Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS135402.roa
File: AS135402.roa (raw, json)
Hash identifier: p+TRaIGKVarEZeie4DASiiSNkEqWWv1aAQjN3O18FFU=
Subject key identifier: AD:88:8C:11:7E:8C:45:B9:89:52:C5:38:F1:F2:4E:DE:94:AA:78:BB
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3BEDB2AD91D55406AE6881FB36DA7F15EEDD07B9
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS135402.roa
Signing time: Tue 24 Feb 2026 10:34:40 +0000
ROA not before: Tue 24 Feb 2026 10:29:40 +0000
ROA not after: Tue 23 Feb 2027 10:34:40 +0000
asID: 135402
IP address blocks: 92.113.212.0/24 maxlen: 24
95.134.21.0/24 maxlen: 24
95.134.22.0/24 maxlen: 24
95.134.126.0/24 maxlen: 24
95.134.163.0/24 maxlen: 24
178.92.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:ed:b2:ad:91:d5:54:06:ae:68:81:fb:36:da:7f:15:ee:dd:07:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 24 10:29:40 2026 GMT
Not After : Feb 23 10:34:40 2027 GMT
Subject: CN=AD888C117E8C45B98952C538F1F24EDE94AA78BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:63:8e:94:3e:ed:d6:46:5a:4a:95:ef:c9:4e:
15:a9:a5:e3:0b:33:a2:ee:0e:0f:be:93:2b:1a:74:
22:7b:aa:59:8d:0e:8f:ae:ff:40:65:2f:04:86:49:
2d:f2:2a:94:98:3c:4f:26:84:31:d5:ef:83:bc:39:
cf:e3:66:ac:e1:e8:18:5e:32:69:78:b4:3a:da:67:
09:00:d7:33:b1:b0:9b:36:22:9e:68:f0:2c:db:55:
40:a6:12:8c:dd:4a:bc:fd:ec:f5:a7:a6:b6:05:2a:
f1:da:62:ba:5d:04:9e:cb:e3:93:2a:45:46:3c:a4:
5f:d1:61:4f:0e:d6:69:2f:13:2f:32:8d:0e:db:f9:
4b:cc:ac:2f:04:91:7e:2e:21:fa:18:8f:67:2e:54:
6e:7f:06:de:5c:cf:1c:4a:7a:ad:44:5b:60:bf:ac:
c5:b0:a1:ce:b8:bd:c1:93:d5:b4:96:20:f8:2a:dd:
2b:02:22:d9:fe:d4:2d:7d:35:2c:c4:ad:4c:a8:3a:
52:65:ae:0d:d0:f1:20:36:f3:18:67:1d:7c:91:37:
62:a5:44:de:c4:4d:5c:8d:cd:86:34:96:46:a5:ef:
c2:16:02:c7:81:d8:0e:bf:5a:60:61:55:e3:79:21:
47:35:f6:a5:ff:71:b3:54:28:54:74:11:4c:7f:c1:
b1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:88:8C:11:7E:8C:45:B9:89:52:C5:38:F1:F2:4E:DE:94:AA:78:BB
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS135402.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.212.0/24
95.134.21.0-95.134.22.255
95.134.126.0/24
95.134.163.0/24
178.92.145.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a1:38:cf:9d:d9:79:01:52:30:bf:af:e7:5d:2f:48:77:d1:
1e:ee:f4:14:94:cd:56:bf:8f:a0:01:c5:fc:09:41:46:1a:91:
64:8d:8c:8c:f9:9a:1f:e7:6a:cb:26:e9:15:79:d2:0d:0e:38:
06:0b:ef:69:fb:bc:fb:e7:f5:7f:7d:2c:78:56:38:42:5d:94:
07:c7:ce:5d:6f:52:85:ab:4d:ab:e4:23:13:df:ca:95:66:72:
63:9d:94:1a:bb:f1:c5:88:89:f7:5a:92:38:59:97:96:11:4c:
ff:ea:ef:98:14:9b:8b:1e:3a:00:98:e0:b0:ee:94:01:90:21:
1e:a1:66:c8:8e:58:c4:06:97:f4:f0:32:fb:13:a7:10:6c:d0:
eb:e0:83:63:9e:a8:6f:25:6d:c7:ae:4e:4b:75:a1:7b:29:e2:
99:a5:83:28:94:59:0c:9f:e0:f5:0b:4e:d2:c2:89:6f:ed:d0:
07:dd:7b:7f:23:7e:f2:a3:72:ce:13:6a:f4:ef:d7:7c:3b:cb:
43:18:f4:01:9c:30:df:0e:06:05:29:9e:69:62:62:17:97:07:
59:a1:c8:b4:0b:5f:7e:78:78:f7:bb:6e:78:79:05:b2:cf:46:
a6:8b:93:e3:55:f1:dd:2c:c6:04:68:95:f4:d7:f0:72:c4:13:
d2:36:4e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:13:07 2026 by rpki-client