Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS138997.roa
File: AS138997.roa (raw, json)
Hash identifier: ScpjWNiBoJMDkRjhZwKINpz6j6RTJzhvWMLl/dYVxh4=
Subject key identifier: E7:18:07:70:F8:28:20:9F:E6:5C:8A:91:F9:1D:61:45:87:EE:DC:D7
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 20394BEDDE854CF79390B11A79519EC27C0AED4A
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS138997.roa
Signing time: Tue 15 Jul 2025 00:01:59 +0000
ROA not before: Mon 14 Jul 2025 23:56:59 +0000
ROA not after: Tue 14 Jul 2026 00:01:59 +0000
asID: 138997
IP address blocks: 179.61.173.0/24 maxlen: 24
181.214.25.0/24 maxlen: 24
181.214.33.0/24 maxlen: 24
181.214.75.0/24 maxlen: 24
181.214.130.0/24 maxlen: 24
181.214.185.0/24 maxlen: 24
181.214.250.0/24 maxlen: 24
181.215.110.0/24 maxlen: 24
181.215.127.0/24 maxlen: 24
181.215.136.0/24 maxlen: 24
181.215.148.0/24 maxlen: 24
181.215.154.0/24 maxlen: 24
181.215.190.0/24 maxlen: 24
181.215.239.0/24 maxlen: 24
185.173.27.0/24 maxlen: 24
194.53.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:39:4b:ed:de:85:4c:f7:93:90:b1:1a:79:51:9e:c2:7c:0a:ed:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 14 23:56:59 2025 GMT
Not After : Jul 14 00:01:59 2026 GMT
Subject: CN=E7180770F828209FE65C8A91F91D614587EEDCD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fe:80:39:d1:dc:ee:f4:9e:e4:82:c9:dc:9a:
85:a2:d8:13:05:2c:84:26:95:ce:00:9f:d0:60:46:
60:51:3b:23:76:a0:37:3e:34:86:d6:22:ec:9b:66:
67:c6:78:ea:09:2c:60:33:e7:9d:14:4e:fe:74:ff:
aa:52:f4:66:b6:25:d0:4d:fd:4d:7e:99:4c:a9:cf:
5d:6b:2c:a2:f0:b5:0c:a6:91:5b:c6:96:51:fd:0b:
d0:76:6d:b9:73:e3:1a:02:88:03:1e:6c:3d:c5:0f:
e7:93:1b:f1:97:7d:e3:ee:a4:c9:8b:29:c5:46:88:
2e:d3:9e:6b:90:d3:6f:83:7a:be:1c:50:73:8b:ab:
cb:09:ea:bf:73:2b:68:3c:87:4d:d8:88:be:03:e7:
32:a2:48:ea:6b:3b:d3:71:55:29:eb:e5:f6:e4:90:
bf:b1:de:88:75:e2:ee:1f:00:77:a9:6a:ed:f6:64:
50:59:2b:23:cb:83:18:ef:ad:90:97:00:01:ef:32:
e4:19:ee:04:c9:98:a9:a5:95:8d:79:7c:b3:4d:d3:
99:ab:61:46:69:ae:11:b9:a7:eb:14:71:ba:39:87:
54:56:94:ab:72:1a:9b:5f:92:29:6b:94:b8:ea:7f:
85:97:82:81:3b:43:99:77:20:12:0f:fb:a3:bb:6b:
cc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:18:07:70:F8:28:20:9F:E6:5C:8A:91:F9:1D:61:45:87:EE:DC:D7
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS138997.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.173.0/24
181.214.25.0/24
181.214.33.0/24
181.214.75.0/24
181.214.130.0/24
181.214.185.0/24
181.214.250.0/24
181.215.110.0/24
181.215.127.0/24
181.215.136.0/24
181.215.148.0/24
181.215.154.0/24
181.215.190.0/24
181.215.239.0/24
185.173.27.0/24
194.53.142.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:7a:45:25:99:84:63:21:e2:fb:7c:f2:99:a0:12:39:26:23:
a9:d2:c9:f8:24:a3:ae:4c:3a:7e:9b:b8:80:7b:cf:6e:b6:68:
b6:9b:be:12:af:9f:0b:d9:97:7b:47:83:f9:cf:6b:83:9d:0d:
1b:ba:58:23:2f:12:f2:6f:e4:6a:e1:89:36:f8:a1:2b:1e:8e:
bd:9c:58:db:db:94:90:57:da:70:7f:49:95:e2:43:29:72:7f:
c0:04:82:6e:78:49:a3:de:b1:09:9c:08:1e:1e:fb:53:27:e4:
57:c4:1d:35:ef:f3:19:39:3d:2d:1e:14:7f:8f:5b:e4:55:1c:
5b:77:fe:6e:cc:18:6b:53:23:02:61:cf:d5:b9:ec:71:99:a3:
1c:9c:b9:52:c7:9c:64:f3:46:4b:ae:d3:10:20:25:ce:cb:6b:
49:63:7f:e2:4b:c2:a4:81:3c:34:6f:7c:d1:20:33:1c:31:0e:
86:37:26:1e:8e:f1:0f:52:7b:4a:41:ce:7c:31:0c:c8:bf:d8:
85:b0:f0:85:c6:8b:13:c5:0b:9a:51:93:fb:c4:20:14:47:0f:
e2:40:ce:a5:ae:64:ad:26:28:09:a4:bb:e2:72:b3:48:84:5c:
0a:06:dc:7a:2f:50:01:be:d4:46:9f:d4:d7:aa:fa:b6:7a:21:
fc:93:57:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:25:45 2025 by rpki-client