Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137517.roa
File: AS137517.roa (raw, json)
Hash identifier: lMGPOfU9f9JdlnOIiVsAOoPg/NrVZxNNBWXAT+J7qT0=
Subject key identifier: 71:65:EB:1A:5C:A7:7E:2D:AF:96:A3:FD:30:1A:10:B8:25:75:9F:12
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0C807BC022FFD7E2337685B8A775AEC339F2A479
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137517.roa
Signing time: Tue 24 Feb 2026 10:15:55 +0000
ROA not before: Tue 24 Feb 2026 10:10:55 +0000
ROA not after: Tue 23 Feb 2027 10:15:55 +0000
asID: 137517
IP address blocks: 82.21.65.0/24 maxlen: 24
178.83.173.0/24 maxlen: 24
178.83.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:80:7b:c0:22:ff:d7:e2:33:76:85:b8:a7:75:ae:c3:39:f2:a4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 24 10:10:55 2026 GMT
Not After : Feb 23 10:15:55 2027 GMT
Subject: CN=7165EB1A5CA77E2DAF96A3FD301A10B825759F12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0e:13:39:df:e0:3b:db:38:c9:c3:a0:5f:95:
c6:b8:c9:aa:60:ce:e0:c9:46:94:34:c0:10:2d:f1:
aa:4b:81:62:7a:0d:6a:d1:cb:2b:dc:73:de:5f:f4:
82:4a:68:66:c2:c1:58:b0:d9:f9:bb:1d:d3:e2:f4:
26:ea:c2:da:2a:aa:85:63:de:1c:4b:c0:21:66:dd:
28:0c:1a:be:cc:5e:25:98:ae:3a:35:00:7c:e5:64:
e1:09:3c:ed:48:2b:6e:26:f4:ba:8c:31:59:fb:b9:
98:01:ef:68:22:01:69:91:64:e8:46:55:97:db:79:
78:b3:6f:47:9e:86:33:f0:fe:5a:4d:31:b0:aa:8f:
a8:1b:1f:be:58:e3:20:51:47:c6:f0:13:9b:b9:65:
59:61:41:82:e8:5c:83:7c:e6:7e:7e:25:b9:38:09:
de:90:31:dc:5c:43:d8:d3:95:aa:73:4f:d2:74:63:
a3:29:75:89:a1:10:0f:96:06:d6:4d:03:0f:1c:0a:
20:8d:50:83:73:f4:3b:60:15:21:00:86:76:26:ea:
33:60:7c:bc:a7:e6:37:bb:2c:7e:91:bf:ff:34:3c:
cd:18:2a:0e:bc:45:e7:3c:07:1f:25:be:fe:c9:c4:
19:3c:1c:24:04:90:e0:35:eb:c2:23:c9:78:2f:a1:
72:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:65:EB:1A:5C:A7:7E:2D:AF:96:A3:FD:30:1A:10:B8:25:75:9F:12
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137517.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.65.0/24
178.83.173.0/24
178.83.229.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:90:e0:72:21:2b:d8:7a:3b:38:aa:87:be:78:cc:97:ef:4c:
45:0a:fc:f3:99:5b:76:1f:fd:07:c0:89:5c:3b:f9:15:3b:4e:
65:64:41:42:e9:58:7b:dd:97:46:f9:34:82:28:f7:99:68:f7:
b4:0a:fa:27:1e:50:d9:f8:ed:7f:a0:34:c7:55:ce:cd:41:c7:
f0:a5:88:3c:77:e8:37:d6:ed:5c:b7:5a:dd:1d:d9:1b:29:29:
73:fc:24:73:a8:86:df:ff:f8:42:6d:be:37:b3:d6:ec:27:68:
41:7a:2d:a9:f3:db:ce:8e:13:10:6c:17:9d:f1:81:5f:55:6f:
2f:74:a8:f6:af:ee:09:0b:53:09:2c:fd:e3:84:94:d8:7f:fa:
3e:0f:29:b0:5a:8e:74:5e:b5:a4:a6:ae:35:ba:3e:bc:4b:7e:
71:33:43:23:62:65:a7:d6:65:e7:e6:75:b0:dc:ca:a5:78:81:
82:80:b9:96:cc:ca:c8:7e:da:2c:d2:4e:39:25:35:04:20:3f:
88:72:67:92:39:c0:c0:2c:96:62:f9:5a:7b:e8:d4:05:35:89:
dc:3f:82:7d:5b:db:dd:e9:81:97:19:52:06:e7:73:d7:f4:0b:
14:d0:37:96:0b:c2:c1:98:0d:20:3d:82:c5:44:f5:d7:62:fe:
a4:0d:12:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:12:57 2026 by rpki-client