Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS134677.roa
File: AS134677.roa (raw, json)
Hash identifier: M8VOMYRP88dZCoP6lJXqXhgFDhqTEWUbIJN4i6JNZvE=
Subject key identifier: 90:BF:39:18:3C:A8:E4:3D:FE:ED:58:27:F4:79:6F:CE:C5:F2:29:F8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 26FAB517C4DC7EF19B758EAC4F23EC4BC149E46E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS134677.roa
Signing time: Fri 01 May 2026 21:47:07 +0000
ROA not before: Fri 01 May 2026 21:42:07 +0000
ROA not after: Fri 30 Apr 2027 21:47:07 +0000
asID: 134677
IP address blocks: 2a13:9500:75::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:fa:b5:17:c4:dc:7e:f1:9b:75:8e:ac:4f:23:ec:4b:c1:49:e4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 1 21:42:07 2026 GMT
Not After : Apr 30 21:47:07 2027 GMT
Subject: CN=90BF39183CA8E43DFEED5827F4796FCEC5F229F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:d6:86:33:44:98:ac:53:26:92:ef:60:49:
4c:97:10:a7:99:d6:1e:a8:6c:8a:a9:90:b9:ff:77:
fa:8e:80:87:73:b5:94:48:8f:d4:69:ed:f9:44:90:
c1:e7:15:f0:ae:08:15:88:8b:cc:e1:6f:de:71:74:
3e:ce:c8:47:90:6c:5d:f0:65:1c:4b:fd:e5:29:52:
4b:f8:89:0f:65:76:a1:e2:9a:53:77:bd:70:5b:a8:
0b:30:6a:43:26:f5:f4:96:52:b1:4e:c4:95:96:92:
46:b4:a5:75:39:94:4c:6a:45:01:a5:00:54:f5:6f:
d0:68:10:de:eb:e8:ff:0f:15:01:e0:81:85:54:2a:
45:69:e2:d0:a1:5e:d7:c2:15:0d:b7:be:4a:e1:92:
5e:26:34:4b:20:2f:83:3d:1f:cf:f0:22:52:50:03:
b0:6a:f1:1e:ed:1c:1c:4b:22:e7:56:e5:86:2f:e9:
24:89:48:d4:c8:4d:bb:59:1f:ef:ea:bf:95:f2:d1:
e4:6c:09:54:a9:c5:3b:ef:f1:e5:7a:4d:6e:59:64:
15:01:4f:3e:8c:84:d9:05:91:a0:a2:58:5f:b3:c1:
da:5e:25:ae:b1:7b:59:2d:87:2c:4d:a8:af:ec:89:
f9:5b:47:8d:c6:80:de:18:a3:c8:85:04:18:c6:96:
d8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BF:39:18:3C:A8:E4:3D:FE:ED:58:27:F4:79:6F:CE:C5:F2:29:F8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS134677.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:75::/48
Signature Algorithm: sha256WithRSAEncryption
28:80:36:17:1a:67:88:ed:e9:d1:ef:86:f2:f0:f7:d0:bd:d1:
b2:92:f9:39:02:02:a3:71:96:2b:61:79:a7:a1:f1:3f:b9:ab:
3c:d5:42:6e:88:b0:a4:bd:b6:18:60:f0:c7:29:a9:ce:f1:6b:
fd:2b:64:28:04:a6:5a:68:a9:ad:cf:27:1e:0f:9e:2c:05:22:
b0:b1:2b:30:76:86:f7:dc:0c:95:96:e1:8d:99:e0:aa:22:7f:
1f:8a:2f:65:c5:78:e7:44:22:de:a9:a5:40:cd:06:de:60:d9:
7e:fc:0e:67:4c:d6:c1:c4:d8:39:00:76:67:33:18:8c:83:1e:
6d:da:a1:47:3b:5d:c3:8c:f2:23:70:4b:b5:3f:93:b5:ec:15:
f4:b7:67:27:22:b3:97:f6:3a:8c:3e:0a:94:83:05:85:8a:e8:
30:38:09:d3:69:61:ce:b2:41:fb:68:8a:4b:2d:9c:39:04:c8:
e4:49:29:ad:ae:ce:e9:ee:04:ac:e9:79:57:2c:b1:7b:b3:c2:
d5:1e:b0:cd:51:ce:36:75:1c:a9:dd:f0:6c:e4:3c:ec:42:03:
58:38:3d:de:06:6e:73:c3:f3:61:ac:64:76:3c:21:79:9c:98:
b2:b5:c9:cd:aa:bc:08:65:10:8f:ce:39:8f:4f:0f:33:a1:45:
a2:ce:25:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:42:14 2026 by rpki-client