Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137897.roa
File: AS137897.roa (raw, json)
Hash identifier: zcXF1e58YSRDa7zXEp94hLsS+ARXIDlEkoRh7VdijsM=
Subject key identifier: D0:5E:8C:18:57:CB:B0:B4:B9:17:2D:9B:89:64:14:E0:A8:78:C9:E4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 738A6BB9A7DBB9E9BE9D4835C4C679F8FCE80F46
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137897.roa
Signing time: Thu 19 Mar 2026 11:33:53 +0000
ROA not before: Thu 19 Mar 2026 11:28:53 +0000
ROA not after: Thu 18 Mar 2027 11:33:53 +0000
asID: 137897
IP address blocks: 82.22.26.0/24 maxlen: 24
82.38.12.0/24 maxlen: 24
82.38.46.0/23 maxlen: 24
82.38.80.0/23 maxlen: 24
2a13:9500:7c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:8a:6b:b9:a7:db:b9:e9:be:9d:48:35:c4:c6:79:f8:fc:e8:0f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 19 11:28:53 2026 GMT
Not After : Mar 18 11:33:53 2027 GMT
Subject: CN=D05E8C1857CBB0B4B9172D9B896414E0A878C9E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:67:77:f9:b9:bb:a6:91:57:6f:e0:39:93:e2:
34:93:2d:a8:01:3f:ae:4f:1d:ad:a1:6d:c8:f4:79:
8f:62:9a:12:a6:e6:2e:6d:e4:fb:bf:00:bb:14:f5:
4f:33:c6:31:07:32:df:52:57:be:d1:b0:b9:68:51:
f0:e9:66:43:63:e0:a4:60:8d:67:ed:09:0b:18:c4:
b2:72:74:8c:b1:1a:b5:85:ab:5e:f0:70:87:d4:25:
f2:7d:13:ac:75:bf:f2:fb:4a:77:9b:32:37:88:db:
a4:fe:5d:0c:d3:1a:71:45:53:25:0d:f8:aa:2a:0f:
89:62:11:16:89:93:9f:87:b2:ad:d1:84:40:55:81:
6b:5e:7b:54:b2:39:62:2c:2f:74:2b:3f:ea:21:83:
49:af:a1:80:73:15:d0:0a:b9:56:48:00:f1:11:80:
8b:21:fc:52:fd:fd:04:ab:9e:4b:89:34:d6:78:77:
f2:84:8c:9c:76:34:fb:b7:03:df:ac:a7:eb:63:bd:
1d:59:79:84:13:70:02:a9:2a:be:7b:02:f2:40:cd:
dc:bf:3f:fe:6b:aa:5a:8d:0f:d5:59:75:12:dd:a5:
e0:9b:5f:57:1d:ea:e7:ce:8d:70:2d:34:82:27:24:
f2:ed:f5:ed:55:04:5e:2c:77:7e:7a:c2:a6:64:33:
1d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5E:8C:18:57:CB:B0:B4:B9:17:2D:9B:89:64:14:E0:A8:78:C9:E4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137897.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.26.0/24
82.38.12.0/24
82.38.46.0/23
82.38.80.0/23
IPv6:
2a13:9500:7c::/48
Signature Algorithm: sha256WithRSAEncryption
4e:d8:02:03:ee:ce:27:82:ed:b4:39:e1:18:55:2c:8b:cf:4b:
50:2e:65:83:01:81:6b:0f:b6:6d:59:97:fb:94:a8:27:f3:16:
4c:4c:7c:d6:1f:b5:d9:9e:8e:d7:0a:50:06:9e:e1:f7:bc:d6:
5c:02:29:c4:48:53:4a:6f:59:98:e4:d3:88:9b:ef:c4:61:33:
b7:8d:74:c4:5a:cc:24:42:b7:f4:2d:df:99:ce:b8:e2:d4:22:
dc:c9:f6:63:1b:60:6f:00:c5:82:ba:b1:75:75:53:4c:a3:c6:
0f:62:8d:5d:80:ea:bd:0a:3f:dd:e0:21:02:69:1d:d8:68:c3:
69:5e:42:53:60:04:33:12:97:39:02:df:36:7a:9a:e6:38:ab:
94:09:5a:e3:c7:53:21:a0:2f:17:45:bd:73:ef:1e:a5:97:55:
56:c2:35:2c:c0:bf:46:47:70:61:b4:1a:56:dc:df:dd:45:6b:
fd:b5:9d:ba:c2:6d:34:4a:ea:fa:d3:54:99:d2:6f:c2:dd:d0:
63:55:ca:e2:0e:d4:d0:71:01:9a:bd:7d:20:07:90:06:77:c3:
4b:49:b6:8d:e2:09:49:13:7c:fd:6c:99:c6:35:0d:e1:27:a1:
51:58:a9:d2:b3:7d:6e:df:35:81:cf:4d:7a:e8:13:c5:90:5f:
97:38:d9:3b
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUc4pruafbuem+nUg1xMZ5+PzoD0YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjAzMTkxMTI4NTNaFw0yNzAzMTgxMTMzNTNaMDMxMTAvBgNV
BAMTKEQwNUU4QzE4NTdDQkIwQjRCOTE3MkQ5Qjg5NjQxNEUwQTg3OEM5RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQZ3f5ubumkVdv4DmT4jSTLagB
P65PHa2hbcj0eY9imhKm5i5t5Pu/ALsU9U8zxjEHMt9SV77RsLloUfDpZkNj4KRg
jWftCQsYxLJydIyxGrWFq17wcIfUJfJ9E6x1v/L7SnebMjeI26T+XQzTGnFFUyUN
+KoqD4liERaJk5+Hsq3RhEBVgWtee1SyOWIsL3QrP+ohg0mvoYBzFdAKuVZIAPER
gIsh/FL9/QSrnkuJNNZ4d/KEjJx2NPu3A9+sp+tjvR1ZeYQTcAKpKr57AvJAzdy/
P/5rqlqND9VZdRLdpeCbX1cd6ufOjXAtNIInJPLt9e1VBF4sd356wqZkMx2NAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQU0F6MGFfLsLS5Fy2biWQU4Kh4yeQwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTM3ODk3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQAUhYa
AwQAUiYMAwQBUiYuAwQBUiZQMA8EAgACMAkDBwAqE5UAAHwwDQYJKoZIhvcNAQEL
BQADggEBAE7YAgPuzieC7bQ54RhVLIvPS1AuZYMBgWsPtm1Zl/uUqCfzFkxMfNYf
tdmejtcKUAae4fe81lwCKcRIU0pvWZjk04ib78RhM7eNdMRazCRCt/Qt35nOuOLU
ItzJ9mMbYG8AxYK6sXV1U0yjxg9ijV2A6r0KP93gIQJpHdhow2leQlNgBDMSlzkC
3zZ6muY4q5QJWuPHUyGgLxdFvXPvHqWXVVbCNSzAv0ZHcGG0Glbc391Fa/21nbrC
bTRK6vrTVJnSb8Ld0GNVyuIO1NBxAZq9fSAHkAZ3w0tJto3iCUkTfP1smcY1DeEn
oVFYqdKzfW7fNYHPTXroE8WQX5c42Ts=
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:34:16 2026 by rpki-client