Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS139921.roa
File: AS139921.roa (raw, json)
Hash identifier: yjItNb4jQtyBvSYDCfhlSlpkFio/nW7ZTLMsEmy5tR0=
Subject key identifier: 7B:92:2B:87:F2:18:F4:D3:41:C4:4C:04:D4:43:F6:8C:36:C1:E9:BD
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6D4253715AAB7576EFE0BF8F23F69669B02F8394
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS139921.roa
Signing time: Thu 21 May 2026 05:19:34 +0000
ROA not before: Thu 21 May 2026 05:14:34 +0000
ROA not after: Thu 20 May 2027 05:19:34 +0000
asID: 139921
IP address blocks: 143.14.66.0/24 maxlen: 24
155.117.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:42:53:71:5a:ab:75:76:ef:e0:bf:8f:23:f6:96:69:b0:2f:83:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 21 05:14:34 2026 GMT
Not After : May 20 05:19:34 2027 GMT
Subject: CN=7B922B87F218F4D341C44C04D443F68C36C1E9BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a7:63:f1:07:05:c5:06:59:31:11:d7:2c:29:
92:72:82:0f:ce:cd:7e:6f:cb:7b:02:a8:55:34:2a:
ea:33:37:4c:4e:e1:b5:23:7d:c6:2d:52:38:7e:eb:
18:41:be:f0:81:48:87:2e:58:b0:01:5a:d7:1c:a3:
ec:9b:75:65:f3:e7:25:1c:60:85:d8:0f:67:63:31:
13:de:e9:5b:3a:c6:5e:9c:ba:51:59:3f:41:20:0d:
0f:f2:b5:62:51:1a:60:a1:6d:b5:16:1a:db:3f:0c:
17:36:1e:e7:a0:b4:31:92:7e:24:b6:6f:3b:e5:5c:
39:0e:36:f5:28:06:ed:2a:bd:ce:cd:b2:53:13:bd:
f7:21:6c:cb:1a:c4:57:31:e1:dd:44:46:79:ee:91:
b4:c2:34:7c:80:4f:f2:6b:d0:fc:ad:d7:aa:8e:c7:
b6:e6:df:a7:94:8b:e5:8e:ae:fb:20:f9:96:8d:1b:
f4:64:f1:62:6c:b9:6a:5f:34:67:c3:65:89:a8:40:
3b:4e:27:59:ec:be:b5:64:6d:cc:a0:da:49:ce:df:
55:7c:71:c4:73:18:dc:ec:c5:db:b8:76:0b:f3:04:
8f:36:1b:69:6a:83:2b:1c:84:82:33:64:a9:d7:e4:
94:c6:f1:84:69:6c:29:99:1b:1b:b2:05:56:c6:65:
09:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:92:2B:87:F2:18:F4:D3:41:C4:4C:04:D4:43:F6:8C:36:C1:E9:BD
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS139921.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.66.0/24
155.117.218.0/24
Signature Algorithm: sha256WithRSAEncryption
68:08:d3:fc:19:b7:d3:e0:c2:a3:75:84:cc:56:3d:85:b7:8e:
f3:88:cd:e4:10:b9:a9:a0:7c:de:8c:3e:68:89:1e:89:4b:51:
78:eb:df:a3:02:b9:27:ae:b4:1d:45:99:2f:47:4b:09:3f:9f:
8d:4e:ab:c6:d3:c4:ab:f1:ef:58:66:bd:91:c4:7f:25:36:6d:
31:50:20:7d:d2:0e:22:2e:0e:ac:f1:c9:d8:5d:67:d2:d9:4f:
50:e5:b8:c5:de:34:ff:e0:17:b8:f7:37:c6:15:ca:02:3e:18:
c3:cd:88:a5:50:d8:ab:24:97:57:4d:82:eb:a9:46:35:a4:d8:
91:2a:76:2c:3a:07:d5:7a:6d:6a:55:86:90:8f:06:8e:fa:47:
7f:ed:e5:bf:8d:73:5e:65:57:a2:42:29:03:77:0f:f9:ec:bc:
b5:da:b5:2d:01:53:5b:e8:49:97:4d:a9:07:f5:12:7d:b8:5f:
8c:fe:48:d5:9e:31:c8:61:d2:f4:8d:e1:b1:63:6f:a6:86:87:
ab:96:e3:77:48:fd:5f:81:35:29:e5:ee:9b:55:ab:a7:f8:43:
86:a6:3f:4d:24:79:a5:19:c0:a8:d4:74:10:17:fe:7d:34:96:
99:8d:0c:41:a6:1a:4c:a6:f9:f9:eb:86:e7:3f:ce:67:d4:03:
d1:79:d2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 14:18:41 2026 by rpki-client