Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138789.roa
File: AS138789.roa (raw, json)
Hash identifier: go0veLUZbwSyp9nG6sLIMCIEnzNOF6MB6AknGYZnTLw=
Subject key identifier: 8D:81:62:FC:B4:D1:EE:C1:FB:5D:4F:8E:14:54:11:45:FB:3D:F9:1F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 143B98A156E619B90FE99AFD279C5A0168F8C598
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138789.roa
Signing time: Wed 24 Jun 2026 11:23:37 +0000
ROA not before: Wed 24 Jun 2026 11:18:37 +0000
ROA not after: Wed 23 Jun 2027 11:23:37 +0000
asID: 138789
IP address blocks: 168.222.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:3b:98:a1:56:e6:19:b9:0f:e9:9a:fd:27:9c:5a:01:68:f8:c5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 24 11:18:37 2026 GMT
Not After : Jun 23 11:23:37 2027 GMT
Subject: CN=8D8162FCB4D1EEC1FB5D4F8E14541145FB3DF91F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fb:19:15:50:6b:86:2e:bd:09:54:ad:8f:3e:
59:77:12:68:30:9b:1d:42:58:1e:ba:a6:f3:81:56:
26:34:87:24:56:d5:1d:76:67:a1:41:a9:9a:a2:3f:
5d:bb:3b:69:96:d5:8b:7a:ac:5e:44:37:49:5f:bb:
0c:35:23:bd:3d:f5:42:b7:fb:dd:b9:55:88:46:53:
ed:dd:7e:86:10:fe:e1:be:54:8b:a5:6f:34:00:15:
d3:c7:a4:32:4d:23:32:f1:fa:ce:bf:e5:52:33:51:
0f:ba:96:96:47:56:6f:d7:e2:a4:31:e1:fb:04:b7:
3a:ef:56:dd:52:38:0a:ce:c7:4b:48:da:67:78:f7:
b6:96:d6:af:10:d7:4d:b6:c6:6d:82:0c:6f:1e:0a:
1c:36:14:76:b8:a1:e2:97:1a:6f:53:60:62:e2:21:
1f:19:9a:60:fa:fa:76:a0:23:47:e0:14:2f:67:b3:
dc:3d:b4:ed:9e:ac:a0:ce:62:48:8e:b0:8f:d8:7b:
f5:ca:b7:f1:91:18:f9:8f:d3:03:86:f8:ef:5b:b7:
47:f0:c8:48:53:66:76:19:c2:cf:82:24:69:88:7c:
b5:ce:46:1d:73:35:fc:3c:5a:75:40:70:52:a7:7f:
bf:9c:36:c6:50:bd:2f:35:44:f2:9c:bb:5e:35:7c:
21:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:81:62:FC:B4:D1:EE:C1:FB:5D:4F:8E:14:54:11:45:FB:3D:F9:1F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138789.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.4.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:e3:ca:ee:9d:31:3c:8c:0c:38:8b:da:6e:f0:76:d4:2f:39:
0b:b9:aa:eb:6b:0c:9d:74:54:8f:3b:00:fa:c7:15:d3:f6:ed:
d6:aa:3f:67:35:06:4b:94:58:23:a3:4b:bd:19:69:e9:9f:34:
6f:5f:6d:77:56:98:1e:3f:99:68:28:7d:31:69:68:36:8f:1c:
8a:6c:2f:1a:10:91:54:4b:df:42:c5:96:d6:88:9e:3d:a4:99:
65:1f:2d:78:1b:d9:14:34:ed:1d:81:b7:82:53:f9:70:a1:0f:
f6:c3:cf:a0:6a:26:b1:37:31:54:e1:75:b5:c3:00:bf:88:bf:
f7:01:b9:d5:54:05:27:b2:cc:4b:a7:15:bc:60:c4:65:15:9f:
25:2c:5c:bb:be:a9:90:fd:81:88:b5:f0:a9:b5:69:83:a4:20:
ff:29:aa:b1:70:ad:b2:92:8e:7f:3c:62:93:b4:25:8a:df:d7:
aa:80:35:5c:10:fd:8c:14:7e:d3:87:ad:8c:95:b3:57:66:59:
15:c1:bb:af:31:7d:15:0b:6f:3e:06:b7:55:de:2e:d0:21:16:
02:80:a3:53:2c:7d:a3:18:16:71:68:50:e1:6f:a6:94:6c:4f:
b6:2a:d6:79:79:b3:ef:3e:b0:b4:fe:82:f0:3b:07:00:8b:ff:
63:a5:6a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 22:25:59 2026 by rpki-client