Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137410.roa
File: AS137410.roa (raw, json)
Hash identifier: u63aKChDaztfrNraEVDbUVKgiZGeZJvxIAEc7ww66J0=
Subject key identifier: 40:CA:17:D6:15:82:E9:C5:F0:B1:25:4A:92:94:9B:58:44:8C:4E:38
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2EFFE84A75C32BE722805C88A57FCBEECC6CD81F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137410.roa
Signing time: Thu 12 Nov 2026 07:25:44 +0000
ROA not before: Thu 12 Nov 2026 07:20:44 +0000
ROA not after: Thu 11 Nov 2027 07:25:44 +0000
asID: 137410
IP address blocks: 69.90.224.0/24 maxlen: 24
76.74.212.0/24 maxlen: 24
76.74.214.0/24 maxlen: 24
143.14.16.0/24 maxlen: 24
143.14.35.0/24 maxlen: 24
143.14.81.0/24 maxlen: 24
143.14.83.0/24 maxlen: 24
143.14.121.0/24 maxlen: 24
147.79.55.0/24 maxlen: 24
162.141.13.0/24 maxlen: 24
162.141.26.0/24 maxlen: 24
162.141.69.0/24 maxlen: 24
162.141.98.0/24 maxlen: 24
162.141.126.0/24 maxlen: 24
167.148.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 07:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:ff:e8:4a:75:c3:2b:e7:22:80:5c:88:a5:7f:cb:ee:cc:6c:d8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 12 07:20:44 2026 GMT
Not After : Nov 11 07:25:44 2027 GMT
Subject: CN=40CA17D61582E9C5F0B1254A92949B58448C4E38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:91:2e:c6:cd:42:5e:93:3a:09:c8:ef:3d:d7:
b3:60:d1:18:17:07:3d:7b:e8:d2:e4:a8:1e:fe:7f:
70:53:ac:ff:2c:47:3a:ed:09:40:5b:36:7c:38:aa:
ba:a6:6b:11:f8:9d:ad:08:33:70:82:a8:e4:cc:75:
28:5b:ac:21:35:e6:c9:ba:21:d6:4b:1e:af:9f:74:
21:91:0e:d0:2f:4d:ff:87:b6:a7:1b:77:b2:12:46:
26:30:82:b2:32:d6:5c:b0:5b:dd:e7:65:dd:d7:1e:
0e:4b:18:98:7d:02:b4:a9:3a:ec:8a:da:2d:92:bf:
bf:bc:43:c1:05:de:ee:77:0b:79:30:fe:2d:1f:c5:
26:de:75:1a:20:bb:d9:8d:c6:60:2d:e4:d5:23:ab:
9a:c6:64:28:a0:80:89:88:32:64:64:62:7b:3b:31:
97:2d:b9:89:67:45:f3:d9:b8:9a:a8:e8:d7:cb:3a:
27:fa:08:85:4f:69:2c:f7:b4:a3:e0:c1:45:6c:9f:
94:2a:ab:1e:92:f4:98:77:b1:14:8a:b3:da:54:d2:
2a:08:98:15:cb:cc:03:07:f2:35:c8:50:81:f5:af:
92:83:51:eb:d8:96:c2:82:14:c5:86:b6:7c:05:4a:
d6:b6:03:8d:8c:05:ae:5b:d6:1b:c6:66:75:7b:35:
b4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CA:17:D6:15:82:E9:C5:F0:B1:25:4A:92:94:9B:58:44:8C:4E:38
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137410.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.90.224.0/24
76.74.212.0/24
76.74.214.0/24
143.14.16.0/24
143.14.35.0/24
143.14.81.0/24
143.14.83.0/24
143.14.121.0/24
147.79.55.0/24
162.141.13.0/24
162.141.26.0/24
162.141.69.0/24
162.141.98.0/24
162.141.126.0/24
167.148.216.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:72:3f:2b:9e:f4:9c:f2:ba:13:cc:ae:75:5b:d6:dd:0d:89:
c7:1c:a9:bf:d1:d2:0b:6f:30:54:26:5a:ca:34:f5:ae:8a:04:
3d:10:de:f5:6f:96:18:75:2e:4a:c8:f2:7f:7f:dc:c2:85:f7:
13:74:80:76:2c:fe:a8:84:5b:3c:3d:19:a3:b5:95:23:18:25:
be:af:8e:94:ca:0f:16:18:1d:d3:17:b4:7e:cb:f9:69:e1:30:
c8:09:38:62:bf:a0:89:ea:c5:05:49:0d:af:92:3c:3f:c7:c3:
d6:a1:5e:51:29:54:b1:d2:65:80:15:82:29:bd:1a:40:cc:b1:
d4:43:a7:79:92:01:be:f8:40:e3:ff:05:f8:6a:26:e5:f7:81:
7b:c1:d8:14:64:3e:63:fa:6c:6e:4f:62:c0:db:68:7a:dc:2c:
c0:fa:6d:a3:09:3f:ac:05:1c:d3:04:14:77:74:96:2d:e0:41:
05:a4:02:36:56:2c:ef:4c:70:fc:13:12:11:f0:f8:93:d0:ee:
9f:32:b9:4c:a7:dd:59:2c:80:c5:d7:b4:c2:db:d5:35:78:98:
b9:60:17:d8:ea:95:b1:03:fd:ab:b4:1c:8f:25:9e:ef:dd:9f:
3c:05:a7:9f:43:e9:5b:70:94:e1:24:92:97:4e:d9:a5:c3:6d:
e8:6d:fe:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:56:16 2026 by rpki-client