Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137897.roa
File: AS137897.roa (raw, json)
Hash identifier: pxPZTv4+O4eVtn/+feZqdpafy9qL3RYtP0ikY9wAwQc=
Subject key identifier: 59:4C:65:E3:68:5F:34:59:3E:EE:BD:28:BE:FC:35:D5:8F:6B:2B:A2
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 07CB11AB998C4E14D8EA45DA1265AD8DD75363CB
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137897.roa
Signing time: Mon 09 Nov 2026 00:05:51 +0000
ROA not before: Mon 09 Nov 2026 00:00:51 +0000
ROA not after: Mon 08 Nov 2027 00:05:51 +0000
asID: 137897
IP address blocks: 82.38.42.0/23 maxlen: 24
82.38.46.0/23 maxlen: 24
82.38.80.0/23 maxlen: 24
178.83.82.0/23 maxlen: 24
2a13:9500:7c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:cb:11:ab:99:8c:4e:14:d8:ea:45:da:12:65:ad:8d:d7:53:63:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 9 00:00:51 2026 GMT
Not After : Nov 8 00:05:51 2027 GMT
Subject: CN=594C65E3685F34593EEEBD28BEFC35D58F6B2BA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:21:cf:b1:5d:3e:2d:f6:cd:6d:63:be:57:68:
5d:97:41:00:cd:01:f8:3c:4d:8a:ff:b8:34:95:1c:
7a:47:52:91:75:5b:c4:8b:3f:2d:58:69:99:16:98:
01:27:85:54:57:17:ee:21:ca:fa:c5:4e:5f:3d:38:
b3:d3:f6:39:e2:da:b2:a2:33:3b:38:7d:4d:bf:2e:
15:dc:ef:65:3a:68:b7:ae:c2:05:80:25:2d:f7:f5:
93:56:a5:bd:fe:a5:61:85:50:60:da:6c:ac:fd:2c:
c2:ea:07:c1:e0:1e:ac:18:78:f2:4c:1d:b6:05:a3:
8f:4c:f1:d0:db:10:73:8d:17:78:df:6c:8f:e6:ee:
77:08:19:f9:25:ac:1e:6a:ba:00:8b:e8:38:e6:93:
cb:ef:4c:60:8c:22:e9:85:51:46:f7:a3:f5:6b:95:
fd:2c:4e:ff:34:6a:a4:c0:f0:be:23:ac:26:aa:3a:
c8:12:e7:75:58:3b:a7:36:7d:ff:6b:56:c3:f9:75:
89:c8:84:74:c9:a4:e1:3a:60:4a:f3:41:ea:54:74:
f7:4c:87:24:69:39:99:99:24:d6:bf:7f:1a:3f:d2:
6a:57:cf:36:4d:71:f3:43:d4:c4:a6:86:17:16:c3:
40:fa:5f:f4:18:f9:e0:ba:60:e8:3f:d3:57:42:a9:
4d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4C:65:E3:68:5F:34:59:3E:EE:BD:28:BE:FC:35:D5:8F:6B:2B:A2
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137897.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.42.0/23
82.38.46.0/23
82.38.80.0/23
178.83.82.0/23
IPv6:
2a13:9500:7c::/48
Signature Algorithm: sha256WithRSAEncryption
7e:08:b7:1e:89:17:73:7e:51:d7:ad:7e:47:df:9c:e3:29:0e:
a1:2d:9a:20:a8:93:05:a7:50:b7:11:cf:a3:29:f1:e5:63:39:
15:ab:dc:b1:ca:03:b9:8f:d7:42:3d:36:5a:02:56:84:52:e7:
4f:68:89:6e:a2:2a:d0:f6:77:ad:6d:6d:1b:75:89:29:87:f4:
c7:38:48:6d:c5:c5:bb:56:8d:66:74:4b:9f:9c:c2:b8:b5:64:
f1:8a:c7:4d:69:38:c5:ce:dc:36:f0:07:3b:c2:69:40:5b:64:
62:e4:fd:f4:ec:bc:76:fe:17:b5:48:af:a9:3b:3c:90:bd:e6:
3b:de:b8:af:5b:0e:92:dd:f2:14:50:73:bf:46:15:d9:e5:48:
09:53:5a:f5:31:e5:30:cc:14:a1:db:b3:37:73:ff:9f:74:56:
82:67:35:65:a9:f7:de:92:30:f9:a2:32:c5:11:84:3d:01:95:
13:39:85:95:19:99:3e:cf:a9:7c:71:68:64:6f:ef:d3:83:4c:
2b:28:4b:31:93:ce:3e:a8:6c:e8:51:85:1e:01:7c:52:ec:4e:
df:f1:94:a0:35:8b:c5:c5:a4:72:92:77:06:62:f0:85:49:22:
70:aa:7a:c7:96:b8:c7:da:93:0e:7c:cf:14:c7:1d:12:7a:8d:
e0:31:3a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:48:21 2026 by rpki-client