Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS136809.roa
File: AS136809.roa (raw, json)
Hash identifier: SN/6OdU2mOuRoaGRTxpMiFKsTisbLs7ElsiavOBFivY=
Subject key identifier: 20:61:89:3F:B7:D2:DC:EA:6D:BF:E0:AA:5C:22:D4:98:21:BE:AD:15
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 685B3C979042671C0A9B0410100DC97CB13A9B2D
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS136809.roa
Signing time: Sat 14 Nov 2026 23:29:21 +0000
ROA not before: Sat 14 Nov 2026 23:24:21 +0000
ROA not after: Sat 13 Nov 2027 23:29:21 +0000
asID: 136809
IP address blocks: 177.28.10.0/24 maxlen: 24
177.29.244.0/24 maxlen: 24
177.111.69.0/24 maxlen: 24
177.111.103.0/24 maxlen: 24
177.111.137.0/24 maxlen: 24
177.111.194.0/24 maxlen: 24
177.111.228.0/24 maxlen: 24
177.122.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:5b:3c:97:90:42:67:1c:0a:9b:04:10:10:0d:c9:7c:b1:3a:9b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Nov 14 23:24:21 2026 GMT
Not After : Nov 13 23:29:21 2027 GMT
Subject: CN=2061893FB7D2DCEA6DBFE0AA5C22D49821BEAD15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:26:61:c8:37:d5:1b:44:e0:bf:0f:09:4a:ac:
b7:f4:15:07:26:ed:07:26:10:3c:36:66:58:9d:68:
12:d7:a2:65:fb:38:5f:a4:00:d6:62:8b:53:97:2d:
3b:89:58:da:2a:3c:a7:07:20:e4:e5:04:35:21:5e:
c7:d6:e7:fc:02:df:26:2d:7d:49:e3:7f:37:d9:37:
6c:1c:ea:8e:42:27:ae:6c:d2:1a:24:9b:d6:85:6d:
f8:25:35:fc:2c:47:00:93:1d:78:4d:52:71:c0:15:
12:b1:17:0b:a3:57:5f:02:be:f7:dc:c7:4a:12:91:
ab:89:8f:74:36:2e:ce:33:fc:be:01:9d:b8:71:e9:
fd:5d:bc:ff:db:5b:68:ef:87:1c:a9:02:40:87:d3:
b4:a0:56:65:38:cd:38:c5:1e:b4:71:54:89:e4:ae:
52:99:f5:e2:d1:e6:0e:c3:14:03:41:c3:b9:bb:7c:
51:7f:54:5c:88:e5:67:0f:74:97:d0:9d:4d:a1:77:
6a:54:72:a8:d0:99:6c:f4:5e:31:5a:17:c7:88:a4:
16:96:d0:04:33:4b:3b:c6:10:e4:58:cf:b8:4b:62:
4a:b4:4c:b2:56:5b:eb:4e:2e:7f:57:c1:8c:fe:55:
93:2b:a8:b5:94:aa:d9:9c:65:8b:c8:d2:15:63:90:
ab:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:61:89:3F:B7:D2:DC:EA:6D:BF:E0:AA:5C:22:D4:98:21:BE:AD:15
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS136809.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.28.10.0/24
177.29.244.0/24
177.111.69.0/24
177.111.103.0/24
177.111.137.0/24
177.111.194.0/24
177.111.228.0/24
177.122.30.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:ad:16:a2:ef:b7:65:29:b8:47:d5:2f:49:3b:b1:cf:1f:62:
61:a4:bd:12:f1:93:28:69:6f:65:f9:27:ef:08:95:b9:ff:5e:
37:dc:ad:fe:37:17:72:3e:6b:c9:03:d9:e7:cd:94:30:0b:ab:
a2:6a:61:0f:8d:a5:d5:9c:8e:08:96:25:b6:61:f7:1b:d0:de:
1f:23:9e:a2:ba:a8:5b:b0:eb:84:42:b7:61:2f:ff:5e:ff:98:
10:a8:46:be:96:66:ac:87:42:93:73:62:7b:69:d3:d7:28:43:
bd:d9:4e:99:b2:e2:2e:a2:e8:38:cb:24:07:13:3e:23:31:bb:
02:a3:2c:3c:99:7b:08:a6:29:e8:71:e4:be:4c:ae:a2:f0:1b:
ef:57:da:00:83:01:a1:62:5c:57:f6:f0:a5:fe:eb:60:93:b9:
7a:32:29:6f:ad:f7:f5:14:2c:4e:19:e2:4f:e5:e2:4c:37:d2:
32:e7:98:65:1d:c4:cd:72:9e:8d:f0:2a:db:6a:c1:b6:7d:f2:
b6:22:46:d3:ec:81:58:c0:50:29:37:54:2c:8d:19:e6:e6:8a:
42:b1:70:59:58:9b:13:95:7b:91:f4:16:02:db:88:e6:ef:3b:
c1:ff:71:f9:de:1a:b8:85:fd:cf:86:2e:43:a8:31:99:38:c1:
f5:36:94:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:02:40 2026 by rpki-client