Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS137409.roa
File: AS137409.roa (raw, json)
Hash identifier: sVrWE2rbJXgK21iYKryMAGZODadPEbTo8ld/GYs4n9Y=
Subject key identifier: 5B:BA:30:A3:85:DF:9A:5C:F1:6F:70:CD:EF:B9:0F:8B:CF:28:9C:C5
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 447B52A0CF701AE1A5912A49E33EB538A88A94A9
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS137409.roa
Signing time: Tue 22 Sep 2026 05:10:25 +0000
ROA not before: Tue 22 Sep 2026 05:05:25 +0000
ROA not after: Tue 21 Sep 2027 05:10:25 +0000
asID: 137409
IP address blocks: 51.194.224.0/24 maxlen: 24
188.220.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:7b:52:a0:cf:70:1a:e1:a5:91:2a:49:e3:3e:b5:38:a8:8a:94:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 22 05:05:25 2026 GMT
Not After : Sep 21 05:10:25 2027 GMT
Subject: CN=5BBA30A385DF9A5CF16F70CDEFB90F8BCF289CC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:10:2d:06:c0:95:49:ae:5f:e6:ae:1c:0b:3b:
48:17:11:55:a8:de:de:8b:40:65:90:82:6c:01:8a:
e0:39:cd:59:81:8f:71:1d:df:15:04:2d:fe:5d:26:
b6:42:99:67:95:8c:83:5c:1d:48:e3:10:4a:f6:9a:
91:31:a5:48:1b:db:85:11:db:3b:2e:84:17:56:a7:
c0:f6:5b:7b:b3:52:31:da:dc:8b:43:bb:4b:b3:93:
fe:ee:c4:a7:f8:d4:9a:78:f7:5d:64:9d:6d:a7:95:
45:32:04:f5:24:6e:e6:29:20:cb:dc:49:2c:39:0e:
b2:70:b5:22:58:ec:b0:a4:7e:c2:94:4e:c6:44:10:
5c:b3:88:90:c2:85:95:e5:2e:7c:7f:f4:5e:2b:88:
2d:6c:38:10:09:4b:04:2d:a4:04:c8:85:99:c4:64:
f0:1f:7b:82:67:5e:86:1e:e9:94:78:5b:1d:2a:ac:
15:1a:8c:dc:fa:b3:8e:22:de:39:a9:b6:03:42:d4:
0b:72:38:ec:4e:3a:24:c0:c7:87:93:d1:ac:1f:7d:
6d:d6:a9:85:b6:60:2e:19:bb:88:b4:ac:3f:38:42:
41:14:6e:ef:20:36:b2:a9:3d:b8:c8:98:2b:b8:fb:
9e:82:b1:ce:3a:97:43:36:84:a4:5c:c4:18:95:1a:
08:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BA:30:A3:85:DF:9A:5C:F1:6F:70:CD:EF:B9:0F:8B:CF:28:9C:C5
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS137409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.224.0/24
188.220.164.0/24
Signature Algorithm: sha256WithRSAEncryption
77:68:23:cd:6b:44:09:55:8f:bd:16:06:17:c4:3c:39:1f:61:
e8:1e:05:c8:49:bc:5f:2f:da:83:53:b8:95:80:9d:37:f2:c4:
22:47:6a:80:57:3a:99:22:dd:a2:70:45:be:d8:d3:15:39:8b:
f1:b2:6c:d4:5b:4c:01:12:0a:01:61:61:22:8b:97:9d:ff:4e:
29:12:94:47:7c:57:15:bc:20:e9:66:78:db:71:05:84:c5:42:
5c:9d:ba:09:8f:b6:c4:54:26:8c:df:e0:74:0a:14:d1:8a:20:
7a:d8:94:2a:cc:63:e0:28:99:35:f9:68:68:04:5e:62:fb:a4:
33:b1:3c:04:34:e4:9a:89:43:48:31:0a:0c:66:79:55:fc:7f:
a8:ac:87:65:85:74:4b:9a:bb:c6:05:a4:bb:e3:42:e4:a4:43:
8f:71:ef:b5:5e:04:8d:31:bd:6f:8b:97:4b:90:82:6d:93:17:
80:24:72:74:a7:2f:8c:c1:80:c1:3c:c8:19:99:31:21:81:f4:
5d:fe:a5:00:8d:84:99:27:02:80:d7:35:e5:67:a2:85:b3:9b:
8a:67:c1:d2:53:72:48:4b:3c:ae:46:a7:73:cf:13:32:3d:ba:
c4:01:3f:d5:f8:ad:5f:2e:23:94:eb:4f:34:e2:81:f1:bf:fa:
65:c0:b8:69
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIURHtSoM9wGuGlkSpJ4z61OKiKlKkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA5MjIwNTA1MjVaFw0yNzA5MjEwNTEwMjVaMDMxMTAvBgNV
BAMTKDVCQkEzMEEzODVERjlBNUNGMTZGNzBDREVGQjkwRjhCQ0YyODlDQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3EC0GwJVJrl/mrhwLO0gXEVWo
3t6LQGWQgmwBiuA5zVmBj3Ed3xUELf5dJrZCmWeVjINcHUjjEEr2mpExpUgb24UR
2zsuhBdWp8D2W3uzUjHa3ItDu0uzk/7uxKf41Jp4911knW2nlUUyBPUkbuYpIMvc
SSw5DrJwtSJY7LCkfsKUTsZEEFyziJDChZXlLnx/9F4riC1sOBAJSwQtpATIhZnE
ZPAfe4JnXoYe6ZR4Wx0qrBUajNz6s44i3jmptgNC1AtyOOxOOiTAx4eT0awffW3W
qYW2YC4Zu4i0rD84QkEUbu8gNrKpPbjImCu4+56Csc46l0M2hKRcxBiVGgirAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUW7owo4Xfmlzxb3DN77kPi88onMUwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTM3NDA5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAM8Lg
AwQAvNykMA0GCSqGSIb3DQEBCwUAA4IBAQB3aCPNa0QJVY+9FgYXxDw5H2HoHgXI
SbxfL9qDU7iVgJ038sQiR2qAVzqZIt2icEW+2NMVOYvxsmzUW0wBEgoBYWEii5ed
/04pEpRHfFcVvCDpZnjbcQWExUJcnboJj7bEVCaM3+B0ChTRiiB62JQqzGPgKJk1
+WhoBF5i+6QzsTwENOSaiUNIMQoMZnlV/H+orIdlhXRLmrvGBaS740LkpEOPce+1
XgSNMb1vi5dLkIJtkxeAJHJ0py+MwYDBPMgZmTEhgfRd/qUAjYSZJwKA1zXlZ6KF
s5uKZ8HSU3JISzyuRqdzzxMyPbrEAT/V+K1fLiOU60804oHxv/plwLhp
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:34:40 2026 by rpki-client