Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS134494.roa
File: AS134494.roa (raw, json)
Hash identifier: De+63tye0OJ59bBFWw5jdHh5GSz8f5lLR2uxuwt74QI=
Subject key identifier: 00:CE:A8:C6:F5:A7:1B:BC:24:A8:48:4C:78:B3:EC:46:A1:10:45:66
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 76B171DCEB7F0181127AFC82A8E30B9BAADBC050
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS134494.roa
Signing time: Sat 14 Nov 2026 07:14:18 +0000
ROA not before: Sat 14 Nov 2026 07:09:18 +0000
ROA not after: Sat 13 Nov 2027 07:14:18 +0000
asID: 134494
IP address blocks: 92.113.89.0/24 maxlen: 24
92.113.114.0/24 maxlen: 24
92.113.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:b1:71:dc:eb:7f:01:81:12:7a:fc:82:a8:e3:0b:9b:aa:db:c0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 14 07:09:18 2026 GMT
Not After : Nov 13 07:14:18 2027 GMT
Subject: CN=00CEA8C6F5A71BBC24A8484C78B3EC46A1104566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:30:6a:c1:63:25:f9:ff:ad:48:fa:53:d6:65:
a8:7d:e1:7b:07:63:86:9a:34:63:44:74:b5:cd:d4:
71:b8:95:3a:c0:c0:ec:36:c1:7a:e5:85:96:a7:3e:
ef:64:7f:84:ac:e5:ed:64:d8:23:ce:51:fc:df:43:
d9:c1:7f:6c:84:e2:d5:1f:e3:e8:fc:99:cb:37:3f:
9c:0e:5f:ce:36:89:ea:b2:e0:1e:61:12:c6:8b:f1:
a8:19:12:68:c9:5b:65:cf:ce:55:bd:b9:1c:7c:03:
52:49:43:dd:7d:5c:2a:9c:3d:dd:1a:95:0c:e1:b8:
6f:6b:46:31:94:e9:e5:21:76:75:95:a5:61:69:38:
48:9c:80:bc:54:dc:c5:e3:cc:3a:05:37:0f:69:55:
e4:2c:21:92:92:77:3d:47:a9:73:08:74:62:4b:e0:
84:2f:c3:d6:f1:2d:26:81:f9:d9:a0:f1:15:1b:1c:
fc:42:21:59:cd:65:98:bd:ba:6c:36:b5:20:d7:e3:
38:2e:49:6b:2c:45:71:62:50:b4:c4:09:2e:05:93:
ef:23:16:a6:2d:4f:fa:1d:34:36:18:7f:80:07:2e:
43:d7:c5:cf:ab:9a:b6:db:ea:39:b7:31:5d:2d:77:
02:82:16:7d:8b:d9:b4:d2:9d:9b:f0:a7:08:a9:39:
68:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CE:A8:C6:F5:A7:1B:BC:24:A8:48:4C:78:B3:EC:46:A1:10:45:66
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS134494.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.89.0/24
92.113.114.0/24
92.113.174.0/24
Signature Algorithm: sha256WithRSAEncryption
04:7f:ac:01:b6:a4:d0:d5:d5:65:d2:ea:d5:67:d8:95:d7:4f:
53:64:7f:ec:97:01:24:70:12:44:8d:00:70:de:36:66:e4:c2:
73:eb:fe:71:d6:cd:39:fb:81:92:bc:de:5f:7b:3e:9d:df:a4:
c6:10:08:17:95:1e:15:44:9c:04:cc:d2:b1:31:8f:37:8f:88:
56:b2:6e:4a:cf:8c:fe:c6:52:c2:eb:07:13:f0:2f:bf:ce:35:
a2:35:21:78:93:21:3e:30:45:ea:12:59:85:78:32:43:97:63:
fc:a6:a2:50:6b:0c:ba:aa:04:5d:9f:c2:5b:d6:e5:6d:6a:cf:
7a:6c:cc:33:90:15:f6:89:ee:15:2d:0f:4d:c5:52:3d:8d:60:
c1:c9:64:dc:ad:06:d1:9f:96:c9:95:a5:3f:a8:28:dc:c9:0b:
0f:6c:ec:5a:bb:44:ac:1e:47:4a:77:8f:d3:b0:d4:43:e9:c4:
2e:5d:fd:e5:9f:18:81:cd:79:a2:fc:11:6a:e3:b9:6b:00:f6:
41:4a:cd:74:61:3e:a9:a1:7d:bf:64:7b:3e:88:0e:56:6f:28:
d2:ee:61:2c:8f:c5:7e:cd:36:9e:cf:f0:c2:12:a6:bb:e7:be:
ce:8b:e3:b1:26:9e:3f:9b:83:f0:94:93:96:c0:4b:7c:74:44:
3e:59:df:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:34:32 2026 by rpki-client