Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS136725.roa
File: AS136725.roa (raw, json)
Hash identifier: /ergXzxlzE6ONmoL3gKzL8JZUwfwkG4nFPBqImdQJxs=
Subject key identifier: 4D:06:CF:F8:76:A5:C1:92:71:61:B3:55:91:45:C3:A0:D9:70:70:29
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 0785B4E276A7BDB34334F6CDECD4E84A41940005
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS136725.roa
Signing time: Tue 28 Jul 2026 02:06:00 +0000
ROA not before: Tue 28 Jul 2026 02:01:00 +0000
ROA not after: Tue 27 Jul 2027 02:06:00 +0000
asID: 136725
IP address blocks: 141.11.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:23:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:85:b4:e2:76:a7:bd:b3:43:34:f6:cd:ec:d4:e8:4a:41:94:00:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 28 02:01:00 2026 GMT
Not After : Jul 27 02:06:00 2027 GMT
Subject: CN=4D06CFF876A5C1927161B3559145C3A0D9707029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dd:11:45:d5:e4:0a:4b:ce:28:04:9a:91:51:
65:4b:6d:47:2c:ee:a2:4b:91:14:53:3b:7b:ab:f5:
3a:64:12:08:a4:99:ac:34:16:f5:45:3e:bc:3f:33:
80:21:20:2f:73:e8:91:7b:df:68:bd:03:17:a4:26:
77:74:d8:09:36:64:39:5a:65:a3:f7:85:c3:90:8d:
5b:b6:5a:ed:e5:91:6c:4e:40:cd:e1:e8:57:c3:6e:
78:99:50:ab:f8:1e:d0:5d:11:9b:8d:0a:01:b6:82:
e9:6f:a9:45:bf:1b:03:e9:1d:a8:49:07:f6:47:e8:
cc:11:b1:36:0d:59:41:d3:fb:3d:e9:33:b0:2d:65:
ca:b1:79:77:be:6f:46:e1:71:54:13:09:36:57:7c:
e6:24:4b:c0:f3:a8:bb:e2:fd:69:d9:9d:f9:42:f4:
14:80:ae:69:18:87:35:f7:17:81:7e:7a:99:2e:58:
2d:41:17:fc:b8:93:28:16:04:e3:e4:83:79:fb:a2:
cb:7d:a9:8b:2b:a3:7d:93:1a:b0:5c:ef:5b:5c:29:
b7:1a:15:08:91:b2:7f:13:0f:7b:5c:fb:97:ee:eb:
96:6c:6f:00:9e:5a:42:48:d1:3c:87:a7:d9:a1:c9:
fb:47:e4:32:8b:80:25:76:96:f1:57:78:58:23:33:
db:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:06:CF:F8:76:A5:C1:92:71:61:B3:55:91:45:C3:A0:D9:70:70:29
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS136725.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.93.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ec:77:b6:8a:5f:06:60:fd:db:d4:f6:64:0b:b0:9b:17:0c:
d5:f9:48:8e:d3:c2:b1:04:5a:fa:56:fb:b0:b7:2d:8f:cf:d1:
23:0a:d8:28:68:bf:a6:be:d6:c2:c4:4d:2b:4b:6a:49:ee:39:
bf:dc:10:77:af:c4:b2:25:39:07:fd:2c:30:bb:c2:f2:37:c8:
49:7a:81:2f:be:a2:29:a5:eb:0c:22:c2:7d:0e:ee:70:08:56:
78:cb:89:6b:90:ab:b3:00:1f:21:1e:a9:b6:4e:01:0d:14:27:
8b:dd:20:a9:c3:17:06:e4:15:1e:d5:d0:42:cf:5f:e0:f1:12:
13:c8:1f:99:37:51:a2:5d:6f:ac:47:c1:76:a4:f7:d9:ba:3c:
70:76:5d:90:fd:69:74:02:32:30:79:c5:ff:c3:8c:a0:03:cb:
0b:58:6f:aa:2d:d8:48:bc:6d:c7:26:6a:aa:4f:92:96:6b:b9:
41:aa:06:5a:28:cd:8a:92:56:d2:9f:fd:62:65:95:a7:d7:14:
76:1c:ba:a1:f2:b4:49:a6:a0:8e:33:8f:f3:dc:4f:02:77:69:
a2:07:2d:bb:1f:62:00:b7:77:64:ba:b4:48:ac:8b:2f:c1:bb:
7a:4c:29:cb:c0:ad:80:3b:2b:f3:e2:78:c7:90:66:37:72:46:
82:ad:ad:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:49:15 2026 by rpki-client