Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136725.roa
File: AS136725.roa (raw, json)
Hash identifier: v35Ce5BYCXrLVlwXEzfagqaO+OPOoWUA/CXXLOHP6dQ=
Subject key identifier: 26:52:03:16:4E:68:4A:39:2C:6F:5E:CA:D9:14:E2:7C:45:6F:F8:67
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3E63F4448AF91268633833AAEA72A4A1AB6598DE
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136725.roa
Signing time: Thu 23 Jul 2026 07:35:24 +0000
ROA not before: Thu 23 Jul 2026 07:30:24 +0000
ROA not after: Thu 22 Jul 2027 07:35:24 +0000
asID: 136725
IP address blocks: 155.117.138.0/24 maxlen: 24
162.141.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:63:f4:44:8a:f9:12:68:63:38:33:aa:ea:72:a4:a1:ab:65:98:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 23 07:30:24 2026 GMT
Not After : Jul 22 07:35:24 2027 GMT
Subject: CN=265203164E684A392C6F5ECAD914E27C456FF867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:40:e2:60:d8:0f:ff:e6:2e:8f:61:b0:97:bf:
7d:9e:9f:2b:85:de:ee:df:ce:b5:08:a6:d5:bc:59:
93:09:a0:1f:6c:e6:4a:29:1b:f3:62:82:80:0f:03:
51:92:46:3d:7b:df:bb:00:3a:df:e6:1f:c5:66:40:
b5:e6:6f:e7:79:e7:7f:52:ef:01:5f:53:11:17:1a:
6a:86:2d:9e:52:73:f6:3a:59:7e:09:5a:32:24:c4:
3d:6c:ed:83:f1:2e:ae:58:3e:44:d6:e0:c3:fe:15:
e2:40:6c:05:a7:73:3a:30:70:66:f6:f9:bd:23:dc:
9a:3d:92:f2:18:0a:12:18:04:e9:c7:5f:70:69:72:
51:4f:85:c6:63:ec:6c:98:af:b6:bc:9e:ec:84:97:
f7:0e:d6:7e:f7:3b:73:42:12:c4:01:d6:c6:bc:bc:
43:6b:76:d1:87:13:7c:78:b0:a9:90:18:f7:8a:d4:
54:57:ce:59:5e:81:a0:a7:9a:f2:a4:20:ff:85:ab:
bd:83:70:0f:7c:6f:a4:a2:53:7e:9e:e5:61:f2:fa:
d3:c5:3a:4c:07:57:e1:c6:0d:4e:1c:dd:18:21:67:
eb:27:e4:5a:1a:96:89:37:e9:3f:79:8f:05:e5:dc:
eb:34:64:3a:a2:8a:b1:45:35:22:37:33:79:e5:ff:
3d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:52:03:16:4E:68:4A:39:2C:6F:5E:CA:D9:14:E2:7C:45:6F:F8:67
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS136725.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.138.0/24
162.141.140.0/24
Signature Algorithm: sha256WithRSAEncryption
55:2f:4e:7c:d8:cd:2c:47:9e:17:da:1d:45:f4:9a:33:98:05:
94:26:97:2b:e0:9f:d7:79:d0:83:12:89:b4:9e:d7:4e:ed:f7:
e6:2d:75:1c:ee:5a:48:3b:4a:0d:48:ff:54:ff:b6:14:ab:c4:
fd:43:09:7b:4b:91:bb:31:cf:ff:a5:e3:48:46:1c:bc:56:38:
43:b0:fe:75:ad:9e:3f:b8:4a:3f:e3:95:3c:83:2f:51:88:09:
2a:f0:31:39:e9:72:32:b5:0d:2d:ea:32:dc:02:0d:ff:c3:86:
32:65:f2:58:79:ee:26:4a:07:3a:0e:db:5d:fe:9a:7f:fc:41:
38:a6:c3:39:71:3f:3c:08:14:a1:6b:ca:33:f8:90:84:fb:f6:
44:d5:bf:00:2b:98:88:55:d0:c4:80:f8:02:22:0e:32:f5:f1:
10:60:6a:e0:76:5c:d0:ba:d1:9f:26:35:cf:35:35:ea:2f:b5:
84:ce:48:83:d8:3f:b7:46:c0:ce:e0:d2:a3:fa:b0:22:1f:92:
72:ac:12:1e:1e:05:18:94:f6:78:ac:4a:c4:95:4e:e2:0e:9b:
0c:3a:3b:44:38:3f:a5:14:d2:20:cb:28:a2:23:33:c1:3e:0c:
2a:19:3b:e4:c2:5e:22:6c:ac:92:1f:81:33:a6:91:18:ff:92:
68:76:4c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:06:30 2026 by rpki-client