Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135542.roa
File: AS135542.roa (raw, json)
Hash identifier: n5c+0HZVwsbxirFrSzSi6X+84xu94nlxBqgrv7bNIpQ=
Subject key identifier: C4:93:96:E0:D8:6A:33:83:35:13:12:B8:F2:C4:DE:CE:34:D2:91:AE
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 07A8B0E2F645FED695B799F30FC24EB56A2B4563
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135542.roa
Signing time: Fri 11 Sep 2026 06:49:34 +0000
ROA not before: Fri 11 Sep 2026 06:44:34 +0000
ROA not after: Fri 10 Sep 2027 06:49:34 +0000
asID: 135542
IP address blocks: 2a13:9500:ee::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:a8:b0:e2:f6:45:fe:d6:95:b7:99:f3:0f:c2:4e:b5:6a:2b:45:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 11 06:44:34 2026 GMT
Not After : Sep 10 06:49:34 2027 GMT
Subject: CN=C49396E0D86A3383351312B8F2C4DECE34D291AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:49:dc:03:77:c0:54:6f:99:33:ee:98:89:6d:
ab:44:e0:b9:d8:a2:87:4a:5b:a8:bd:30:74:1d:ce:
fd:0b:dc:c6:32:a0:63:8c:1e:d0:80:6e:ca:c6:b7:
f7:c5:07:44:59:fa:f8:8d:1c:0c:21:47:3e:b4:a1:
be:bb:63:48:ad:42:88:fb:fb:11:a1:58:24:e6:ec:
8e:59:e6:1c:9e:ac:23:ef:37:de:e0:e3:75:88:8c:
c5:d3:1d:01:42:b0:4c:fb:f1:c2:d8:e8:7d:e1:8e:
e0:69:f8:3e:1f:22:45:3a:49:a0:4b:d8:dd:a6:bb:
63:ad:05:29:1e:c0:be:fe:f0:14:c2:6b:ee:eb:73:
36:93:78:a0:a4:45:31:24:28:f9:dd:4b:75:d1:4d:
d7:ed:6b:c8:31:45:1f:80:64:c3:5e:86:3e:43:20:
74:98:4a:d8:a6:12:d6:17:c6:cb:b7:3c:c6:9d:dc:
27:40:43:a2:f6:4e:68:70:0b:1b:b2:7d:89:a2:2b:
1d:93:5c:0c:04:2e:a0:c8:a0:87:91:8f:ce:54:78:
22:b4:8c:e9:b0:e7:a3:6b:97:15:04:71:4c:84:b3:
87:2f:5f:6d:92:9e:2e:7e:a2:ce:4e:55:16:31:67:
9d:5b:9e:b8:be:46:62:d0:c6:45:67:86:57:8d:af:
66:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:93:96:E0:D8:6A:33:83:35:13:12:B8:F2:C4:DE:CE:34:D2:91:AE
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135542.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:ee::/48
Signature Algorithm: sha256WithRSAEncryption
10:bc:69:03:cf:8d:b9:21:a5:e5:4f:69:8b:1b:5d:c2:8e:cc:
3a:3e:23:eb:f9:06:38:db:02:85:ed:0b:61:b3:75:22:cd:39:
44:2e:5d:a8:4c:47:d0:2d:bf:3a:c7:4c:d0:1e:40:74:13:38:
7f:a4:a7:17:0a:79:62:ce:75:b3:8a:3f:55:77:14:f4:c8:55:
3e:1a:40:88:d8:b7:bc:1f:13:41:76:22:f4:6b:4c:ba:6f:5c:
02:81:72:7a:8a:1e:6a:0e:45:bc:44:3f:4c:2f:24:91:e8:11:
ee:b9:fd:b0:48:a7:f1:ab:c0:9f:f4:68:9e:52:52:c2:3f:29:
ea:a7:b3:bc:5c:51:5b:96:94:78:9e:fa:a2:3c:58:12:c5:87:
d5:33:a7:f3:ab:d6:b8:39:a0:d3:80:26:0b:54:20:73:c6:0a:
78:b8:b1:8b:74:42:de:83:ef:d6:6f:56:66:7e:40:ed:00:c1:
19:92:19:39:87:18:a6:c9:45:b0:1c:90:7f:11:4a:89:87:3c:
53:39:4b:5d:e4:79:64:30:25:e6:7d:51:fc:a8:3b:10:fd:16:
1b:39:3c:bf:55:ea:cd:a1:c0:61:02:9f:32:d3:a6:f2:e4:8d:
93:e7:45:d0:3f:99:87:71:3d:e9:4f:46:0f:e8:e2:d6:bf:5a:
ad:ad:e7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:55:32 2026 by rpki-client