Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS138401.roa
File: AS138401.roa (raw, json)
Hash identifier: Qgg26+m/0JeHcwZ8Phz0FanAmcwsuEcXDDLP+v4HS50=
Subject key identifier: 4B:EF:19:3E:5E:5D:24:32:0F:7F:CC:17:DB:95:55:29:FA:96:C2:73
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3DBDFFB38CB5BDC0CE48BCE8032C429067AFD903
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS138401.roa
Signing time: Sat 22 Aug 2026 08:33:44 +0000
ROA not before: Sat 22 Aug 2026 08:28:44 +0000
ROA not after: Sat 21 Aug 2027 08:33:44 +0000
asID: 138401
IP address blocks: 2a13:9500:1c5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:bd:ff:b3:8c:b5:bd:c0:ce:48:bc:e8:03:2c:42:90:67:af:d9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 22 08:28:44 2026 GMT
Not After : Aug 21 08:33:44 2027 GMT
Subject: CN=4BEF193E5E5D24320F7FCC17DB955529FA96C273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:3c:04:2b:2e:50:b0:df:11:63:ba:03:5a:67:
c4:4c:f1:24:f7:f9:cc:21:e4:a4:de:87:75:7b:2f:
1f:c9:93:47:15:98:ce:91:32:b8:a7:49:c2:f4:12:
1f:2c:82:0b:7f:04:04:40:c1:0f:a6:a6:ca:35:9c:
9a:57:e5:e6:8b:32:07:00:77:87:8a:b8:96:d2:83:
3d:f2:25:8d:98:53:ec:76:53:4b:d5:99:a7:ba:a8:
07:b2:44:32:e9:eb:41:d9:83:13:40:44:15:b5:75:
72:a3:55:a4:0c:d2:86:2f:40:04:49:62:58:35:53:
26:99:c5:64:a6:22:6e:76:f1:e2:48:66:e0:ba:d0:
7b:cc:05:75:36:38:f4:67:2c:da:9e:1e:ef:44:51:
b0:42:02:41:c6:41:1e:db:f2:11:9d:1e:10:c1:c3:
ff:05:c7:61:57:df:7a:aa:6b:f8:3f:20:05:24:05:
70:14:b5:c1:90:df:e9:64:13:62:9b:f0:d9:94:84:
b5:89:cc:63:61:a7:f6:26:37:e3:b9:56:7c:b3:ff:
eb:50:3f:bd:19:c9:a3:29:23:22:4e:78:59:b9:24:
97:94:a3:26:7b:81:fd:f2:b6:4a:dc:e3:de:b6:dc:
98:6b:6e:7c:18:ac:a6:c7:41:46:a9:ea:6d:51:aa:
7f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EF:19:3E:5E:5D:24:32:0F:7F:CC:17:DB:95:55:29:FA:96:C2:73
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS138401.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1c5::/48
Signature Algorithm: sha256WithRSAEncryption
10:c9:5a:3b:63:c9:db:1a:7f:50:5c:7a:26:61:5f:02:30:60:
b3:03:2c:df:fe:e2:d9:cf:72:02:ce:da:e5:7d:cc:b4:20:fa:
9d:4c:0a:eb:5f:2f:ad:31:2c:d9:fa:bc:9c:57:fa:1b:9f:16:
29:7b:8d:3c:1f:e6:11:8f:05:7f:fd:8c:b4:d3:d5:3c:67:c5:
2a:ed:73:57:9e:fc:68:8e:c2:b6:4d:66:ed:a1:bb:34:34:11:
4f:d1:42:6d:ac:2e:5d:7f:a1:5b:4f:96:20:aa:58:41:60:4b:
3a:41:f2:29:4a:a0:44:76:c3:7b:49:00:37:d5:8f:20:5f:c4:
09:0a:10:05:57:3b:4e:53:71:9f:79:77:d5:5f:c0:9e:e3:33:
bd:b1:d7:8a:f4:6f:58:4f:d8:86:14:c8:e2:54:48:ef:d1:bb:
37:b2:00:70:18:24:1d:d7:89:79:2c:82:8a:74:af:0f:86:ae:
3e:dd:5a:a6:2a:65:3a:5c:9a:a6:d6:04:5e:63:de:4a:4e:2c:
77:15:a6:89:27:08:06:5b:99:1c:3f:d2:c0:e2:77:c3:58:61:
75:6c:55:92:2f:6f:12:94:93:66:b1:a8:00:dc:64:05:ac:7b:
d6:fe:f1:d5:03:43:88:85:15:d9:5e:41:1f:43:bb:9f:2d:18:
62:9c:85:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:13 2026 by rpki-client