Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137235.roa
File: AS137235.roa (raw, json)
Hash identifier: AGQHK++f1XvaFI0x7Vilwk1/hbPSHOaYOO9IbDV09nA=
Subject key identifier: B4:5F:C0:3C:6A:31:E1:99:12:EF:CE:59:83:D7:2C:CA:14:12:13:A3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 38E57F5798443056C4AB91C9A139259AD9A17B53
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137235.roa
Signing time: Tue 24 Feb 2026 10:14:04 +0000
ROA not before: Tue 24 Feb 2026 10:09:04 +0000
ROA not after: Tue 23 Feb 2027 10:14:04 +0000
asID: 137235
IP address blocks: 82.22.171.0/24 maxlen: 24
178.83.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:e5:7f:57:98:44:30:56:c4:ab:91:c9:a1:39:25:9a:d9:a1:7b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 24 10:09:04 2026 GMT
Not After : Feb 23 10:14:04 2027 GMT
Subject: CN=B45FC03C6A31E19912EFCE5983D72CCA141213A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:13:e0:1d:84:95:4d:ad:e0:e0:ff:9a:91:
6a:96:d2:eb:82:52:0d:68:d8:89:14:d6:45:c4:cb:
95:16:92:e9:99:dc:92:b2:fa:68:22:c8:6b:4a:d3:
e8:4e:27:5d:8f:85:19:6c:3e:5e:23:c3:70:0f:6c:
6b:f9:68:e0:67:b4:79:fa:f8:96:63:d5:44:24:b8:
01:cb:5b:60:23:e4:31:8f:e5:3d:bd:02:09:54:e5:
65:28:4c:49:e0:43:6b:d7:a6:c7:48:41:a0:73:8d:
22:9a:93:39:5d:ab:d7:96:12:f2:de:a9:0c:34:67:
c5:e4:6c:07:39:be:01:c7:3b:4e:4c:d1:9c:a6:8a:
6c:ba:f2:b8:b2:76:98:4f:9f:03:ea:0c:ad:fb:0e:
51:33:29:1f:78:59:4b:5c:34:87:2f:e8:da:ea:2a:
18:06:2d:19:64:2a:0d:96:92:df:2b:4c:ba:f9:7f:
46:0a:64:08:04:8c:ab:42:9e:57:6c:dc:44:e6:ff:
62:46:31:39:ce:7f:0b:10:b5:3d:7e:a8:e0:6d:f0:
01:bb:f7:fb:c1:96:3d:50:2e:56:98:54:35:09:55:
3e:c3:3f:0a:33:bc:ba:f4:c1:22:80:bb:ed:f8:65:
93:f3:b8:3e:40:ec:b9:b3:ba:be:54:62:e8:48:c8:
65:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5F:C0:3C:6A:31:E1:99:12:EF:CE:59:83:D7:2C:CA:14:12:13:A3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.171.0/24
178.83.190.0/24
Signature Algorithm: sha256WithRSAEncryption
87:8a:75:af:65:63:34:52:56:6a:f7:c1:31:ab:06:14:9f:c0:
b0:c6:8a:89:23:a0:a8:2f:3d:15:da:05:da:34:7e:63:75:12:
e3:e3:3d:30:6b:e9:62:61:96:f5:fb:7a:ae:01:48:39:d0:fa:
2d:a8:57:26:1d:6f:9f:5a:60:62:6a:5f:2a:7f:a1:80:38:4b:
93:3f:f8:64:4d:a1:b6:12:05:86:ea:e2:1a:82:f5:71:17:c2:
2f:c4:30:07:2e:da:1e:8b:f2:5a:f9:9a:1e:e1:54:d1:e8:1b:
0c:bc:ae:16:8d:9e:cb:77:0e:b4:c6:65:ae:0d:0c:a1:6b:e5:
20:b3:47:df:5b:7d:b0:dd:5b:cd:62:6d:c7:2f:b0:d0:95:7c:
f9:a1:3a:08:03:01:4a:86:1e:85:ca:b3:e2:40:c3:02:b8:f7:
82:80:31:d7:e0:72:62:5c:3d:17:4c:b5:3d:16:de:d6:af:f7:
c7:df:9c:ce:cc:01:eb:2f:5e:b5:2d:24:1d:2b:4a:5e:11:34:
c2:b3:35:13:32:ba:ba:33:87:80:37:b8:0f:d8:81:44:91:98:
30:cd:73:b0:15:fb:bc:55:33:f7:ae:05:fe:75:10:39:84:64:
e8:11:5a:0a:97:ed:02:c1:72:76:f8:50:ff:08:1f:e8:be:12:
c4:66:70:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:13:21 2026 by rpki-client