Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS136725.roa
File: AS136725.roa (raw, json)
Hash identifier: BSBKkpo3Me4BZt+z+m17DFBZLzxqbGrm2yt+sxEZfts=
Subject key identifier: 9E:BC:98:E1:25:79:F5:76:05:5A:A7:56:B1:E4:74:A3:DB:3C:12:6D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 72DF75BAEE8F33918507C1774AB90801B71D43B0
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS136725.roa
Signing time: Thu 23 Jul 2026 07:35:28 +0000
ROA not before: Thu 23 Jul 2026 07:30:28 +0000
ROA not after: Thu 22 Jul 2027 07:35:28 +0000
asID: 136725
IP address blocks: 82.29.98.0/24 maxlen: 24
178.83.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:df:75:ba:ee:8f:33:91:85:07:c1:77:4a:b9:08:01:b7:1d:43:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 23 07:30:28 2026 GMT
Not After : Jul 22 07:35:28 2027 GMT
Subject: CN=9EBC98E12579F576055AA756B1E474A3DB3C126D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c8:6f:1e:ae:ef:63:de:81:62:90:44:07:60:
40:c3:be:86:0b:7a:a5:f2:48:d2:3c:3d:b0:bc:d9:
6a:9f:de:03:e2:39:3d:a6:7f:f7:88:2a:26:ab:71:
cf:fa:bf:a4:40:b9:39:3f:a2:33:ac:7d:96:01:44:
23:7f:c0:0c:15:92:33:27:81:d7:c3:53:bf:fa:d4:
b6:84:b6:1a:55:f1:04:68:45:33:32:10:10:1d:1e:
ed:ea:33:90:39:76:41:e7:82:91:ab:cc:86:b1:a9:
2a:86:63:4b:8b:d9:c9:b2:2c:c8:f4:9f:1f:00:ae:
b1:90:f5:ff:e4:9a:60:1b:99:97:db:dd:fb:d8:10:
67:84:2f:86:aa:ba:ac:f1:f1:ca:56:50:0b:3f:4c:
df:00:44:8b:98:e3:e8:5d:2e:a7:3a:cf:4d:b9:9c:
8c:22:82:18:b5:92:c5:d4:b2:82:17:f4:60:5e:07:
c6:c9:90:98:df:d0:7e:06:79:80:46:28:47:0f:99:
df:42:4f:54:a3:ab:0a:41:d7:3f:32:e3:53:06:86:
36:40:d7:5f:3f:df:2d:d0:56:db:10:5c:ba:85:84:
88:bf:c2:91:8e:e4:86:32:e0:e9:fb:b0:1d:6d:2e:
7e:dd:ff:a3:81:30:10:6f:4a:ce:48:a8:3d:72:7e:
fa:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BC:98:E1:25:79:F5:76:05:5A:A7:56:B1:E4:74:A3:DB:3C:12:6D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS136725.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.98.0/24
178.83.133.0/24
Signature Algorithm: sha256WithRSAEncryption
04:6a:17:6e:09:5b:25:b4:08:bc:b5:b8:a8:48:b9:bb:4e:ce:
c8:27:b9:39:39:7c:aa:b0:98:32:19:82:c8:e6:27:4c:77:b8:
0d:0a:04:e8:27:51:50:b5:09:46:26:2c:a4:a5:3b:43:56:d2:
07:fe:3e:ac:3e:0d:e7:70:76:d1:b9:9d:58:23:e8:ba:8a:e1:
8d:2f:6e:3d:e9:a8:39:ae:8a:18:23:47:aa:70:51:02:78:53:
21:22:1a:3c:55:4a:09:11:2c:44:cf:79:05:54:46:ad:3f:ef:
18:23:1e:fd:92:c4:5f:8f:5b:26:5b:52:c7:85:a4:e6:66:d9:
3d:d9:1b:32:6c:41:39:0f:bc:c8:42:2a:01:f1:f5:7e:ee:4d:
08:4c:9f:fc:32:ee:8e:e9:cf:3a:34:93:8c:1c:34:73:61:1e:
71:2a:ef:3a:8c:b7:20:b7:c3:ea:d0:41:cd:63:55:2f:c1:6f:
9b:94:4c:49:b9:0f:36:51:eb:b7:64:d1:05:05:94:bf:4b:93:
52:38:13:27:2b:d3:47:31:de:e0:4b:d3:ef:e0:2e:45:0d:be:
68:92:3b:b0:55:38:e2:58:ea:5b:c5:84:e1:8e:4d:82:61:ef:
67:62:92:78:a7:9a:b9:7c:81:9b:c8:ad:56:82:55:ed:c0:e7:
40:84:62:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:16:37 2026 by rpki-client