Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS137235.roa
File: AS137235.roa (raw, json)
Hash identifier: mZYjuhQzLqqOPzPhv9NozT8NyYbCDxshTva6DTmDvfA=
Subject key identifier: 8C:31:44:F3:47:B2:F2:A9:75:F8:2B:A0:71:6F:5B:55:1B:B8:06:4A
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 2C753B157513FE31DC8217B900AF93407627D1B5
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS137235.roa
Signing time: Tue 29 Jul 2025 00:00:29 +0000
ROA not before: Mon 28 Jul 2025 23:55:29 +0000
ROA not after: Tue 28 Jul 2026 00:00:29 +0000
asID: 137235
IP address blocks: 176.53.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:75:3b:15:75:13:fe:31:dc:82:17:b9:00:af:93:40:76:27:d1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jul 28 23:55:29 2025 GMT
Not After : Jul 28 00:00:29 2026 GMT
Subject: CN=8C3144F347B2F2A975F82BA0716F5B551BB8064A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:59:db:c4:e3:d5:b6:ae:9a:a8:47:f6:96:c8:
94:ec:0a:41:25:5d:6f:95:b6:81:5a:a1:bb:f8:33:
6f:4b:8f:22:f1:f2:40:be:bf:a6:07:f8:0d:1b:d3:
6c:3e:84:6c:34:5b:b7:9f:31:f1:f3:75:ed:25:be:
21:ba:19:7c:06:3f:2c:c8:d6:82:0d:f2:b2:be:60:
c6:cd:28:fe:c3:d2:bd:66:b4:b9:ce:0d:b7:39:22:
78:93:94:9b:23:26:71:28:43:95:88:46:36:0d:4b:
2a:e6:c9:16:be:f2:59:b7:a6:cc:ff:20:8d:96:c7:
23:94:53:0a:a9:17:e9:3f:48:fe:ad:59:54:f3:32:
7d:83:93:a4:96:46:ac:81:8b:6c:1a:26:53:3f:3b:
23:46:d6:4b:ea:09:f1:47:e1:a8:07:40:c1:99:ca:
b5:5d:e6:e3:c1:bf:9e:50:1e:c1:7a:bd:1e:05:d1:
d9:56:56:ed:cb:32:09:47:c3:91:e3:9f:83:4a:4a:
cb:5a:ec:b8:22:5e:3c:9d:4d:71:9f:37:ae:b1:db:
79:9b:a6:e0:e6:8f:f9:91:41:50:27:12:67:d1:d7:
3b:dc:f9:6d:46:4e:7e:dd:6b:3c:32:74:1b:81:61:
94:7b:40:b1:df:36:7f:b3:f5:8f:b9:c0:69:76:2b:
7a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:31:44:F3:47:B2:F2:A9:75:F8:2B:A0:71:6F:5B:55:1B:B8:06:4A
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS137235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.168.0/24
Signature Algorithm: sha256WithRSAEncryption
80:79:3e:f8:68:e1:9d:c7:1c:78:13:50:1f:23:1f:82:91:9f:
99:1c:37:85:a8:7e:7d:6c:8e:a1:03:84:bf:83:3c:18:a4:e4:
90:ec:9a:0d:d7:5a:57:91:93:f0:fc:ec:57:53:06:cb:6c:7b:
5f:ef:56:69:c3:a3:6b:d5:a7:aa:db:b2:bb:cf:62:35:12:b9:
e5:de:41:ff:27:6e:ad:f5:2a:98:35:ab:a1:ca:7f:a6:75:56:
0e:c6:65:f0:5a:b8:b8:8b:44:ee:27:27:19:1e:27:cf:2d:5c:
25:c3:e2:b1:21:ab:51:90:ac:9c:eb:54:53:fc:fa:7d:34:0c:
e1:96:d5:89:c2:f2:15:d8:f5:6b:13:d3:a0:72:1a:e3:98:55:
d2:58:4b:ee:3b:95:94:b7:16:aa:e1:58:24:e0:6d:d6:a1:de:
79:a1:8e:87:4b:78:06:bb:32:ac:f6:73:49:f3:ae:61:f1:ee:
ad:3b:91:1b:99:8b:93:a6:27:4a:28:c0:55:ec:c0:4d:e6:37:
ee:70:a3:0a:5a:76:b7:f6:1f:2f:a6:52:23:ae:80:22:19:00:
e7:f0:c3:a3:16:f4:be:e0:63:97:ff:57:bc:c8:89:30:55:bd:
78:66:d9:b0:b0:ae:3d:37:dd:a2:93:8b:3a:b1:1b:41:af:2d:
47:c0:3c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:23:50 2025 by rpki-client