Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS137410.roa
File: AS137410.roa (raw, json)
Hash identifier: MAtxvXTCvYplV9fhUTXJjr4A7lQrOMaeeif4T3vBvNM=
Subject key identifier: 6B:A9:A1:D1:FD:74:39:3B:0A:40:42:FE:1D:EE:52:72:21:4E:64:94
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 41EB698D8705D5E16961E8A2344BD08B3BBA1C7B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS137410.roa
Signing time: Sat 14 Nov 2026 10:22:57 +0000
ROA not before: Sat 14 Nov 2026 10:17:57 +0000
ROA not after: Sat 13 Nov 2027 10:22:57 +0000
asID: 137410
IP address blocks: 51.241.8.0/24 maxlen: 24
51.241.164.0/24 maxlen: 24
78.105.184.0/24 maxlen: 24
94.118.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:49:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:eb:69:8d:87:05:d5:e1:69:61:e8:a2:34:4b:d0:8b:3b:ba:1c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 14 10:17:57 2026 GMT
Not After : Nov 13 10:22:57 2027 GMT
Subject: CN=6BA9A1D1FD74393B0A4042FE1DEE5272214E6494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d6:14:2e:af:c0:c4:a2:35:75:82:73:be:55:
1a:ff:2a:7f:08:0a:27:9b:7f:e5:3b:45:ca:3e:c7:
32:b3:20:b0:b4:ac:ee:27:c2:8b:3a:5e:34:bf:9f:
57:66:28:56:fe:18:ae:17:7a:fc:83:7b:2b:30:d7:
c2:2b:8e:3c:c4:6d:6a:71:80:d4:1b:8c:fa:2c:cc:
9b:0c:ea:ba:2b:f5:df:d6:2f:a2:b0:4e:4a:28:c8:
29:5f:85:57:32:e1:fb:36:a0:9f:7b:72:67:65:b6:
09:ff:c5:6f:b5:04:4a:2a:24:7c:92:38:b0:3e:2d:
b2:29:12:5d:ad:1e:38:76:ec:01:92:9e:07:13:17:
56:2f:46:be:22:3a:c9:70:8b:2c:3b:19:0d:36:d9:
84:de:b3:65:ec:56:c5:d4:db:31:b0:79:a6:cc:d7:
38:91:e4:8b:76:71:42:4e:22:2b:55:47:6f:f0:92:
0c:f9:b4:ed:04:03:9e:ab:3f:b7:9c:69:54:16:35:
ea:a3:0f:52:a6:9a:95:0f:be:da:85:4f:b7:0d:ef:
71:60:df:a7:a0:06:b5:13:a6:44:38:f9:f2:01:30:
46:60:35:0b:59:03:2b:72:bf:b9:30:6e:49:92:74:
0e:b5:7e:96:d6:f0:d2:5e:a9:01:d4:1e:82:56:25:
50:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A9:A1:D1:FD:74:39:3B:0A:40:42:FE:1D:EE:52:72:21:4E:64:94
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS137410.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.8.0/24
51.241.164.0/24
78.105.184.0/24
94.118.12.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:93:db:7e:e2:d5:2c:c9:ca:d2:9c:d4:de:ba:f7:0f:84:f3:
31:72:ac:d4:2d:f1:7e:dc:f6:7d:0e:52:8f:63:e2:3d:23:4f:
d1:b7:cf:e1:63:70:f3:a4:36:aa:42:5e:0b:8c:22:94:ea:9e:
7c:d3:07:f9:44:4b:9a:0f:61:41:2f:b8:e7:78:6f:cb:31:cd:
4e:ea:1b:86:4a:5d:83:43:97:b9:32:f5:6c:1b:d4:56:09:0a:
7a:75:00:9b:9b:86:dc:27:ef:35:77:1d:35:ef:53:d2:a8:28:
7b:b6:e3:c8:c7:6a:33:30:d5:dc:16:9f:83:19:b2:15:4f:bd:
ce:3c:08:fe:78:8d:5a:52:66:4b:60:1e:0a:c0:4d:df:6e:05:
ef:42:34:f4:00:83:cc:67:34:38:26:37:af:f9:ec:c6:c2:8e:
15:ee:4f:d4:33:08:e1:28:6c:95:14:d3:7b:fb:42:a1:b2:8b:
f5:8f:44:9a:0b:63:81:15:9c:54:bd:d4:d2:e2:ff:97:46:1d:
51:c7:a3:e1:e2:a3:30:6d:b9:52:51:4f:b2:45:0e:1d:01:9f:
ed:79:88:8e:75:ba:00:ed:98:9d:ac:f2:27:03:36:05:fc:f1:
a7:40:fe:78:47:cc:1f:a6:e5:9a:09:3d:c6:76:a9:98:36:fd:
69:59:04:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:56:31 2026 by rpki-client