Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137331.roa
File: AS137331.roa (raw, json)
Hash identifier: P6QQdd3rjWyxG+8EPmNPdy/dmIQEFZpDjH6uivIm0cw=
Subject key identifier: 76:5A:9A:33:B0:25:13:CB:20:9C:B4:8C:B0:19:C2:6E:9D:62:CD:63
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6786DD1C7D59566A8BFD8D21B7179FBAE817ECA3
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137331.roa
Signing time: Tue 03 Feb 2026 08:37:18 +0000
ROA not before: Tue 03 Feb 2026 08:32:18 +0000
ROA not after: Tue 02 Feb 2027 08:37:18 +0000
asID: 137331
IP address blocks: 178.83.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:86:dd:1c:7d:59:56:6a:8b:fd:8d:21:b7:17:9f:ba:e8:17:ec:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 3 08:32:18 2026 GMT
Not After : Feb 2 08:37:18 2027 GMT
Subject: CN=765A9A33B02513CB209CB48CB019C26E9D62CD63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:78:65:7b:d6:05:94:6d:48:72:87:4f:4d:
2a:33:74:45:35:42:60:34:ae:5f:1c:13:f3:6a:dd:
bf:92:bc:b6:8c:ff:b5:70:ba:bf:8c:71:0f:f8:2c:
29:09:83:f9:7e:d5:ac:d6:f0:d7:c8:d8:66:60:9a:
87:6d:af:3c:0a:cd:bc:33:ce:c1:cf:cd:a9:41:d6:
fd:38:e7:60:a9:0b:a8:e2:fd:46:0c:29:43:3b:e8:
91:03:f5:0a:42:2c:0a:71:da:64:fb:12:7e:9f:17:
c0:e9:32:d7:ce:7a:6d:0b:f6:cc:f9:95:68:6c:e9:
91:bd:08:8c:58:c7:d6:a3:19:a9:d0:d3:b3:d8:e7:
00:89:32:fa:83:2c:42:d9:69:d2:65:3e:0e:8a:7a:
a1:c1:ed:83:55:ea:31:97:8e:34:72:18:62:ec:66:
6b:91:47:a9:d2:53:d0:cb:fe:52:e8:4c:67:ca:ea:
a9:b4:7d:d9:07:41:49:ac:1f:6c:7c:58:2c:dc:ce:
a8:f4:82:43:36:e5:0b:bf:3f:53:71:8a:a7:6e:2d:
42:0d:6e:96:f4:c1:6f:de:38:5e:c8:01:d4:86:e3:
14:4f:8c:e4:41:fb:c8:cf:73:d4:93:48:f2:e2:9c:
2e:fd:19:08:26:ef:05:e2:e7:0b:1f:bf:78:a9:65:
54:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5A:9A:33:B0:25:13:CB:20:9C:B4:8C:B0:19:C2:6E:9D:62:CD:63
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.163.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:60:b2:ea:e6:bc:c3:e4:fb:b4:98:9a:af:46:08:4c:2f:8a:
65:e5:b7:c8:4f:36:93:01:d5:52:db:13:82:60:13:d5:04:4f:
ca:12:31:f6:5b:7a:6e:93:c5:89:ff:bc:f9:67:94:fd:0f:3c:
21:6a:c9:83:ee:5b:73:d6:50:44:24:08:54:44:4a:d7:f1:6b:
9e:1f:90:a3:ef:3c:42:c6:85:6e:8b:ac:13:15:60:25:fa:28:
11:3d:81:13:b7:58:af:8c:9e:5d:e5:7d:d3:78:3a:a1:ee:e3:
92:0b:d6:a2:68:76:7a:85:23:14:33:92:6e:52:60:cf:a8:95:
81:98:2d:cc:41:e2:ba:d7:6a:1b:1a:d6:ce:f2:ab:7e:92:67:
fe:5c:97:09:d2:ad:18:ec:f9:23:59:d3:58:d3:41:e8:2c:ba:
30:b6:e1:34:ea:5a:ee:fd:f6:53:23:94:9b:44:36:1f:c4:7a:
00:21:76:0d:b3:69:ce:f0:00:ee:b3:8e:11:3b:f3:09:f5:c9:
a0:b9:c5:78:e7:fc:4d:f1:3a:23:2d:7a:68:b6:91:e9:9f:6c:
6a:9e:69:0b:9f:07:53:a5:a5:7a:9b:c5:14:93:0d:37:63:af:
75:4e:73:f9:7d:53:30:ba:d2:34:fa:55:cd:6d:f3:d2:2e:ae:
6a:df:5e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:38:01 2026 by rpki-client