Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS134858.roa
File: AS134858.roa (raw, json)
Hash identifier: PsaYtLt+uglhwiPGNM7o00wfNVuPScL62+ZGStIfoZU=
Subject key identifier: F7:F5:F6:83:2A:F5:6C:C2:0E:0D:DC:33:03:3C:4D:DD:DF:62:12:8B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 69948DBA57001D166B08E543D25F62DA342ADFB9
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS134858.roa
Signing time: Sat 18 Jul 2026 10:49:13 +0000
ROA not before: Sat 18 Jul 2026 10:44:13 +0000
ROA not after: Sat 17 Jul 2027 10:49:13 +0000
asID: 134858
IP address blocks: 2a13:9500:c7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:94:8d:ba:57:00:1d:16:6b:08:e5:43:d2:5f:62:da:34:2a:df:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 18 10:44:13 2026 GMT
Not After : Jul 17 10:49:13 2027 GMT
Subject: CN=F7F5F6832AF56CC20E0DDC33033C4DDDDF62128B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:90:77:9f:a2:cc:ec:c2:3d:43:65:17:ce:df:
62:ff:d8:d0:e2:d6:41:bf:38:8e:dc:dc:12:f2:34:
4f:24:a3:9d:e6:a5:62:4c:80:1b:46:e8:ae:42:09:
72:cb:19:bc:01:87:23:3f:e2:54:d7:26:15:ec:58:
2b:a5:0d:76:7b:f1:fe:74:45:20:0b:3d:29:d8:57:
74:b2:cf:dc:de:0e:72:bd:d0:41:05:d2:d5:ac:1e:
70:eb:90:ae:02:dc:ff:e6:3d:35:7a:11:01:5c:d4:
94:b0:55:06:af:82:67:56:5c:cb:e9:55:c8:5e:d5:
9c:ac:6b:b4:50:b8:b0:c6:93:74:be:0c:75:3f:b5:
46:cd:6e:b3:97:53:e9:24:07:5d:65:d2:fb:3a:fc:
62:00:09:72:13:74:75:0f:3c:9b:57:cc:d5:0b:03:
8b:9f:d6:e9:d3:24:7f:1b:49:de:71:cd:43:8e:8c:
0a:40:d6:f0:48:3d:16:a9:f8:00:12:60:3d:7a:ac:
cc:b4:4d:f2:63:c5:5e:a8:38:16:67:75:fe:36:4b:
58:19:f1:9c:a7:4e:98:22:04:35:3c:5b:60:6d:6a:
e1:2a:be:f0:b3:d7:e7:ed:79:82:da:ca:84:c6:c4:
76:51:33:5e:b3:f0:3a:a5:ba:90:af:bb:f6:c3:41:
93:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F5:F6:83:2A:F5:6C:C2:0E:0D:DC:33:03:3C:4D:DD:DF:62:12:8B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS134858.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:c7::/48
Signature Algorithm: sha256WithRSAEncryption
73:9c:3f:10:a1:49:21:50:35:58:1b:d5:18:e5:8f:bd:01:9d:
5c:c3:47:c6:f1:ac:f1:f2:76:15:7a:43:74:70:5c:8c:3e:2d:
3b:54:34:d3:fd:4a:d3:34:d7:61:93:96:af:58:4f:02:4c:12:
a6:81:b0:a4:19:28:58:7b:74:e7:b4:38:92:eb:b1:45:13:79:
30:60:9a:10:23:07:36:82:50:40:dd:c0:6a:e8:0d:43:89:4c:
df:78:d4:6a:c7:d9:85:35:78:c1:a1:31:c2:84:5b:7a:18:eb:
c5:59:be:bd:21:c2:28:32:77:43:3f:2f:a8:90:90:dd:4d:f9:
e6:6a:a7:a1:1b:a0:9d:5f:15:8b:ac:10:b0:4a:12:f2:97:b5:
2a:82:2f:89:e4:4a:e8:34:e9:86:04:ab:58:b9:77:5d:73:7b:
3c:00:0d:42:65:c3:02:22:76:7e:38:76:5a:cd:3d:46:db:d1:
10:a6:2e:1e:48:7b:c6:ee:a1:c2:35:3b:a7:aa:df:44:85:8b:
db:bb:8d:8c:62:e1:13:13:40:01:3b:98:b8:f2:8f:7d:ef:7f:
ab:11:c8:cb:9b:45:ce:6b:10:34:99:d7:ce:d6:27:fc:b0:c8:
0b:ae:bd:2e:be:35:91:63:0e:d7:1d:9f:53:a5:d1:59:f5:ea:
3c:12:d1:03
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUaZSNulcAHRZrCOVD0l9i2jQq37kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA3MTgxMDQ0MTNaFw0yNzA3MTcxMDQ5MTNaMDMxMTAvBgNV
BAMTKEY3RjVGNjgzMkFGNTZDQzIwRTBEREMzMzAzM0M0REREREY2MjEyOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjkHefoszswj1DZRfO32L/2NDi
1kG/OI7c3BLyNE8ko53mpWJMgBtG6K5CCXLLGbwBhyM/4lTXJhXsWCulDXZ78f50
RSALPSnYV3Syz9zeDnK90EEF0tWsHnDrkK4C3P/mPTV6EQFc1JSwVQavgmdWXMvp
Vche1Zysa7RQuLDGk3S+DHU/tUbNbrOXU+kkB11l0vs6/GIACXITdHUPPJtXzNUL
A4uf1unTJH8bSd5xzUOOjApA1vBIPRap+AASYD16rMy0TfJjxV6oOBZndf42S1gZ
8ZynTpgiBDU8W2BtauEqvvCz1+fteYLayoTGxHZRM16z8DqlupCvu/bDQZPJAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU9/X2gyr1bMIODdwzAzxN3d9iEoswHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTM0ODU4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AADHMA0GCSqGSIb3DQEBCwUAA4IBAQBznD8QoUkhUDVYG9UY5Y+9AZ1cw0fG8azx
8nYVekN0cFyMPi07VDTT/UrTNNdhk5avWE8CTBKmgbCkGShYe3TntDiS67FFE3kw
YJoQIwc2glBA3cBq6A1DiUzfeNRqx9mFNXjBoTHChFt6GOvFWb69IcIoMndDPy+o
kJDdTfnmaqehG6CdXxWLrBCwShLyl7Uqgi+J5EroNOmGBKtYuXddc3s8AA1CZcMC
InZ+OHZazT1G29EQpi4eSHvG7qHCNTunqt9EhYvbu42MYuETE0ABO5i48o9973+r
EcjLm0XOaxA0mdfO1if8sMgLrr0uvjWRYw7XHZ9TpdFZ9eo8EtED
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:21:28 2026 by rpki-client