Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS137410.roa
File: AS137410.roa (raw, json)
Hash identifier: bG2d0Y6rBovuPJYbnp+z2G010Rgxd2uaBz/LV7L/768=
Subject key identifier: 9C:94:6C:0B:C3:36:E4:A6:8B:1D:E9:FC:FB:CC:5E:88:5B:EE:54:C6
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 0DE2D59530781391AFEBA85DEBC3137C1F2B42E3
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS137410.roa
Signing time: Sun 15 Nov 2026 12:23:34 +0000
ROA not before: Sun 15 Nov 2026 12:18:34 +0000
ROA not after: Sun 14 Nov 2027 12:23:34 +0000
asID: 137410
IP address blocks: 177.29.253.0/24 maxlen: 24
177.111.60.0/24 maxlen: 24
177.122.229.0/24 maxlen: 24
177.122.232.0/24 maxlen: 24
177.122.241.0/24 maxlen: 24
177.166.74.0/24 maxlen: 24
177.166.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:e2:d5:95:30:78:13:91:af:eb:a8:5d:eb:c3:13:7c:1f:2b:42:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Nov 15 12:18:34 2026 GMT
Not After : Nov 14 12:23:34 2027 GMT
Subject: CN=9C946C0BC336E4A68B1DE9FCFBCC5E885BEE54C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:66:82:1a:89:d5:ef:f3:62:0d:50:89:a2:
78:cf:ab:eb:9d:8d:ff:15:ef:8b:63:a9:2a:76:bf:
ba:31:6f:02:d9:11:03:d1:f0:57:e4:bb:78:00:a3:
e4:a0:87:d0:b5:dd:1c:7c:bc:36:9d:87:3f:a1:58:
57:78:89:1a:d5:75:5c:c2:9b:39:a9:e3:be:6f:9d:
b6:53:3e:13:7f:1c:d8:1a:da:46:f1:22:3a:c8:dc:
30:7f:b9:df:06:e9:8f:c9:42:71:2d:63:b1:cf:9f:
48:a7:be:14:dc:52:ea:f7:58:f7:6b:c9:1a:5b:36:
de:96:e2:28:9d:ec:61:b8:47:59:f2:07:5a:f2:18:
60:72:29:cb:3d:b6:7e:42:b5:08:58:59:27:f2:cd:
7d:af:67:93:6e:da:54:dd:59:df:40:42:ec:0d:b5:
0b:9f:e1:f9:06:29:95:01:d6:29:df:9e:26:79:64:
f1:3e:88:11:c6:1b:e7:ce:6a:a7:71:d4:66:d6:40:
12:d8:46:58:0b:40:c0:ad:d3:8c:57:65:17:fe:3e:
15:65:02:d5:b0:f2:e5:6e:d2:d7:c8:26:d1:a3:71:
55:7e:6a:01:5e:df:cf:f9:c6:1a:0e:d5:ee:18:b4:
c6:70:fe:17:83:8c:30:72:cb:71:2d:1a:07:e7:77:
84:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:94:6C:0B:C3:36:E4:A6:8B:1D:E9:FC:FB:CC:5E:88:5B:EE:54:C6
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS137410.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.29.253.0/24
177.111.60.0/24
177.122.229.0/24
177.122.232.0/24
177.122.241.0/24
177.166.74.0/24
177.166.78.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:73:ac:26:46:b6:f3:55:73:52:13:fb:a5:a5:8f:59:1a:4f:
b7:73:30:f0:87:ea:2d:2a:92:97:06:34:e3:7f:ef:ae:48:c3:
1b:14:31:b6:e2:78:b6:23:e2:27:a0:e9:ef:53:33:cc:56:ce:
18:74:51:36:90:9b:63:0a:f8:58:ce:a0:0e:c4:af:1f:90:e4:
b7:4c:2d:99:b2:f0:43:4f:a5:96:4c:fd:0b:f0:22:12:3b:52:
63:a8:5b:71:d1:2d:68:ef:f7:d8:58:c7:52:4b:d7:7b:41:38:
ca:7f:a5:c1:42:a9:00:b9:d7:9f:b0:7f:3e:79:e0:1c:13:f9:
89:c6:24:a1:13:de:e3:f1:ca:72:87:a3:83:b9:e7:4c:14:f5:
e0:3c:e4:dc:8f:e9:72:cf:0f:7d:d5:21:c9:90:db:fb:29:93:
27:df:02:99:f6:98:a2:20:27:9f:37:fb:cd:34:db:8f:5a:9b:
31:b6:b7:f3:64:94:b8:86:e2:99:6a:3d:b3:f9:ea:99:2b:3d:
ec:08:0f:9b:7b:6c:31:0d:2d:31:e1:37:2b:63:bc:ab:53:1d:
41:b8:b1:48:10:47:e5:84:14:f6:36:f5:7f:ff:82:0a:6a:03:
c6:d3:6c:c7:84:7f:4e:73:ac:aa:77:eb:b2:3f:b4:95:cc:c2:
5a:16:7c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:02:56 2026 by rpki-client