Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137235.roa
File: AS137235.roa (raw, json)
Hash identifier: VMqVq4N2WJg0frs/tHagckkOBzqCe5fu3eblxV0hjhk=
Subject key identifier: 25:82:69:9E:10:93:9B:F3:F0:F8:6D:A0:D5:A1:16:C3:2B:7D:5F:AF
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6170ABB9F707DEDFB2B084F882B7ABCF6ACF72AA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137235.roa
Signing time: Tue 24 Mar 2026 13:19:06 +0000
ROA not before: Tue 24 Mar 2026 13:14:06 +0000
ROA not after: Tue 23 Mar 2027 13:19:06 +0000
asID: 137235
IP address blocks: 178.83.93.0/24 maxlen: 24
178.83.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:70:ab:b9:f7:07:de:df:b2:b0:84:f8:82:b7:ab:cf:6a:cf:72:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 24 13:14:06 2026 GMT
Not After : Mar 23 13:19:06 2027 GMT
Subject: CN=2582699E10939BF3F0F86DA0D5A116C32B7D5FAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ea:ed:d0:50:4b:21:5f:a4:db:4b:e5:bf:c0:
40:bc:76:34:f8:48:37:bd:e0:02:95:e0:7f:72:45:
ba:9f:ec:6f:52:9a:06:2e:da:3a:72:4a:b4:bf:54:
0c:43:49:ed:bb:40:61:e0:d7:ab:63:e2:7a:25:b8:
9b:84:e1:ea:e8:da:7f:52:c2:f8:33:3f:84:e2:03:
ac:41:ce:11:4b:23:fd:00:d1:42:b1:de:ea:7e:70:
41:45:48:38:45:4f:48:cd:03:63:9e:73:0c:67:5a:
9c:75:9a:e6:2d:8a:a8:3f:8f:71:67:97:fb:35:64:
11:84:f8:a6:5e:7c:92:f7:7c:fb:af:51:c5:90:fe:
3b:6f:7f:a8:83:56:ce:45:02:e9:7c:e4:a0:43:b6:
4f:6e:6c:c4:aa:cb:c8:83:e8:95:46:0c:96:c2:53:
d0:81:90:72:40:e4:1e:69:e4:5f:0a:69:2e:ec:57:
36:66:ee:80:32:af:55:1f:f8:e0:8c:67:19:0a:1e:
08:d4:80:17:b1:2e:c6:b1:c3:40:24:3e:60:d1:d5:
68:39:05:22:8e:54:c6:23:e0:99:6a:1a:3b:5a:1f:
79:45:41:6c:39:bf:71:c2:79:bb:77:f2:04:63:91:
82:5b:4a:52:a4:fa:de:93:fb:09:fc:43:ca:ee:72:
ce:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:82:69:9E:10:93:9B:F3:F0:F8:6D:A0:D5:A1:16:C3:2B:7D:5F:AF
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.93.0/24
178.83.190.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:53:d0:4a:f2:36:16:a2:74:82:f6:79:4d:4a:c0:a8:f6:83:
d3:ad:f0:f9:34:28:03:d1:7c:cb:37:89:56:d6:53:53:16:3c:
02:e0:dc:35:71:88:aa:51:52:04:ed:b9:8b:f0:b6:10:bb:4c:
60:27:75:8a:6b:dc:6e:e9:bb:c5:59:11:9f:b9:af:7c:07:e2:
b4:8d:45:46:bb:04:2a:cb:20:f7:c1:d5:20:a8:89:ce:05:51:
21:a6:de:1d:8d:49:ce:d2:02:d2:e2:c3:9c:c4:0c:f9:31:53:
c7:67:66:7e:9a:ef:56:97:07:57:9b:ba:3b:4f:fc:b6:40:ae:
f4:e1:31:0e:95:11:e8:b3:d3:5a:bd:ad:4f:2b:a7:90:d0:f5:
cf:b4:82:fd:51:d2:dd:51:63:b7:5c:c5:9e:8d:c9:b2:1c:de:
2b:4c:cd:32:66:bd:aa:5b:4f:5b:03:94:bc:50:9f:c5:54:da:
ba:57:cf:73:af:35:61:64:22:a9:06:b6:3b:f2:02:7e:9b:02:
fe:29:dd:f3:e3:9e:cc:14:e9:6b:8c:cc:fa:4a:f9:a2:ce:a9:
94:70:b0:46:8d:89:a4:12:87:a2:e9:39:65:9f:1e:e4:d8:bf:
34:3b:a1:57:c8:cd:c4:79:0a:66:35:d6:70:6b:3f:cf:42:8d:
8d:09:f2:a5
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUYXCrufcH3t+ysIT4grerz2rPcqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjAzMjQxMzE0MDZaFw0yNzAzMjMxMzE5MDZaMDMxMTAvBgNV
BAMTKDI1ODI2OTlFMTA5MzlCRjNGMEY4NkRBMEQ1QTExNkMzMkI3RDVGQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz6u3QUEshX6TbS+W/wEC8djT4
SDe94AKV4H9yRbqf7G9SmgYu2jpySrS/VAxDSe27QGHg16tj4noluJuE4ero2n9S
wvgzP4TiA6xBzhFLI/0A0UKx3up+cEFFSDhFT0jNA2OecwxnWpx1muYtiqg/j3Fn
l/s1ZBGE+KZefJL3fPuvUcWQ/jtvf6iDVs5FAul85KBDtk9ubMSqy8iD6JVGDJbC
U9CBkHJA5B5p5F8KaS7sVzZm7oAyr1Uf+OCMZxkKHgjUgBexLsaxw0AkPmDR1Wg5
BSKOVMYj4JlqGjtaH3lFQWw5v3HCebt38gRjkYJbSlKk+t6T+wn8Q8rucs4fAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUJYJpnhCTm/Pw+G2g1aEWwyt9X68wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTM3MjM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAslNd
AwQAslO+MA0GCSqGSIb3DQEBCwUAA4IBAQAfU9BK8jYWonSC9nlNSsCo9oPTrfD5
NCgD0XzLN4lW1lNTFjwC4Nw1cYiqUVIE7bmL8LYQu0xgJ3WKa9xu6bvFWRGfua98
B+K0jUVGuwQqyyD3wdUgqInOBVEhpt4djUnO0gLS4sOcxAz5MVPHZ2Z+mu9WlwdX
m7o7T/y2QK704TEOlRHos9Nava1PK6eQ0PXPtIL9UdLdUWO3XMWejcmyHN4rTM0y
Zr2qW09bA5S8UJ/FVNq6V89zrzVhZCKpBrY78gJ+mwL+Kd3z457MFOlrjMz6Svmi
zqmUcLBGjYmkEoei6Tllnx7k2L80O6FXyM3EeQpmNdZwaz/PQo2NCfKl
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:29:09 2026 by rpki-client