Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138156.roa
File: AS138156.roa (raw, json)
Hash identifier: bQ36ifoqtLs2jeCNLpT88Xz/gIzNI2pvUsm+yFp2BrY=
Subject key identifier: D2:0B:B2:D1:38:98:53:05:EE:9A:6D:28:24:3B:9F:F9:68:70:B2:E0
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7B64A717F670E1D89B826C652F5AC6D4D5D161CA
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138156.roa
Signing time: Fri 19 Jun 2026 15:47:47 +0000
ROA not before: Fri 19 Jun 2026 15:42:47 +0000
ROA not after: Fri 18 Jun 2027 15:47:47 +0000
asID: 138156
IP address blocks: 147.79.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 19:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:64:a7:17:f6:70:e1:d8:9b:82:6c:65:2f:5a:c6:d4:d5:d1:61:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 19 15:42:47 2026 GMT
Not After : Jun 18 15:47:47 2027 GMT
Subject: CN=D20BB2D138985305EE9A6D28243B9FF96870B2E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:31:c7:cc:fd:55:96:96:79:0b:62:ff:75:5c:
2e:1c:f3:90:aa:33:c3:2d:b2:84:ac:53:03:4e:39:
0e:04:92:3d:fc:a7:07:b5:3a:9c:71:89:7d:b2:30:
ed:f8:00:c1:e4:70:64:24:2f:d6:d1:52:44:72:37:
fc:fc:39:a2:a2:96:1c:0e:af:c9:be:99:08:40:bd:
ab:25:03:97:5e:ad:e2:40:0b:bb:2b:e1:4e:25:80:
2b:6f:35:4c:9d:a8:12:3c:69:90:e5:b5:f9:cd:06:
dc:45:10:5b:dc:f6:24:cf:61:ce:46:8d:f8:27:6f:
0c:d4:50:4c:28:c7:00:28:bf:6c:9e:60:6b:f1:2c:
82:15:df:cb:57:d5:18:c1:86:1a:b3:7f:e9:60:1b:
57:9b:43:11:21:92:fe:f9:59:c3:b7:2d:06:3e:9f:
33:cf:9a:a0:cc:bc:d7:78:33:6d:cc:0a:20:3e:16:
54:55:91:81:d7:cc:ed:49:df:2d:52:f6:cc:ed:71:
d5:bc:c4:4e:9b:b3:66:96:7c:e7:77:c9:32:61:ba:
cd:3c:4e:bc:7d:ee:13:0d:6f:b6:a5:3a:aa:87:5f:
c9:89:56:eb:c7:f0:0b:73:39:f9:59:d0:38:77:ad:
40:c6:1c:9d:c5:4b:ab:5f:2e:11:31:13:25:64:35:
c0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0B:B2:D1:38:98:53:05:EE:9A:6D:28:24:3B:9F:F9:68:70:B2:E0
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138156.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.55.0/24
Signature Algorithm: sha256WithRSAEncryption
af:86:cf:d0:86:11:19:81:7b:96:c8:ec:09:f8:34:56:bc:80:
c4:74:e8:8c:38:62:cc:dc:b7:1c:07:f8:e2:e5:54:8c:37:64:
6e:c7:26:1f:1b:2f:c6:f6:ea:42:eb:32:d9:77:d6:94:8a:12:
7a:19:53:9f:51:e7:1e:df:e2:cc:98:35:8f:35:75:bc:7a:59:
a4:08:f6:d2:d8:9c:56:de:6c:ec:b7:35:74:e8:64:b9:a4:ee:
f7:b4:b9:46:4a:f6:d6:40:e9:28:db:0a:22:43:91:61:bc:f1:
d4:fa:1d:75:d0:15:c3:3b:c8:6b:b4:81:29:95:b9:43:8d:e3:
69:4c:50:86:4f:ab:f4:94:0c:ac:a7:99:54:b9:b0:69:bc:07:
9f:68:55:b7:76:83:50:30:25:ff:30:60:63:cb:df:e0:5c:b0:
75:ff:ad:2c:6e:a8:8c:17:fd:be:59:4b:f9:42:7d:cf:43:e6:
2a:81:70:c2:96:d8:60:12:4e:6c:ba:05:b3:4a:ff:91:e0:b8:
1f:ea:6d:98:50:a2:1f:0a:3e:32:37:b3:29:cc:f7:3a:42:5a:
43:c6:8d:25:c0:47:8c:10:1e:5c:c5:62:21:da:be:8f:9b:7d:
9e:66:6e:d7:dc:e7:0e:2e:a3:b6:36:f4:84:1a:c7:bd:ea:9a:
d2:6f:c9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 03:43:13 2026 by rpki-client