Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138715.roa
File: AS138715.roa (raw, json)
Hash identifier: s4QaaAfE7fqkju3HfXWF4cbILkWhVi6eGm2HafPA1Yg=
Subject key identifier: 0D:1A:BD:02:BC:FC:E5:CB:5C:C7:71:22:DC:35:09:22:A6:FD:08:55
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5C7C320A82BAE8C2E760429A62AAD3B984F7C3FB
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138715.roa
Signing time: Mon 22 Jun 2026 19:40:30 +0000
ROA not before: Mon 22 Jun 2026 19:35:30 +0000
ROA not after: Mon 21 Jun 2027 19:40:30 +0000
asID: 138715
IP address blocks: 167.148.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:7c:32:0a:82:ba:e8:c2:e7:60:42:9a:62:aa:d3:b9:84:f7:c3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 22 19:35:30 2026 GMT
Not After : Jun 21 19:40:30 2027 GMT
Subject: CN=0D1ABD02BCFCE5CB5CC77122DC350922A6FD0855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:97:47:1c:51:0e:42:e1:bd:51:f4:d1:0a:e7:
37:4d:61:4e:65:48:64:03:1e:ab:42:10:b0:6c:b3:
a4:8d:63:29:32:db:37:e0:b6:c0:58:c1:92:44:db:
25:5d:bd:2a:15:9e:85:8c:66:4c:38:f6:b3:b8:2f:
2b:af:ea:e3:6e:aa:94:f7:a1:33:6e:68:87:48:7e:
0c:c6:fb:a8:c2:63:50:d3:6f:6f:1e:a7:ae:e9:21:
ef:45:c0:2a:e8:c2:48:b8:68:74:dd:59:a2:31:a4:
6e:13:8c:2f:16:a9:40:8b:d2:36:2e:1d:78:3e:96:
da:60:51:05:d7:b5:22:a7:aa:a5:84:94:2c:aa:e1:
f4:ba:50:41:c0:03:da:18:36:02:52:43:ea:b3:c1:
fa:ae:ee:f5:60:f1:97:c2:be:f8:14:44:f9:e0:e8:
27:29:8e:82:29:a2:9e:cc:71:6f:3a:26:a6:77:af:
ea:c1:ca:00:ed:fa:29:f6:52:8b:d2:29:f6:81:35:
96:d1:14:71:03:a8:f1:57:97:9f:03:d1:75:d3:01:
fa:b2:e0:f0:8a:98:f9:79:1f:a4:13:11:79:eb:41:
cd:10:ca:16:fb:dd:b7:18:cf:c5:9d:3c:2a:94:62:
6d:c0:04:d0:57:06:5b:d5:c1:40:6a:05:e3:f6:c6:
b7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1A:BD:02:BC:FC:E5:CB:5C:C7:71:22:DC:35:09:22:A6:FD:08:55
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138715.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.87.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:97:33:e2:4b:17:27:e0:98:3c:d0:94:e6:24:dc:6e:2f:29:
ec:b0:55:1d:e3:25:c2:44:0c:aa:1a:b5:23:84:08:c6:56:c3:
0e:24:6e:63:8e:58:79:02:15:f0:00:6a:b5:98:19:9d:2e:6b:
6f:84:dc:99:fd:1b:09:c9:b7:fd:ab:a9:f3:bf:f3:55:60:5c:
f8:52:13:9e:7b:dc:bd:8a:d8:23:fc:e0:ba:ff:ae:73:7b:a1:
c0:6d:bd:67:64:1a:cf:94:6b:94:e1:a0:7d:2e:49:10:d8:c6:
ce:4b:86:cd:7d:f3:cf:19:11:80:48:34:cf:5c:89:2c:10:8d:
d9:29:80:8d:7f:07:50:8c:10:3b:20:07:e3:96:26:3e:17:8f:
9e:26:af:c5:11:80:de:0b:67:01:67:2f:bc:ae:e4:e1:d3:56:
e4:14:0b:fd:79:a1:3c:ba:7f:38:ac:08:dd:af:84:a0:4d:88:
57:e3:f7:73:16:95:d3:86:a4:5b:a6:0c:b4:fe:1c:22:6e:fc:
16:93:fd:5c:db:5e:fa:de:c2:ae:1b:ce:11:0c:c4:3b:25:a5:
98:f0:bb:35:b7:cc:8c:ad:8d:5d:cf:3d:ff:ff:26:8a:fc:ae:
b2:c2:52:6f:07:3d:72:e3:98:45:6f:80:f9:f4:d0:dc:8a:dc:
37:a3:5a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:33:51 2026 by rpki-client