Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS136725.roa
File: AS136725.roa (raw, json)
Hash identifier: GAUUb697jFwW1rYiyywfUgcF7yWBEVWzqVY/URmziAc=
Subject key identifier: 64:DE:4D:6D:60:8F:74:6A:B1:C0:EE:05:CF:39:0F:EE:3D:86:5D:8F
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 71E9391396D7E5B316EA6BD22CD8488F5787977F
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS136725.roa
Signing time: Thu 23 Jul 2026 07:35:21 +0000
ROA not before: Thu 23 Jul 2026 07:30:21 +0000
ROA not after: Thu 22 Jul 2027 07:35:21 +0000
asID: 136725
IP address blocks: 188.220.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:e9:39:13:96:d7:e5:b3:16:ea:6b:d2:2c:d8:48:8f:57:87:97:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 23 07:30:21 2026 GMT
Not After : Jul 22 07:35:21 2027 GMT
Subject: CN=64DE4D6D608F746AB1C0EE05CF390FEE3D865D8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4e:cc:b5:cd:d6:12:33:b2:c6:db:55:74:b0:
81:da:15:be:72:64:1b:28:40:c8:c2:ff:0a:6a:f7:
7c:1a:16:b3:51:73:6e:c5:7f:33:3e:8b:89:40:3a:
47:82:64:b6:c6:2b:19:68:cd:23:e4:81:9f:10:d3:
61:d2:35:3d:f7:2c:db:e5:1f:83:39:a0:f8:fb:aa:
16:4c:04:f9:3a:1f:42:46:e2:4f:c6:28:b7:85:93:
39:e9:50:86:fc:4d:40:c1:e9:04:5c:4c:f2:b5:a1:
ef:9b:bb:30:10:a0:ee:7b:24:3b:d3:fb:01:aa:f9:
18:95:0c:f1:ce:c2:bd:b8:c4:aa:2c:81:6a:ce:3f:
95:56:0c:b4:51:34:ab:b2:13:5a:91:7b:d9:18:c2:
75:02:31:74:30:d7:56:6e:a1:ff:7e:6c:62:af:69:
b1:d0:49:ef:0a:e5:31:1d:12:f1:54:63:e6:88:71:
a9:db:3c:2a:06:46:2d:82:eb:44:d9:67:76:61:24:
01:2e:05:7c:98:ea:aa:b6:ac:eb:2d:fd:02:07:73:
bf:ea:80:80:75:e7:2c:ca:c1:df:d4:21:3c:3e:2c:
4a:8c:02:74:b8:9a:a2:1b:bb:b8:aa:26:2c:36:fb:
c5:1a:5b:a8:ca:5d:e6:64:ee:27:81:8c:56:9c:4b:
65:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DE:4D:6D:60:8F:74:6A:B1:C0:EE:05:CF:39:0F:EE:3D:86:5D:8F
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS136725.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.7.0/24
Signature Algorithm: sha256WithRSAEncryption
66:8d:05:b8:8a:d4:be:3c:b4:b1:7b:8a:b5:d3:87:bf:d7:68:
64:94:bb:e8:d4:c7:9d:17:18:95:dc:db:72:9d:8b:de:72:5f:
58:2a:dc:73:8e:42:7d:67:72:09:45:31:9b:d1:22:1a:c4:a6:
0d:c1:56:8b:04:90:6d:a3:30:08:73:0d:24:cf:d6:6f:18:83:
a5:53:13:ed:ae:1b:ce:6c:83:95:65:5c:ba:a9:2b:5f:65:45:
ac:24:0d:18:ba:0f:70:08:5e:60:1d:fb:99:03:49:16:2e:18:
7a:02:00:3d:d8:04:98:f0:73:d6:c9:6a:69:6c:0d:5f:83:f9:
34:dc:b2:80:f3:1f:38:29:13:0e:3a:c3:e8:82:97:ce:0d:70:
74:b1:1f:f4:4b:63:24:2a:51:c1:81:b1:e0:98:b1:9a:85:e2:
a3:e3:c6:46:d3:43:92:d3:ed:76:8a:5d:83:79:74:73:ad:b1:
52:77:7a:45:3c:b2:d6:32:f1:d7:1f:c2:ef:bb:58:b3:f3:9e:
16:38:50:69:a6:59:19:50:d4:65:04:ba:d7:98:95:d6:61:2a:
fe:21:09:a4:f2:a9:5c:f8:4f:1e:27:1b:db:e4:13:ea:99:d2:
72:79:f4:23:1b:b7:25:d0:c0:39:69:c9:ae:45:74:1e:5c:1e:
be:0e:74:73
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUcek5E5bX5bMW6mvSLNhIj1eHl38wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA3MjMwNzMwMjFaFw0yNzA3MjIwNzM1MjFaMDMxMTAvBgNV
BAMTKDY0REU0RDZENjA4Rjc0NkFCMUMwRUUwNUNGMzkwRkVFM0Q4NjVEOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZTsy1zdYSM7LG21V0sIHaFb5y
ZBsoQMjC/wpq93waFrNRc27FfzM+i4lAOkeCZLbGKxlozSPkgZ8Q02HSNT33LNvl
H4M5oPj7qhZMBPk6H0JG4k/GKLeFkznpUIb8TUDB6QRcTPK1oe+buzAQoO57JDvT
+wGq+RiVDPHOwr24xKosgWrOP5VWDLRRNKuyE1qRe9kYwnUCMXQw11Zuof9+bGKv
abHQSe8K5TEdEvFUY+aIcanbPCoGRi2C60TZZ3ZhJAEuBXyY6qq2rOst/QIHc7/q
gIB15yzKwd/UITw+LEqMAnS4mqIbu7iqJiw2+8UaW6jKXeZk7ieBjFacS2WHAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUZN5NbWCPdGqxwO4FzzkP7j2GXY8wHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTM2NzI1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNwH
MA0GCSqGSIb3DQEBCwUAA4IBAQBmjQW4itS+PLSxe4q104e/12hklLvo1MedFxiV
3NtynYvecl9YKtxzjkJ9Z3IJRTGb0SIaxKYNwVaLBJBtozAIcw0kz9ZvGIOlUxPt
rhvObIOVZVy6qStfZUWsJA0Yug9wCF5gHfuZA0kWLhh6AgA92ASY8HPWyWppbA1f
g/k03LKA8x84KRMOOsPogpfODXB0sR/0S2MkKlHBgbHgmLGaheKj48ZG00OS0+12
il2DeXRzrbFSd3pFPLLWMvHXH8Lvu1iz854WOFBpplkZUNRlBLrXmJXWYSr+IQmk
8qlc+E8eJxvb5BPqmdJyefQjG7cl0MA5acmuRXQeXB6+DnRz
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:06:20 2026 by rpki-client