Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS138997.roa
File: AS138997.roa (raw, json)
Hash identifier: fGIQ2/MwOs3pGJpJBMtcTuMxRSC5nGy/ni8aSoRWxww=
Subject key identifier: EA:D5:74:ED:20:20:60:C1:D1:C7:A7:AF:24:32:0A:53:D2:F0:FC:85
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 61ED84D8D6B3421895E61E3FE5C4686B5D4D5209
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS138997.roa
Signing time: Mon 17 Aug 2026 00:49:29 +0000
ROA not before: Mon 17 Aug 2026 00:44:29 +0000
ROA not after: Mon 16 Aug 2027 00:49:29 +0000
asID: 138997
IP address blocks: 179.61.173.0/24 maxlen: 24
181.214.33.0/24 maxlen: 24
181.214.75.0/24 maxlen: 24
181.214.185.0/24 maxlen: 24
181.214.250.0/24 maxlen: 24
181.215.127.0/24 maxlen: 24
181.215.136.0/24 maxlen: 24
181.215.148.0/24 maxlen: 24
181.215.154.0/24 maxlen: 24
181.215.239.0/24 maxlen: 24
185.173.27.0/24 maxlen: 24
194.53.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:ed:84:d8:d6:b3:42:18:95:e6:1e:3f:e5:c4:68:6b:5d:4d:52:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 17 00:44:29 2026 GMT
Not After : Aug 16 00:49:29 2027 GMT
Subject: CN=EAD574ED202060C1D1C7A7AF24320A53D2F0FC85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:7c:6f:26:f9:a0:59:21:87:7e:c7:44:5b:
84:f9:a1:a4:e3:1a:3c:97:32:b1:f8:ce:72:e4:de:
a1:87:63:fc:a8:c6:ff:0c:d9:21:ca:c2:be:11:b6:
4e:f7:a1:41:3d:b0:63:5f:84:01:81:e3:81:d0:50:
d0:9d:ae:da:c8:0a:13:db:9b:93:09:42:07:19:e1:
be:91:f9:d3:c2:b3:e3:85:c9:01:ff:4b:d2:9c:7b:
6d:d3:02:48:11:8e:96:0f:2d:0e:11:22:50:16:16:
be:85:1a:33:43:e3:37:d5:d2:26:8f:29:3c:c5:6e:
0a:f0:5e:2b:f0:ee:68:1a:d1:f8:95:5f:06:d0:db:
cc:13:ef:e8:ff:d0:25:b4:ce:0e:fd:33:e4:54:83:
1e:ba:e1:78:49:0d:3b:d9:7c:ba:c8:8f:a5:87:29:
2d:1e:9a:1f:f3:90:ba:b3:42:f2:54:aa:91:ff:c2:
d4:24:b5:2c:ae:2c:40:aa:5d:67:f8:01:d0:86:d4:
5a:bd:5d:37:36:df:b3:5b:73:f4:09:c9:64:70:26:
c4:20:10:00:72:bf:96:5e:d9:bc:66:8c:1c:de:14:
33:7a:2c:ab:6a:ae:2a:b1:d9:e8:b9:2c:93:72:1d:
ea:54:b8:3c:63:7c:45:21:39:d2:e4:68:88:fa:25:
ab:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D5:74:ED:20:20:60:C1:D1:C7:A7:AF:24:32:0A:53:D2:F0:FC:85
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS138997.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.173.0/24
181.214.33.0/24
181.214.75.0/24
181.214.185.0/24
181.214.250.0/24
181.215.127.0/24
181.215.136.0/24
181.215.148.0/24
181.215.154.0/24
181.215.239.0/24
185.173.27.0/24
194.53.142.0/24
Signature Algorithm: sha256WithRSAEncryption
44:4e:6c:3a:20:e5:0d:c3:fa:80:c8:68:31:c3:dd:04:17:6a:
b8:3c:9d:89:a1:d2:a4:ac:4b:fc:d8:45:a1:4b:14:8a:89:af:
15:50:d9:d4:1a:70:fc:cc:c7:44:0f:d9:77:de:d6:a6:7d:f5:
35:88:b4:21:9f:99:2e:85:ad:9b:d2:c4:ae:b2:fd:39:ac:72:
ef:21:8b:4e:5f:c8:fd:3a:7c:9f:5f:0d:7d:e7:a3:ae:25:a2:
4a:e6:9a:ff:b5:0e:f9:e8:24:3a:a9:ce:79:3b:0c:74:19:66:
bd:f9:66:a5:97:97:8a:41:2d:cb:1f:a6:55:c8:9b:de:08:77:
c5:7c:6d:a0:ec:5f:dc:99:41:b6:96:bd:f8:19:8f:15:9b:42:
21:81:cb:42:2c:e1:10:32:a7:1b:a6:e5:0d:e4:63:4b:d5:d8:
19:7b:98:8e:77:f2:d1:f8:7e:94:fd:ec:0c:45:46:9c:f1:a6:
93:66:48:87:7e:de:89:fa:e4:0f:59:91:28:2d:2d:8b:a4:a1:
b7:3a:36:e0:27:9b:14:7c:9e:9a:4b:fc:2d:3d:c4:c8:25:05:
13:1c:ab:f2:ad:c1:36:76:b5:0e:c6:11:f8:82:0b:35:f7:12:
7c:86:2a:9a:1f:10:99:65:b7:68:0e:cb:0e:b6:20:e7:8f:9b:
6d:f1:89:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:48:27 2026 by rpki-client