85:BC:F0:06:1B:9D:B4:50:76:DA:A0:A7:10:7D:5A:C8:2D:5A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135402.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.204.0/24
178.83.101.0/24
178.83.195.0/24
Signature Algorithm: sha256WithRSAEncryption
32:45:1c:c8:69:4e:57:85:38:4c:6b:11:87:b7:67:cd:a3:36:
8d:11:81:cd:15:59:e5:21:3e:4b:c3:66:e5:e8:11:59:80:4a:
a6:39:2b:3e:7b:a0:d1:92:46:99:47:de:55:29:31:27:0a:23:
13:8d:41:b5:e5:cc:60:f1:24:04:e4:18:08:41:ac:d8:70:09:
14:42:9b:2e:f0:8f:76:32:b0:58:43:b4:9d:d9:40:4b:29:48:
2b:42:8e:b0:1f:6a:1b:19:42:99:15:bf:d1:32:e9:7b:43:73:
67:46:c9:c6:9b:db:3b:7c:23:73:f0:21:fa:89:38:9f:70:1b:
a6:2e:22:30:f1:e2:7e:6e:f2:e7:de:58:48:42:a5:c3:5d:f9:
6b:fe:e9:ea:1c:01:cb:08:88:11:bf:c4:6e:8e:34:fc:db:98:
1b:a9:fb:db:8e:7c:c3:3b:da:c8:58:f2:1f:2d:9c:35:0c:28:
45:e7:32:a8:fd:fe:24:42:3d:9b:a7:5b:8e:6d:cb:38:a9:de:
cc:9a:df:88:c4:ec:03:59:44:6a:9c:2d:01:25:cd:89:cf:74:
c5:81:7c:bb:ce:3a:c8:fc:60:e0:be:58:68:83:d4:2c:a9:78:
aa:4e:d4:f3:e6:b1:56:ba:f1:1a:15:4b:a4:12:3b:54:d4:c8:
2c:ae:f2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:01:40 2026 by rpki-client