Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS137409.roa
File: AS137409.roa (raw, json)
Hash identifier: KtlRngNMsd/BSvvHaZXx2vS/JCSbSxYrWv6YAyyWzxU=
Subject key identifier: 14:10:D1:56:DA:34:88:30:41:66:DE:BD:F3:BD:6D:5F:A0:A5:FA:80
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 73A7A4AC6ABE955794D07353A3A50B1FA0A1E71D
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS137409.roa
Signing time: Tue 22 Sep 2026 05:10:16 +0000
ROA not before: Tue 22 Sep 2026 05:05:16 +0000
ROA not after: Tue 21 Sep 2027 05:10:16 +0000
asID: 137409
IP address blocks: 5.252.80.0/24 maxlen: 24
179.61.203.0/24 maxlen: 24
181.214.73.0/24 maxlen: 24
181.214.122.0/24 maxlen: 24
181.214.238.0/24 maxlen: 24
185.141.167.0/24 maxlen: 24
191.96.164.0/24 maxlen: 24
2a0a:8e00::/32 maxlen: 48
2a0a:9606::/32 maxlen: 48
2a0a:9607::/32 maxlen: 48
2a0a:be00::/32 maxlen: 48
2a0a:ce00::/32 maxlen: 48
2a0a:ce01::/32 maxlen: 48
2a0a:ce03::/32 maxlen: 48
2a0a:ce04::/32 maxlen: 48
2a0a:ce05::/32 maxlen: 48
2a0a:ce06::/32 maxlen: 48
2a0a:ce07::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:a7:a4:ac:6a:be:95:57:94:d0:73:53:a3:a5:0b:1f:a0:a1:e7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 22 05:05:16 2026 GMT
Not After : Sep 21 05:10:16 2027 GMT
Subject: CN=1410D156DA3488304166DEBDF3BD6D5FA0A5FA80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:51:cb:1b:c9:71:eb:fa:11:8a:4c:a2:16:ab:
2d:dc:b1:36:09:a4:c1:64:a9:9d:b3:db:09:13:d8:
3a:94:f5:1d:6b:bf:98:50:e1:f9:67:4b:04:9b:5c:
f8:2e:64:8b:4a:ba:7e:d4:c3:86:f2:e0:fc:11:df:
15:b0:fb:30:42:39:81:8b:c6:f2:84:9f:ca:77:65:
64:9f:05:fd:02:d5:d4:ac:bc:eb:9e:23:dd:fa:dc:
ca:5f:f7:d8:e8:30:f5:00:93:80:5a:38:55:2e:12:
38:20:ff:8d:59:ea:f7:a2:82:59:16:de:a5:6e:99:
da:8d:a8:ac:12:16:3f:f0:cc:36:e4:b1:1c:53:81:
31:f9:d5:38:08:a4:18:24:95:5f:4f:64:53:b8:6f:
aa:46:33:13:d1:57:a0:5b:45:ae:bf:73:71:a4:46:
c6:36:8d:3d:60:e6:4f:f9:14:78:2f:42:49:64:11:
fc:e7:6f:2d:53:59:95:44:6d:20:db:5b:d4:16:69:
99:db:11:9f:80:ab:3a:d3:88:33:33:16:6c:07:66:
5b:61:39:b5:ff:c1:09:6b:cf:8d:67:96:ee:1a:64:
36:91:ea:82:84:40:6a:57:1b:6c:29:c3:75:84:44:
06:20:6c:94:a5:5a:03:18:34:3f:2b:3b:30:c2:2a:
2e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:10:D1:56:DA:34:88:30:41:66:DE:BD:F3:BD:6D:5F:A0:A5:FA:80
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS137409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.80.0/24
179.61.203.0/24
181.214.73.0/24
181.214.122.0/24
181.214.238.0/24
185.141.167.0/24
191.96.164.0/24
IPv6:
2a0a:8e00::/32
2a0a:9606::/31
2a0a:be00::/32
2a0a:ce00::/31
2a0a:ce03::-2a0a:ce07:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
21:df:15:b4:0d:65:d7:0a:c8:0c:bd:8b:ba:4b:7b:3e:ea:93:
3f:5e:15:8e:aa:79:0e:94:e3:67:54:e8:ae:64:88:2f:53:a7:
b6:ae:c4:f9:e1:a5:72:af:a0:ef:6a:b3:25:11:98:4d:f1:db:
aa:c0:fc:b3:f1:cc:d0:92:37:ca:ee:8a:4f:36:58:44:00:5e:
71:68:d0:82:25:74:a3:95:5a:f2:cb:cd:ee:93:c9:aa:0f:5a:
bf:bd:77:8e:52:de:b0:cd:47:72:06:a0:94:f9:9f:a1:70:f4:
9f:08:c9:ec:f3:84:89:bf:32:2e:37:00:d1:11:e4:85:8b:bb:
02:ca:96:5f:ab:e6:3c:26:2d:fd:dc:db:0d:ba:8a:d7:df:fc:
a5:bd:6e:88:4a:ed:c3:90:2f:07:6f:2b:0c:a9:f3:91:ec:45:
91:52:0e:36:34:9d:87:5a:2d:3e:5c:39:07:b5:17:8a:a2:b7:
c8:a6:41:81:6f:e3:fa:75:bf:57:68:14:96:de:97:87:7f:7c:
8f:d1:6c:c5:cd:08:47:7f:23:a1:c1:04:d4:75:75:63:2b:36:
ff:14:c7:b4:81:45:19:62:56:39:10:c6:98:b5:b8:9c:77:2b:
9e:f7:7d:33:ba:06:38:6f:63:d8:66:c3:9e:37:f7:d1:9d:7a:
c6:a6:3d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:46:32 2026 by rpki-client