Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS136557.roa
File: AS136557.roa (raw, json)
Hash identifier: gys3HtoPfFfzSmzsr5HRszlLtjG7auEefEFYNuVwJ3w=
Subject key identifier: FC:E7:D1:5E:73:00:40:7C:ED:30:B2:A9:14:16:E9:A9:86:D2:FF:75
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 5E47BE8A9D645CFA563A08A8BCA587C9A053C2C9
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS136557.roa
Signing time: Wed 15 Apr 2026 11:47:05 +0000
ROA not before: Wed 15 Apr 2026 11:42:05 +0000
ROA not after: Wed 14 Apr 2027 11:47:05 +0000
asID: 136557
IP address blocks: 45.135.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 23:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:47:be:8a:9d:64:5c:fa:56:3a:08:a8:bc:a5:87:c9:a0:53:c2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Apr 15 11:42:05 2026 GMT
Not After : Apr 14 11:47:05 2027 GMT
Subject: CN=FCE7D15E7300407CED30B2A91416E9A986D2FF75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f6:7b:76:c1:8b:7b:32:b4:14:e9:a3:53:80:
5a:f5:71:15:50:3d:c1:4a:0b:9a:84:47:16:65:da:
e3:96:b4:d4:6f:ee:6b:87:b0:d8:55:6b:b6:1a:a8:
2b:cc:4c:0a:9e:2c:16:25:81:6f:8f:2c:0d:59:18:
3e:52:76:c2:fe:fc:bb:08:9c:a6:79:0f:df:bb:f0:
f5:65:fa:ec:05:46:97:bc:93:6c:05:40:d1:0e:3a:
42:48:26:c6:98:7e:3d:3e:24:34:8d:50:72:4f:a5:
b5:bd:e6:1a:91:b1:20:76:e9:b1:33:88:1c:37:79:
b0:42:39:64:82:c6:1a:89:7f:74:0a:d2:42:71:fe:
6d:05:40:4a:c9:44:82:d7:bd:ef:43:4d:db:05:a2:
f9:72:cd:6a:94:2e:27:e5:ee:54:47:18:7d:1c:38:
e5:2d:0e:6c:90:20:19:8e:b9:af:db:c0:ef:c7:f3:
9b:c5:fc:67:9c:f3:4b:7e:a8:c2:71:8d:11:5c:af:
64:fb:c4:00:de:3c:47:18:8e:f0:bf:a9:5b:97:fd:
d4:bf:4b:aa:d5:1a:d6:84:ac:32:4e:e5:18:1d:00:
37:bf:a3:55:ac:34:dd:eb:d9:78:23:d0:7f:22:30:
76:a3:8d:2f:54:0e:62:bd:0f:02:34:c7:b7:33:0b:
3c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E7:D1:5E:73:00:40:7C:ED:30:B2:A9:14:16:E9:A9:86:D2:FF:75
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS136557.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.249.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:04:29:a8:37:d2:89:7c:18:9b:a6:ac:90:91:02:d1:60:6b:
db:df:26:c3:db:31:31:4c:ca:2c:34:42:5c:b4:3c:d8:ae:d5:
9d:e4:aa:4e:53:13:f2:28:88:d4:b5:3c:ff:e3:8d:a3:a4:bc:
57:b5:6f:fc:ec:b1:a4:95:10:98:b9:34:19:d1:f6:16:cf:dd:
2c:fb:2b:bc:0e:4c:76:5d:26:63:51:d0:ac:4b:a9:e7:d9:c5:
31:e8:f9:76:78:ec:3d:fe:09:c5:94:7c:c1:f9:78:e1:61:9a:
cf:a8:e8:d0:18:4e:23:5b:fc:27:35:80:35:5f:83:70:b8:60:
2a:5f:16:82:9e:34:61:2d:4d:2a:d1:74:ab:a2:ff:56:20:9b:
f9:0a:12:4b:5d:9f:7d:38:03:85:7d:8d:81:a5:01:76:55:e2:
93:97:b5:6f:6c:0c:ae:80:85:fd:29:e3:a7:1d:b3:55:fb:9c:
f9:42:5a:fd:cb:41:98:65:a7:26:72:68:8e:1d:2b:1f:2b:dd:
52:99:df:32:54:f3:34:fa:73:f0:96:bb:25:c3:db:86:23:ca:
59:3e:7e:5d:27:cb:81:11:1d:85:f5:1b:4f:39:9f:a7:25:11:
3d:b4:94:62:e1:ec:4e:6f:d0:62:fb:ce:c1:eb:99:0e:e3:1c:
a4:c2:64:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:50:10 2026 by rpki-client