Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS137517.roa
File: AS137517.roa (raw, json)
Hash identifier: KmmGXnJDq9UTnmDcxEadw4AyYNOsSfnN1ACQncKFKOw=
Subject key identifier: 05:9F:49:7A:2E:16:84:E0:26:05:4C:44:9D:1A:CE:06:DA:0E:C8:93
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0C14485B28DF3AE5C91F13DD76F6BBC7A7A96B66
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS137517.roa
Signing time: Wed 29 Apr 2026 08:52:56 +0000
ROA not before: Wed 29 Apr 2026 08:47:56 +0000
ROA not after: Wed 28 Apr 2027 08:52:56 +0000
asID: 137517
IP address blocks: 185.141.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:14:48:5b:28:df:3a:e5:c9:1f:13:dd:76:f6:bb:c7:a7:a9:6b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 29 08:47:56 2026 GMT
Not After : Apr 28 08:52:56 2027 GMT
Subject: CN=059F497A2E1684E026054C449D1ACE06DA0EC893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:28:a8:2a:2d:b1:26:01:72:2d:4f:a0:9e:55:
29:ad:cc:0e:8f:e6:ce:29:20:a0:9c:af:66:a3:53:
c3:20:7f:15:e4:03:a4:20:d6:c4:55:e0:f1:be:e5:
6e:4b:e4:fe:d5:81:04:03:1d:7e:fe:a5:63:1e:66:
ca:24:84:42:2c:7e:39:4f:e6:0b:eb:54:77:10:f1:
99:b2:22:65:7d:2f:ae:d3:39:e4:5a:c5:63:65:16:
53:18:9b:92:99:b0:51:41:53:46:10:11:b0:af:18:
42:eb:34:7d:fa:89:7a:db:c8:7c:a8:96:bf:b6:05:
3a:f3:ac:ba:d1:d4:49:9a:ff:f5:fd:d2:b4:37:8f:
eb:50:38:b8:04:5a:d4:69:68:a7:e2:c8:96:dc:a0:
f0:5e:bb:8f:6b:44:4d:f1:47:d2:92:27:2f:dc:ea:
03:07:8d:bf:c0:4b:db:a2:5e:e6:78:67:e5:19:ac:
53:04:b9:03:43:5b:11:5a:93:89:c7:1c:17:2a:4f:
52:6f:d1:4c:a7:b8:60:c8:4f:8d:28:18:f5:d8:25:
5a:9f:de:39:ce:1f:ed:17:64:13:15:de:87:95:10:
16:d1:d0:70:10:d7:b1:b5:dd:6f:53:a4:76:6f:9d:
1f:59:9c:ec:c8:e2:47:c2:a3:41:fa:ff:67:3b:dc:
ea:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9F:49:7A:2E:16:84:E0:26:05:4C:44:9D:1A:CE:06:DA:0E:C8:93
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS137517.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.166.0/24
Signature Algorithm: sha256WithRSAEncryption
99:ad:fd:f2:cf:81:f1:f6:11:e9:71:3d:4b:8b:36:ba:ad:56:
d7:5c:18:7e:6d:6c:98:ed:b9:21:ca:04:5b:61:33:9d:11:d4:
29:a6:a2:12:0e:d9:d9:3b:42:76:98:cb:97:92:e7:a9:95:9f:
c5:9e:c9:88:91:17:3c:e0:85:89:ab:23:70:69:94:1a:34:72:
79:e9:f4:3c:19:95:36:c4:01:66:e2:b0:2d:8d:22:52:51:23:
9e:f2:40:42:4b:ba:78:ee:bf:20:98:d4:cd:96:9c:46:3d:ff:
d3:c2:9d:83:74:1f:14:bf:30:4d:5c:fb:f7:bf:2a:c8:14:d4:
61:76:a3:95:88:57:56:5e:e9:13:a4:de:92:1d:c0:c0:7b:aa:
4a:d5:24:eb:e1:d5:32:15:48:d0:d0:7a:3e:79:28:4b:d8:a6:
5f:d2:d4:51:d5:c9:ea:c4:8b:5d:da:8e:19:36:c3:75:30:8a:
93:11:57:f0:8c:3e:b1:7c:7b:a6:13:12:d4:98:8a:77:9c:3f:
fd:3d:23:de:a9:12:72:63:3a:59:e1:12:8c:db:4c:95:da:62:
fe:1b:ed:c5:63:24:a2:98:4a:ee:b5:03:0e:6f:b5:59:a7:25:
b4:5b:a5:55:f6:aa:de:ee:eb:c9:33:16:f4:69:e6:78:28:d6:
b3:b1:66:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:52:38 2026 by rpki-client