Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137897.roa
File: AS137897.roa (raw, json)
Hash identifier: PQ35x20KU9qeZ/emDIIlm9nVrIclZ/bPPeX1NZCXbQQ=
Subject key identifier: E9:AC:8F:BE:C1:10:EB:0E:3D:5D:1D:03:C5:65:42:D4:27:1B:76:55
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 090AEDF18FA17BA80548B2D6C01FDEC1F6612390
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137897.roa
Signing time: Sun 19 Jul 2026 10:50:52 +0000
ROA not before: Sun 19 Jul 2026 10:45:52 +0000
ROA not after: Sun 18 Jul 2027 10:50:52 +0000
asID: 137897
IP address blocks: 82.38.23.0/24 maxlen: 24
82.38.42.0/23 maxlen: 24
82.38.46.0/23 maxlen: 24
82.38.80.0/23 maxlen: 24
82.38.105.0/24 maxlen: 24
82.38.215.0/24 maxlen: 24
82.39.136.0/24 maxlen: 24
178.83.82.0/23 maxlen: 24
178.83.171.0/24 maxlen: 24
2a13:9500:7c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:0a:ed:f1:8f:a1:7b:a8:05:48:b2:d6:c0:1f:de:c1:f6:61:23:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 19 10:45:52 2026 GMT
Not After : Jul 18 10:50:52 2027 GMT
Subject: CN=E9AC8FBEC110EB0E3D5D1D03C56542D4271B7655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:39:b0:69:44:4a:1a:e2:73:32:b5:7e:b1:b7:
78:fb:55:27:3d:38:06:c4:5a:6f:34:43:b1:dd:34:
87:f5:5e:59:eb:78:f2:fe:57:e3:97:91:50:9f:2b:
81:b3:28:e4:a1:79:02:67:19:70:ed:91:5c:62:f1:
84:5f:3f:b6:5a:cd:be:df:6e:5c:b4:b6:79:f7:e6:
0b:15:13:eb:c6:8d:8a:5c:05:3b:5d:77:9c:bd:0d:
ab:61:14:92:0d:c7:64:65:ee:20:cb:b2:e7:7e:af:
48:2f:d3:12:eb:d1:72:16:f8:a1:0a:94:f7:75:ed:
c3:58:0d:32:96:24:ed:b5:db:7d:89:2b:13:ad:2c:
99:7e:b2:8c:d0:2f:01:87:ce:99:24:14:0f:d1:ff:
50:08:40:21:47:28:88:fa:b9:62:33:08:b6:07:05:
cc:c3:1c:93:b6:a7:2a:c6:44:0a:62:85:d3:d9:04:
ca:2e:6f:9d:40:ad:9b:7d:86:74:4d:31:59:e0:a6:
22:cd:d0:df:68:95:68:50:2e:b1:57:e0:ea:97:f6:
5e:e7:6f:53:65:b6:f9:c5:1b:05:ac:98:ad:70:cd:
c8:dc:b0:5c:b7:00:21:f7:19:9c:da:33:9c:bb:a1:
fa:c4:f6:e5:55:bf:29:2d:ed:46:aa:cd:ae:68:62:
51:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AC:8F:BE:C1:10:EB:0E:3D:5D:1D:03:C5:65:42:D4:27:1B:76:55
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS137897.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.23.0/24
82.38.42.0/23
82.38.46.0/23
82.38.80.0/23
82.38.105.0/24
82.38.215.0/24
82.39.136.0/24
178.83.82.0/23
178.83.171.0/24
IPv6:
2a13:9500:7c::/48
Signature Algorithm: sha256WithRSAEncryption
51:68:44:dc:c9:a3:6d:b4:64:b7:19:b1:1b:af:d7:a0:42:04:
67:21:74:fd:ed:6b:de:89:fe:f6:f1:96:3b:2a:04:6c:0a:80:
87:e9:30:da:cd:e3:b3:ce:c4:7c:bc:3c:d8:a9:ed:52:09:55:
da:91:b7:5b:e0:5e:8d:80:be:09:a6:5d:05:7a:c1:83:88:91:
7b:e0:6d:4a:e6:16:14:08:76:91:61:e1:15:64:41:54:aa:6c:
e7:cb:80:20:4e:2b:26:4b:cb:94:84:7a:d0:fc:ab:5a:70:8e:
bd:63:d6:ae:a7:dd:e2:be:b5:ab:04:3b:99:7c:80:07:cf:30:
81:d9:42:c7:b9:1d:be:fd:30:c9:01:1c:68:04:20:fc:37:e7:
3a:de:8f:80:f5:65:42:7a:26:b0:3b:35:11:f3:28:d3:ab:6e:
4a:09:fc:74:db:88:5e:87:a1:c7:00:11:c9:f7:29:0b:e0:29:
7a:e9:9b:c5:0f:f5:ed:f7:03:17:1b:6d:c4:9b:48:b6:42:59:
fe:be:34:cc:e8:16:f0:2f:51:39:e8:0d:db:e0:35:66:dd:17:
4e:a8:a3:62:55:04:4c:bb:62:58:f0:fc:72:0e:7f:2a:30:46:
31:2f:01:8d:44:4b:44:4d:6c:9c:ac:74:bd:09:b5:b0:42:7a:
67:cf:d4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:17:59 2026 by rpki-client