Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS137235.roa
File: AS137235.roa (raw, json)
Hash identifier: BZwa29p4dk3JHfO58ZuLDpFHRSba4vQdMhxSad7ay3A=
Subject key identifier: D7:55:AE:87:75:E3:FC:6E:5D:B3:EE:93:7B:3C:2C:84:07:4B:7D:A9
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 5F7AD8EBDD9C636C7A95255D05A1FC790DDD3443
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS137235.roa
Signing time: Fri 27 Jun 2025 09:52:15 +0000
ROA not before: Fri 27 Jun 2025 09:47:15 +0000
ROA not after: Fri 26 Jun 2026 09:52:15 +0000
asID: 137235
IP address blocks: 176.53.168.0/24 maxlen: 24
176.53.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:7a:d8:eb:dd:9c:63:6c:7a:95:25:5d:05:a1:fc:79:0d:dd:34:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jun 27 09:47:15 2025 GMT
Not After : Jun 26 09:52:15 2026 GMT
Subject: CN=D755AE8775E3FC6E5DB3EE937B3C2C84074B7DA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ad:36:9b:f0:20:63:bd:00:7c:86:2b:8e:ca:
c3:05:db:cf:b6:d4:27:9e:29:6c:38:1a:a1:d7:5d:
d1:49:c4:f7:b8:9a:0d:12:f7:bd:0e:a6:f2:71:89:
4d:e4:3b:44:20:f7:67:87:5c:1f:94:1d:34:32:70:
43:b6:e9:92:c7:86:b8:36:ee:54:13:77:2c:e4:a2:
b9:d9:d4:d6:75:af:6d:19:a1:07:26:92:6a:11:a6:
ba:62:e6:1b:72:fb:56:a7:1f:de:fa:17:80:aa:7d:
f6:30:00:11:65:c5:78:d4:42:73:6f:ca:4b:88:5a:
96:0c:6a:cc:a1:80:ad:6c:59:7c:09:a4:54:01:e7:
60:b2:36:57:51:42:96:97:7d:45:1a:fc:53:d5:1e:
33:f3:1c:85:55:94:8f:88:0d:ca:a9:cd:dd:b2:07:
f5:49:3a:93:22:0d:ba:8c:03:f6:7f:1a:d8:a0:de:
be:cd:ce:bc:11:57:65:9c:97:c7:24:6a:fe:a6:7e:
81:31:d9:97:59:dc:fe:b1:dc:09:08:43:60:67:d8:
0d:90:88:aa:8b:ea:66:3c:fd:c1:18:16:0e:bc:37:
da:0f:06:3b:f7:16:dc:7e:be:54:be:62:42:db:ae:
96:fc:dc:cd:90:60:b1:4f:cb:39:06:72:67:ed:26:
48:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:55:AE:87:75:E3:FC:6E:5D:B3:EE:93:7B:3C:2C:84:07:4B:7D:A9
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS137235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.168.0/23
Signature Algorithm: sha256WithRSAEncryption
40:62:ae:3f:f6:6d:cc:72:2a:62:c6:84:6b:41:09:f5:fc:9f:
6f:85:0a:dc:5e:24:8e:50:84:4c:b7:6c:e7:29:c9:48:5f:41:
ba:6f:8a:60:30:4a:c3:61:29:88:fa:e7:2b:cf:09:c4:36:a9:
9d:23:86:2a:3c:9f:37:15:4b:c8:7f:b0:32:f6:19:a1:3e:bd:
8a:0d:68:ed:4c:2a:f6:f0:03:fd:33:8e:20:50:a2:f4:6c:b2:
9b:7a:94:1e:7f:51:05:c2:93:ba:5c:c3:4b:01:33:b2:68:fa:
c2:38:6d:0f:1f:60:60:2e:b4:63:4d:9d:bd:85:de:0f:47:be:
c8:e6:3a:c5:95:a7:f5:00:0f:93:5c:34:42:83:d4:cc:42:8c:
25:d7:31:c6:ca:48:cf:d3:bf:a7:30:4a:2e:10:4a:f4:00:30:
10:99:85:33:39:22:46:c2:5d:c3:8e:d2:5c:a0:66:2a:31:67:
25:cf:fb:f4:64:04:ed:dd:3f:0e:fa:b4:8c:a3:c5:8e:8c:1e:
a0:9b:ba:8e:80:a4:5d:40:d7:e1:64:65:45:4d:1e:16:fa:fc:
bb:f2:78:43:51:f5:4a:61:2a:5d:f8:7b:b5:c1:83:8f:f4:6c:
c9:62:5c:1e:af:9a:29:33:52:87:1c:0c:1c:da:3f:e4:b6:28:
58:1d:39:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 03:12:38 2025 by rpki-client