Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137897.roa
File: AS137897.roa (raw, json)
Hash identifier: VksritYMOwlxJ0ZlrH486wdzhdDSgKnowdvQrA6NQmg=
Subject key identifier: E5:B6:5E:51:B9:81:93:AE:89:7B:7D:9E:7F:7F:91:81:89:40:E3:7A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4AF0002F353EF6CEF2DC84E4BE45E58F51BB45FE
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137897.roa
Signing time: Sun 19 Oct 2025 06:05:56 +0000
ROA not before: Sun 19 Oct 2025 06:00:56 +0000
ROA not after: Sun 18 Oct 2026 06:05:56 +0000
asID: 137897
IP address blocks: 155.117.243.0/24 maxlen: 24
167.148.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:f0:00:2f:35:3e:f6:ce:f2:dc:84:e4:be:45:e5:8f:51:bb:45:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 19 06:00:56 2025 GMT
Not After : Oct 18 06:05:56 2026 GMT
Subject: CN=E5B65E51B98193AE897B7D9E7F7F91818940E37A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:8c:15:85:01:37:2e:9f:0c:fe:12:00:c6:
4d:39:98:4d:6b:27:5a:63:ad:68:f9:9e:ea:b8:71:
4d:72:1d:fe:0d:95:76:96:40:d7:d7:be:80:54:0f:
76:a7:40:4a:75:5f:52:19:e2:eb:3c:d2:81:e5:a2:
1f:95:c7:61:d9:41:95:ab:dd:ae:71:74:79:b8:92:
51:bf:d1:18:1d:aa:78:6c:a8:82:68:f9:c3:90:95:
f8:dd:18:34:86:fe:b8:73:4c:27:e4:eb:0b:34:9a:
6a:9e:46:88:74:5f:0e:fb:d0:b9:4b:55:67:90:e1:
f2:de:70:d4:c4:f4:93:97:5d:36:bd:88:3b:1e:28:
24:54:b0:31:c7:17:07:c6:c8:bd:6a:04:0a:8c:9b:
e0:18:69:e0:7c:9e:a9:33:55:ce:e6:d1:4c:e4:10:
22:fd:76:64:86:4e:da:d8:6e:e8:b0:03:85:d4:5c:
3d:59:78:bd:25:17:89:7c:e5:fa:cc:f3:8a:73:86:
92:3b:d8:13:44:61:c0:82:af:48:eb:46:37:2c:48:
11:45:03:5d:bc:99:e4:9b:2a:40:57:de:22:80:38:
e6:f9:7d:87:57:77:19:e8:37:9b:8b:84:18:2b:5f:
3f:4b:ca:93:d5:5b:6a:03:a3:bc:97:de:05:2e:c2:
fd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B6:5E:51:B9:81:93:AE:89:7B:7D:9E:7F:7F:91:81:89:40:E3:7A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS137897.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.243.0/24
167.148.164.0/24
Signature Algorithm: sha256WithRSAEncryption
84:65:8f:44:54:85:2a:6f:98:7b:03:af:1b:b5:a9:09:f7:11:
12:4f:5e:be:4e:11:53:10:87:c6:1f:ef:ae:88:ae:7c:24:24:
df:e8:83:c2:b7:80:30:5f:36:6f:9c:d1:fc:64:63:03:1b:9f:
44:31:18:bc:27:6e:76:05:71:92:31:56:0c:b6:86:71:9f:dc:
cb:17:6f:ab:9c:33:5a:b6:c3:c3:97:4f:94:e2:18:d8:52:8f:
97:cb:d9:94:dc:d7:2e:4c:55:a3:44:15:30:ef:b9:c7:4b:e4:
21:99:b4:a3:9d:20:dd:e7:7d:41:97:39:23:2a:01:0c:c7:d3:
f6:9a:9f:19:7a:b9:5d:1f:97:1a:cb:4d:7c:e5:12:43:d4:fb:
17:ea:53:07:04:d3:56:79:0d:8d:59:ee:3b:1c:7b:17:44:47:
23:ef:6b:7f:39:3e:2b:a3:4a:d1:ff:a0:65:06:62:35:6e:80:
12:2c:bd:e7:6e:1e:e9:45:12:e6:14:36:ad:3c:51:72:71:ae:
4d:14:ea:30:d2:39:d3:52:d3:77:ab:89:08:e5:70:60:3f:cb:
d5:f6:df:5f:00:29:b7:0e:80:7f:a4:e3:a5:26:bd:54:b5:17:
3e:82:94:d6:dd:3a:f0:cd:4b:b2:10:94:be:06:5a:c2:92:4f:
7e:82:b5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:57:20 2025 by rpki-client