Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS137517.roa
File: AS137517.roa (raw, json)
Hash identifier: W1AElzpnuzTveSKN3NGJ80h+kYiuF/kI46j1aKfdxdw=
Subject key identifier: 7F:A6:5E:6A:84:67:0E:FB:30:BD:35:A4:75:A8:41:5B:FF:A7:24:E1
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 05B9C2D9CCF61E40A4C228ED01FAF73C504AA766
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS137517.roa
Signing time: Sat 11 Apr 2026 00:00:21 +0000
ROA not before: Fri 10 Apr 2026 23:55:21 +0000
ROA not after: Sat 10 Apr 2027 00:00:21 +0000
asID: 137517
IP address blocks: 143.20.85.0/24 maxlen: 24
143.20.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:38:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:b9:c2:d9:cc:f6:1e:40:a4:c2:28:ed:01:fa:f7:3c:50:4a:a7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Apr 10 23:55:21 2026 GMT
Not After : Apr 10 00:00:21 2027 GMT
Subject: CN=7FA65E6A84670EFB30BD35A475A8415BFFA724E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c3:51:f2:18:ce:9c:89:13:c5:9f:55:ce:d6:
f9:2f:12:7d:ec:87:59:d1:71:85:7a:2a:cf:b1:90:
51:63:d1:1b:8c:70:d6:19:1d:93:29:57:2f:f8:0b:
32:bf:a1:83:29:c4:47:5a:16:a6:41:31:79:9b:d4:
b8:f7:be:61:bc:55:ed:12:80:ac:ca:bd:36:6f:a6:
be:4e:1c:e8:7c:4d:9d:47:f4:31:3b:b5:5b:42:1b:
9d:e9:b4:8f:29:f3:d2:77:1b:a9:d2:6c:bc:11:21:
03:ec:bb:3f:f7:b9:1b:47:ef:19:51:74:d4:11:8e:
17:14:f4:37:1c:c9:05:7a:54:54:5c:38:46:70:36:
ee:8f:0e:8b:a1:64:c7:57:70:05:48:22:8b:50:0f:
fe:01:ab:ef:2f:79:fa:50:d0:28:18:51:ff:81:7b:
e0:1e:0d:24:4f:de:f1:5f:f8:e7:bc:2c:e1:51:c2:
9d:f9:70:fe:f0:a2:a9:85:54:e5:02:58:64:92:98:
ec:d0:36:ca:c3:14:aa:9a:00:ec:fb:8d:a0:15:d3:
af:b1:e7:bf:f8:0c:b0:23:f5:71:70:f9:3f:08:cf:
01:99:24:47:77:f3:fd:12:a2:02:18:fc:af:7a:f0:
19:1b:2d:73:11:18:3d:0b:0c:a1:b7:ab:a8:4b:47:
b6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A6:5E:6A:84:67:0E:FB:30:BD:35:A4:75:A8:41:5B:FF:A7:24:E1
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS137517.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.85.0/24
143.20.95.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:a9:7a:d4:9a:40:c9:9a:a9:fc:23:17:3e:b9:a8:46:77:f2:
16:09:09:3d:13:82:81:49:38:7c:6e:4f:65:f3:2e:c3:5b:38:
8e:ca:48:4e:74:1c:d8:ab:8d:2d:9c:92:cb:aa:0a:36:27:1a:
b3:9f:ff:8e:ce:77:70:36:59:1c:81:72:da:a2:ad:68:31:ae:
48:ed:85:eb:1a:d8:b3:0c:8f:27:53:02:5b:f1:df:3e:8d:7e:
36:6c:a8:78:51:af:df:9d:48:36:21:51:d4:7e:42:e7:d0:22:
7b:32:b3:7d:63:10:74:f1:49:a6:69:92:08:c2:3d:d6:cd:54:
e3:d4:92:cc:63:47:01:be:d8:af:f0:29:2f:80:10:c3:ae:13:
b4:94:c4:4b:cf:80:66:54:59:ab:09:95:ca:5a:e2:11:3e:37:
c5:d6:65:85:a8:b0:a6:68:b4:0e:79:c7:92:1d:23:d7:2e:21:
44:af:57:21:0b:1d:04:72:75:b2:a7:34:57:ac:bd:c4:a9:d1:
d6:fc:03:ee:47:70:1a:24:e7:43:63:f2:8d:c4:d7:93:30:cf:
cf:4d:19:25:0f:4c:12:9b:ba:58:63:5b:77:2f:1b:d8:58:31:
f0:59:95:8d:42:cd:08:6c:6e:67:a0:4e:2c:de:a7:1f:e2:05:
4a:fd:60:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:18:19 2026 by rpki-client