Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS137517.roa
File: AS137517.roa (raw, json)
Hash identifier: tf6BzFU2i2f5mNIxSnjWQOB8KCKZ6gFkZprTRlxVkQQ=
Subject key identifier: 9D:B2:08:B1:C4:C1:E6:E9:AC:B8:6C:87:89:2F:03:87:57:A5:B7:65
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 594D80A1F9C5D735FCDCC7EFA8D62C256E56D6B3
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS137517.roa
Signing time: Mon 23 Mar 2026 14:35:53 +0000
ROA not before: Mon 23 Mar 2026 14:30:53 +0000
ROA not after: Mon 22 Mar 2027 14:35:53 +0000
asID: 137517
IP address blocks: 188.119.68.0/24 maxlen: 24
213.139.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:4d:80:a1:f9:c5:d7:35:fc:dc:c7:ef:a8:d6:2c:25:6e:56:d6:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Mar 23 14:30:53 2026 GMT
Not After : Mar 22 14:35:53 2027 GMT
Subject: CN=9DB208B1C4C1E6E9ACB86C87892F038757A5B765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7d:c2:c6:ac:39:27:da:dc:e8:74:1e:9e:a4:
f8:f4:71:36:8f:a8:84:b9:7a:61:29:23:5d:11:ea:
54:de:55:c3:ca:2c:7e:3d:99:4e:af:64:a7:d5:2d:
6d:56:df:a7:c1:59:b9:e5:30:e6:ac:8c:c7:26:d3:
85:17:55:24:10:42:13:3e:d0:c4:6f:d0:cc:26:4c:
a1:be:31:2e:69:ce:47:ca:5d:a8:97:d2:94:c9:28:
1f:74:27:56:d9:7e:5c:12:e8:54:6b:a5:ad:16:ad:
ae:3e:23:48:c8:04:cb:60:52:4d:dd:1d:33:c5:4d:
ec:87:15:89:2c:01:4e:11:2a:c8:c7:9b:23:0a:d0:
59:a9:37:5f:06:5c:8f:3a:f9:90:bc:d4:41:bb:94:
e3:ec:d0:c5:c4:a9:6e:b2:82:b9:74:11:71:6a:3e:
d3:5c:84:95:76:48:f5:6f:1a:c9:8b:24:e2:2f:ab:
78:ff:84:81:e7:cf:0e:f1:0c:f5:b7:b3:08:c4:57:
a8:5e:b4:0a:76:9e:6d:1f:56:79:c6:81:dd:df:14:
1b:bc:3e:30:82:8f:85:b8:55:fe:62:0d:91:da:1a:
c7:1b:d9:50:53:ec:ab:8a:05:eb:39:62:93:05:89:
1a:15:df:24:a2:11:c0:ea:4b:1d:66:b5:fe:7b:ed:
a6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B2:08:B1:C4:C1:E6:E9:AC:B8:6C:87:89:2F:03:87:57:A5:B7:65
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS137517.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.119.68.0/24
213.139.224.0/24
Signature Algorithm: sha256WithRSAEncryption
53:1e:66:3e:6d:e7:1b:29:ff:0d:37:5e:a8:6f:bb:ba:24:d2:
aa:1b:17:3a:ea:78:29:bc:c4:59:a1:65:95:dc:85:85:e9:4f:
01:49:e2:7a:66:3b:e0:64:0b:93:dc:3d:b7:a3:63:73:cc:94:
73:59:8c:ba:16:87:f0:23:26:6d:b1:b9:d0:0b:e4:71:a5:5d:
ef:5e:13:26:d9:e0:b0:02:1a:f7:3d:86:d7:13:09:70:3d:99:
f6:05:84:27:14:50:6f:8d:de:cc:74:d2:6f:0d:c6:65:17:f2:
5c:b6:bc:87:ca:8f:c1:1b:f9:36:07:79:74:64:f8:9e:36:ad:
35:e9:0c:7d:27:77:98:e7:2c:7c:72:1f:2a:b4:d3:ca:9b:6e:
78:4d:24:e9:f7:79:1a:a5:4d:0d:ff:1b:0b:eb:19:1c:30:b9:
8e:5f:9f:8c:74:42:40:39:85:a3:d9:75:94:02:a5:85:61:f8:
bb:8a:eb:89:a9:fc:3e:62:ae:4f:0f:b9:e1:20:f2:03:cf:08:
48:4f:19:c8:25:c4:9c:bc:d9:90:ee:0b:31:34:11:34:6b:a3:
b5:a0:23:03:b4:44:29:f3:8d:23:ad:a0:44:40:1d:b3:93:a7:
e6:0a:1d:50:e8:e3:cd:bb:00:ad:f7:ae:e2:88:49:85:46:dd:
0e:f7:aa:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:07:43 2026 by rpki-client