Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS137409.roa
File: AS137409.roa (raw, json)
Hash identifier: q50RUQGX5v4MwpGZg6n3h+aCi9sYMgfK+y69sQdjOUg=
Subject key identifier: 1A:95:6D:5E:81:C9:04:40:D3:26:55:BA:4A:5F:2D:B0:9B:D2:19:9A
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 70D6F50DA129FE73542F235F6E914BFE40E11B4C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS137409.roa
Signing time: Sat 14 Nov 2026 00:01:30 +0000
ROA not before: Fri 13 Nov 2026 23:56:30 +0000
ROA not after: Sat 13 Nov 2027 00:01:30 +0000
asID: 137409
IP address blocks: 91.124.88.0/24 maxlen: 24
92.113.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:d6:f5:0d:a1:29:fe:73:54:2f:23:5f:6e:91:4b:fe:40:e1:1b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 13 23:56:30 2026 GMT
Not After : Nov 13 00:01:30 2027 GMT
Subject: CN=1A956D5E81C90440D32655BA4A5F2DB09BD2199A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:3d:98:9b:d0:05:ee:6c:bd:f5:b1:0d:0f:
77:e9:b9:1c:bf:9a:c0:33:03:35:89:4d:5c:0a:0a:
f8:3b:1e:b1:2e:e5:15:64:09:df:f3:c6:a3:23:c9:
d2:cd:8d:db:bd:42:0d:4f:03:c6:af:b7:0c:bc:bb:
38:d0:bf:ff:d5:ea:6b:96:d4:37:ed:eb:d0:c7:81:
ef:2d:26:0b:80:43:a5:64:52:c2:24:36:30:22:62:
9d:fe:d2:df:b7:4e:f1:00:3b:ad:7e:57:23:6c:93:
85:fa:45:48:cd:8f:b0:71:45:21:6a:9d:b1:48:f2:
c3:23:67:fc:1e:27:82:3e:83:69:6b:89:34:55:d5:
ab:2f:d3:94:a7:a7:35:52:51:58:11:bb:c7:b9:8a:
ef:da:f0:24:b1:d0:e7:02:f5:62:82:62:04:c2:74:
17:10:b3:89:01:68:29:31:7f:e7:c2:1d:33:a1:8f:
2a:8d:5e:a8:bd:71:c8:c6:3a:48:a8:a7:59:ca:e1:
0e:79:0c:f0:55:1c:e3:70:fa:f0:36:b9:a9:f8:19:
f2:fa:39:8a:ea:0f:a1:cb:3d:46:82:a0:80:7d:09:
ce:81:86:1c:06:0c:4f:c9:d7:f3:9d:96:e9:fa:7e:
12:7d:4f:84:d6:c9:80:73:5d:c7:60:5c:75:10:78:
e1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:95:6D:5E:81:C9:04:40:D3:26:55:BA:4A:5F:2D:B0:9B:D2:19:9A
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS137409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.88.0/24
92.113.137.0/24
Signature Algorithm: sha256WithRSAEncryption
79:57:27:72:d3:48:f2:71:e6:d6:8d:8f:c7:b8:ac:7b:f2:21:
fb:89:88:c1:81:a0:55:64:50:5a:92:6f:00:07:bc:c9:8f:15:
cc:cb:c2:44:b9:d9:65:b3:d4:79:58:31:14:84:c6:91:b7:f4:
5d:2c:ff:58:b4:ab:e0:a4:40:d0:eb:7b:d7:6f:49:0b:ce:75:
b6:7f:97:7a:d7:44:92:bb:c8:96:ca:10:bd:a6:bb:5c:88:66:
a0:ca:37:7b:a0:65:a3:5d:ca:54:f0:46:55:eb:50:6d:7f:df:
1c:57:f5:8c:f2:66:f9:fe:cd:2e:4f:fa:d4:d8:88:7e:4b:7e:
a7:f1:1f:4b:71:78:c0:08:4f:46:18:ee:b2:b5:f7:63:1f:98:
3e:d9:d6:6f:7c:a1:cd:74:05:11:bc:d5:e0:65:f1:96:61:49:
f3:04:91:02:e2:69:5d:d5:54:b4:6c:f3:3b:72:f2:f5:90:df:
c6:b5:dd:7c:02:b4:13:e5:d7:23:4e:3c:77:4c:33:11:1a:c9:
27:bf:9f:8b:43:2f:d1:bd:a4:6c:cb:4c:d3:21:18:d6:85:b0:
90:6c:40:9f:2a:f0:a5:f6:05:1c:f8:ad:a1:36:b1:3c:99:38:
27:c3:a7:4a:bc:82:ad:02:5a:11:fe:5c:63:4a:8e:66:09:ad:
04:38:b1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:30:10 2026 by rpki-client