Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS136510.roa
File: AS136510.roa (raw, json)
Hash identifier: VdiaA48c7rGe1eUYxNjRGChMo+RXjkZfU3hDXMok0/k=
Subject key identifier: 73:C9:EA:F4:D4:A5:BF:7C:1C:3B:5C:1E:11:30:47:16:54:2A:25:5D
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 5490FC992480BC39257FB6447EE4905F7BE83728
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS136510.roa
Signing time: Mon 21 Jul 2025 09:54:13 +0000
ROA not before: Mon 21 Jul 2025 09:49:13 +0000
ROA not after: Mon 20 Jul 2026 09:54:13 +0000
asID: 136510
IP address blocks: 141.11.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:12:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:90:fc:99:24:80:bc:39:25:7f:b6:44:7e:e4:90:5f:7b:e8:37:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 21 09:49:13 2025 GMT
Not After : Jul 20 09:54:13 2026 GMT
Subject: CN=73C9EAF4D4A5BF7C1C3B5C1E11304716542A255D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:a2:21:83:5e:fe:75:ee:c9:bf:70:f7:79:
74:83:ca:be:08:9d:27:9d:dc:af:66:c6:24:d3:1e:
ee:13:65:73:17:ea:78:ff:99:e4:81:59:5a:48:9b:
83:7e:62:e1:51:91:2f:c3:61:c4:60:46:b1:9a:60:
d0:a9:a8:cf:92:2e:bc:81:30:24:8b:c6:b4:91:9e:
48:6d:7d:ea:d7:df:33:ce:44:7d:7b:83:f7:af:6c:
ac:a2:2b:9c:b2:11:9c:bc:63:e2:4c:1d:7c:32:69:
1a:5e:48:ae:73:64:7d:99:d1:7a:8f:d4:7a:d2:22:
b2:24:1f:37:a8:9e:d6:26:39:5b:a4:e9:99:70:31:
9e:f2:41:a5:d7:cb:f0:12:85:41:8e:78:eb:95:f6:
63:6f:20:ba:a2:dd:96:22:91:d3:48:33:d5:aa:2d:
b1:7e:48:37:e5:eb:fe:8a:8a:0b:ab:e5:a0:82:8f:
66:13:0a:88:f1:b1:6a:03:e3:cc:0e:b5:6d:90:a1:
61:76:b4:cc:fb:6b:69:3b:9b:6d:6c:75:cd:3e:f7:
da:8b:d4:09:1d:46:be:ce:5e:8b:b4:60:25:f8:93:
b1:f0:ac:f9:4b:14:1e:9f:79:69:49:43:85:fc:d2:
ed:b3:d7:4f:67:f7:0b:b2:d3:7d:98:eb:43:3a:64:
9c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C9:EA:F4:D4:A5:BF:7C:1C:3B:5C:1E:11:30:47:16:54:2A:25:5D
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS136510.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.43.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:69:ad:f2:12:9d:1b:20:c1:aa:7c:ef:00:50:8d:c3:07:98:
f9:f0:bb:77:f8:dd:8d:e7:e7:1c:97:d9:18:d6:b2:62:32:6c:
8f:17:89:e2:ec:ee:c6:d3:63:c5:0e:d9:80:17:a1:b8:3f:27:
5d:63:be:ad:64:c4:a6:98:90:5d:f1:3c:46:f8:df:90:23:ad:
05:55:00:8d:11:35:4a:77:44:c4:6d:08:31:d7:b6:fd:00:11:
06:99:e3:8e:cc:a7:e0:1c:d4:8c:8b:53:bc:19:68:c1:f5:7c:
59:07:81:cc:b0:5c:a2:66:07:5c:06:d9:82:99:77:63:eb:27:
a6:38:6c:bf:38:53:eb:f7:68:de:e2:dc:bd:08:6e:78:50:4b:
56:1f:18:90:39:c4:bc:67:0b:71:8f:ac:45:69:b2:63:22:9b:
84:5f:c3:cc:8e:76:e7:0e:e6:b3:90:4e:b9:47:8f:5f:18:a9:
06:bd:71:0f:83:31:68:ab:fc:2e:f3:4f:9c:f5:23:b1:36:41:
b7:c9:9c:13:02:6e:4e:4e:f1:b8:a8:23:69:5c:09:ae:f0:79:
08:25:02:17:b7:5f:fb:a5:df:90:9c:c3:9d:fa:5a:60:3d:eb:
bf:3e:68:dd:b7:52:d1:89:fd:63:36:c8:c9:c8:b0:7b:67:4c:
bb:e5:eb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:41:00 2025 by rpki-client