Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137235.roa
File: AS137235.roa (raw, json)
Hash identifier: 3wNBUP11WZGUUt4WtZOSMJmhdYhIWE1L6dCjv9xnGcw=
Subject key identifier: CD:B3:31:37:F6:26:2F:1E:FA:63:4D:17:0F:40:B0:6E:E8:BF:4C:D6
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 50CBB524D66D20501EB3ADB0F7CFB981E86AF36F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137235.roa
Signing time: Sat 24 Oct 2026 00:06:02 +0000
ROA not before: Sat 24 Oct 2026 00:01:02 +0000
ROA not after: Sat 23 Oct 2027 00:06:02 +0000
asID: 137235
IP address blocks: 82.47.55.0/24 maxlen: 24
178.83.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 11:17:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:cb:b5:24:d6:6d:20:50:1e:b3:ad:b0:f7:cf:b9:81:e8:6a:f3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 24 00:01:02 2026 GMT
Not After : Oct 23 00:06:02 2027 GMT
Subject: CN=CDB33137F6262F1EFA634D170F40B06EE8BF4CD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:97:a8:e5:9b:9e:1c:a4:1d:1d:dd:ff:ea:f0:
f5:06:22:25:6f:89:75:8b:5e:36:a6:85:bb:11:d4:
b1:6b:37:d9:5b:20:ed:41:1c:5d:54:a8:56:6c:79:
58:e8:af:b4:a6:ce:8b:1e:11:e2:b0:c5:d1:ae:00:
9d:46:b6:64:8a:a5:a3:3d:9d:e2:58:11:3c:47:20:
a4:4b:34:be:a4:da:ea:0c:48:fd:61:e2:22:d3:e0:
56:79:90:55:ae:a4:71:89:42:44:07:99:bb:5a:c8:
83:d7:e9:4b:a1:db:ad:73:73:4b:39:a8:65:16:f5:
52:06:b8:ac:3f:ea:ca:9f:ae:07:0d:01:e0:6a:d3:
7a:63:d9:01:21:94:70:dd:4a:50:78:87:e4:fe:6e:
be:02:c9:83:5a:a3:2e:59:40:02:1d:03:c2:48:02:
11:4f:6f:6d:d2:42:d1:b1:fa:7c:74:e2:5b:5b:b8:
05:c4:55:f3:69:95:d4:47:c0:5c:24:33:1d:a7:38:
5b:32:b7:8c:1d:e8:c3:19:f9:2a:87:1e:fd:eb:a8:
a4:bd:e9:49:b3:5a:67:ec:3c:bf:a8:fd:cf:cf:99:
5c:ca:57:c5:3a:cf:ff:a9:06:5d:41:ab:11:c5:5e:
a8:3d:1b:eb:8c:33:25:bd:75:8f:69:f1:03:b8:09:
79:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B3:31:37:F6:26:2F:1E:FA:63:4D:17:0F:40:B0:6E:E8:BF:4C:D6
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.55.0/24
178.83.93.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:79:4f:88:30:8a:2e:87:da:3c:30:2d:5d:3c:9c:5f:0a:19:
8c:a1:d1:5e:92:64:55:e8:1c:7b:a4:9d:fe:18:d6:92:a7:8e:
d7:c6:22:14:4f:db:6e:b8:6b:c9:da:7e:e5:08:46:e6:b7:f6:
8d:0d:92:5f:89:cb:9e:b6:b2:97:50:5b:eb:54:33:9b:49:52:
a7:e6:c4:a9:e3:2a:68:a4:8b:ec:40:ad:07:4f:c5:fa:1e:2e:
08:86:f0:80:9e:14:f4:32:9c:a1:2a:43:7b:8d:c4:98:7c:87:
df:be:d3:f9:56:94:5a:fe:e7:e9:21:36:55:97:ac:7d:c2:84:
42:e5:93:06:40:58:04:76:95:85:da:00:f9:8d:9c:e5:44:8b:
59:22:63:4b:d3:fa:07:97:9f:57:c7:cd:09:01:0f:41:6c:3a:
b1:dd:37:6d:4d:1a:3d:38:01:08:61:f9:de:d4:0a:97:f3:16:
93:69:b2:75:79:b9:5e:5d:3e:e8:3d:1c:7a:b0:3a:2a:a4:ab:
e1:1f:44:a2:23:ad:ed:cb:79:6a:9d:bb:8e:05:21:d8:a3:50:
ec:16:53:cd:f9:c3:bd:40:1b:0f:9e:7a:97:1b:e4:f8:80:9a:
55:ef:6d:81:6f:ad:c7:ae:4c:a1:18:7b:b6:bf:92:e2:ac:9a:
df:53:bb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 17:30:02 2026 by rpki-client