Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS139642.roa
File: AS139642.roa (raw, json)
Hash identifier: vTV3RfzUEKlp+pRKpmXdyc+n2eROaOTGd1AfJjzhTJs=
Subject key identifier: 28:4D:B5:47:4B:7D:18:61:3E:27:1E:B3:09:0C:68:ED:34:84:EC:81
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0E9112F323B5674FA2BCD168EEAE0E721775FADA
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS139642.roa
Signing time: Mon 13 Jul 2026 03:02:59 +0000
ROA not before: Mon 13 Jul 2026 02:57:59 +0000
ROA not after: Mon 12 Jul 2027 03:02:59 +0000
asID: 139642
IP address blocks: 167.148.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 07:45:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:91:12:f3:23:b5:67:4f:a2:bc:d1:68:ee:ae:0e:72:17:75:fa:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 13 02:57:59 2026 GMT
Not After : Jul 12 03:02:59 2027 GMT
Subject: CN=284DB5474B7D18613E271EB3090C68ED3484EC81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:54:38:e0:9b:cd:84:04:75:40:60:78:16:
b0:91:c4:6d:1d:fb:b4:b2:87:8c:90:f6:a8:d0:b1:
5d:9a:30:06:05:7d:0a:6b:0e:80:4b:c1:34:76:5d:
04:6c:b2:2d:6f:16:ee:f6:84:d1:cb:b9:d9:85:78:
56:05:f2:c9:15:c3:43:a3:88:34:7a:0c:b7:25:f2:
f3:16:21:5a:cd:b9:32:48:b0:6d:88:da:3e:bf:aa:
e7:eb:bf:05:ac:fb:f7:e9:df:7e:57:03:8d:8a:84:
47:54:87:e5:8b:e4:a2:2f:0e:ce:24:b9:d3:cd:31:
d2:7f:f1:3c:b2:5a:b7:56:5d:aa:bf:ff:e0:65:e9:
d2:0f:f3:4e:28:d0:aa:57:7b:e8:62:0a:51:4e:93:
26:f2:55:6f:87:ad:da:91:59:7d:a5:b8:a3:68:86:
19:56:06:01:40:fe:4d:55:87:4c:58:e6:69:65:9b:
0b:a3:7b:08:a2:11:f1:7f:ef:19:ce:99:01:6c:f4:
6f:49:75:66:1d:26:e7:65:86:4e:9f:1d:21:3d:20:
5d:b0:b2:87:96:b7:2c:c4:eb:10:98:bf:4b:38:c7:
9d:d4:78:7d:82:df:09:3e:0e:a2:30:30:6a:f5:da:
f6:22:aa:6f:66:2f:e8:0b:57:4d:3c:b8:bc:36:b6:
41:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4D:B5:47:4B:7D:18:61:3E:27:1E:B3:09:0C:68:ED:34:84:EC:81
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS139642.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.2.0/24
Signature Algorithm: sha256WithRSAEncryption
93:b8:79:e0:bb:42:b6:de:86:da:58:f3:45:61:66:61:b4:45:
79:e0:3a:d2:ba:1e:49:cb:56:5c:2e:30:b4:c6:b5:ee:7c:25:
a5:d3:cd:91:1e:91:77:28:3a:17:f7:33:ee:dd:20:5a:66:c6:
f5:5f:0f:41:ed:8b:f8:c7:9e:20:84:01:fb:53:94:77:31:d6:
42:df:f2:a7:06:9e:d2:86:39:0d:d2:2c:47:02:24:3d:ae:14:
cf:d1:d9:31:23:e7:73:ed:90:d7:5d:67:e3:59:7f:e6:01:b8:
b7:9d:5f:fa:f1:14:63:6f:6c:ed:69:3a:3e:81:06:25:17:44:
12:79:82:c4:5c:4e:31:6e:3c:b9:78:5c:1a:d7:42:4c:79:1f:
87:ee:4c:14:25:8d:35:5d:25:6c:18:2c:0a:bd:73:a8:f9:5d:
33:99:5b:f8:72:be:2d:81:e8:c3:5d:1e:78:18:ec:d0:35:42:
50:ca:80:8e:34:5a:72:fa:30:e2:45:f2:c0:a3:a1:66:4f:be:
b7:37:f5:c5:e1:52:62:e8:04:31:8f:d3:93:aa:21:8d:49:6e:
5c:bc:6e:8f:f1:52:a0:fa:82:17:5c:b5:bf:c2:b8:79:42:7c:
61:80:c6:9e:0c:c2:ab:bb:ee:e9:a4:9a:a3:12:a0:25:e9:b7:
e1:5e:13:56
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUDpES8yO1Z0+ivNFo7q4Ochd1+towDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA3MTMwMjU3NTlaFw0yNzA3MTIwMzAyNTlaMDMxMTAvBgNV
BAMTKDI4NERCNTQ3NEI3RDE4NjEzRTI3MUVCMzA5MEM2OEVEMzQ4NEVDODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCml1Q44JvNhAR1QGB4FrCRxG0d
+7Syh4yQ9qjQsV2aMAYFfQprDoBLwTR2XQRssi1vFu72hNHLudmFeFYF8skVw0Oj
iDR6DLcl8vMWIVrNuTJIsG2I2j6/qufrvwWs+/fp335XA42KhEdUh+WL5KIvDs4k
udPNMdJ/8TyyWrdWXaq//+Bl6dIP804o0KpXe+hiClFOkybyVW+HrdqRWX2luKNo
hhlWBgFA/k1Vh0xY5mllmwujewiiEfF/7xnOmQFs9G9JdWYdJudlhk6fHSE9IF2w
soeWtyzE6xCYv0s4x53UeH2C3wk+DqIwMGr12vYiqm9mL+gLV008uLw2tkEnAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUKE21R0t9GGE+Jx6zCQxo7TSE7IEwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTM5NjQyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp5QC
MA0GCSqGSIb3DQEBCwUAA4IBAQCTuHngu0K23obaWPNFYWZhtEV54DrSuh5Jy1Zc
LjC0xrXufCWl082RHpF3KDoX9zPu3SBaZsb1Xw9B7Yv4x54ghAH7U5R3MdZC3/Kn
Bp7ShjkN0ixHAiQ9rhTP0dkxI+dz7ZDXXWfjWX/mAbi3nV/68RRjb2ztaTo+gQYl
F0QSeYLEXE4xbjy5eFwa10JMeR+H7kwUJY01XSVsGCwKvXOo+V0zmVv4cr4tgejD
XR54GOzQNUJQyoCONFpy+jDiRfLAo6FmT763N/XF4VJi6AQxj9OTqiGNSW5cvG6P
8VKg+oIXXLW/wrh5QnxhgMaeDMKru+7ppJqjEqAl6bfhXhNW
-----END CERTIFICATE-----
Generated at Mon Jul 13 09:32:55 2026 by rpki-client