Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135402.roa
File: AS135402.roa (raw, json)
Hash identifier: U6Pq25+P6DmawcxBEgwwGrHqwrlz3SUI/1Pmslu74DI=
Subject key identifier: 5F:FE:77:3D:17:B9:87:82:7F:63:67:47:3B:A3:7B:6F:14:C9:8F:8E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5D39423DDFDA46E94C37CC99B53FA6A9DA14C8EB
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135402.roa
Signing time: Sat 24 Oct 2026 00:06:04 +0000
ROA not before: Sat 24 Oct 2026 00:01:04 +0000
ROA not after: Sat 23 Oct 2027 00:06:04 +0000
asID: 135402
IP address blocks: 82.21.204.0/24 maxlen: 24
82.41.136.0/24 maxlen: 24
178.83.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:39:42:3d:df:da:46:e9:4c:37:cc:99:b5:3f:a6:a9:da:14:c8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 24 00:01:04 2026 GMT
Not After : Oct 23 00:06:04 2027 GMT
Subject: CN=5FFE773D17B987827F6367473BA37B6F14C98F8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:5d:0c:73:e1:08:80:d7:56:3b:da:dc:63:
29:6a:b5:e6:6b:fb:69:e2:87:1d:36:02:dc:b7:a0:
4f:1a:c3:a2:11:be:f3:f5:47:b8:13:9c:8c:0e:a9:
9b:23:b1:24:1a:76:91:f7:28:e5:35:0d:0b:5f:4b:
96:2c:d7:76:62:b9:5f:b1:6c:f0:0b:6d:d7:7c:79:
fe:7a:aa:e1:3e:4a:b0:7a:2a:00:ff:e1:ff:d1:aa:
2d:ba:0f:4a:e4:43:6b:f4:31:18:6d:83:e4:a1:8a:
5a:f5:1d:c6:89:04:82:23:00:71:be:33:d5:e8:53:
82:95:13:6a:35:df:ed:ca:00:d5:61:91:4e:07:cc:
bf:b2:95:90:9e:15:56:85:99:7d:07:7e:b2:7f:16:
00:79:d0:33:c0:9f:c1:22:60:52:29:da:ca:a3:c0:
a0:76:13:d1:6b:c9:f7:33:13:a0:84:fb:7e:db:2a:
a2:89:42:63:b6:cc:10:fc:29:a8:31:f5:85:dd:4d:
98:44:bd:0f:2c:38:fb:c0:e7:25:c3:d6:d4:2c:88:
02:32:94:dd:6e:95:36:68:d0:23:5b:71:b6:6c:78:
e3:40:db:94:68:28:d2:75:b9:ca:a2:c7:5c:2e:60:
cd:1d:c2:c4:65:63:18:9f:90:c7:90:e6:1b:db:06:
9b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FE:77:3D:17:B9:87:82:7F:63:67:47:3B:A3:7B:6F:14:C9:8F:8E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135402.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.204.0/24
82.41.136.0/24
178.83.101.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:c5:92:31:84:fe:cf:3c:25:e8:8d:ed:ee:72:03:43:88:2b:
f9:98:af:eb:38:3b:29:b2:52:77:af:0b:af:29:e7:80:88:e0:
ba:90:97:58:ce:71:d8:88:b1:79:b7:02:ef:c0:84:46:a1:7b:
87:8c:6c:26:89:fa:86:1a:1d:cd:30:00:5a:db:52:d9:c5:c8:
57:17:26:9f:de:c6:e5:d4:fe:7d:19:a2:a0:0b:fd:e3:e3:15:
57:e1:88:d5:0b:ed:7b:26:46:e4:07:83:75:ef:60:69:33:14:
04:0d:15:be:88:4f:24:ae:aa:6a:d4:83:20:4c:97:13:40:58:
8e:d1:a8:3d:92:a7:7a:55:59:db:27:de:c5:7b:f5:b4:3f:fd:
1b:87:0f:1b:7f:b1:94:33:a9:df:6c:fa:22:f5:b5:6d:eb:df:
78:03:8e:ff:86:a3:94:f0:a1:25:1b:b0:c3:23:0c:30:44:a0:
67:51:3b:ba:ba:e5:7d:10:7d:0b:28:71:63:78:b6:a3:3f:d0:
e9:89:b2:98:5c:e8:f9:90:e6:9d:06:4e:7b:17:a0:aa:fb:55:
11:2e:85:29:b1:46:ce:93:e3:8a:28:fc:58:1b:aa:58:5c:21:
81:06:78:c6:ce:04:63:e2:e8:41:fa:70:b0:e6:a2:d7:e0:0c:
70:cb:4f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:25:06 2026 by rpki-client