Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS139631.roa
File: AS139631.roa (raw, json)
Hash identifier: wlM52OmnwV9zUqpvT0jaQJzXGBGZDd4lHgwXgTZLS9c=
Subject key identifier: 6F:D9:B9:C0:B8:FA:C1:C9:E4:79:DC:2D:56:29:65:AD:6B:65:5E:51
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2EE4CBD6EA612BB495351245D42B3067CC98A4A1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS139631.roa
Signing time: Fri 17 Jul 2026 09:16:35 +0000
ROA not before: Fri 17 Jul 2026 09:11:35 +0000
ROA not after: Fri 16 Jul 2027 09:16:35 +0000
asID: 139631
IP address blocks: 82.47.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:e4:cb:d6:ea:61:2b:b4:95:35:12:45:d4:2b:30:67:cc:98:a4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 17 09:11:35 2026 GMT
Not After : Jul 16 09:16:35 2027 GMT
Subject: CN=6FD9B9C0B8FAC1C9E479DC2D562965AD6B655E51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:42:08:97:81:bb:90:ef:60:86:d1:41:f7:dd:
ab:1e:de:e5:21:de:50:08:f0:94:5a:c8:d6:9d:57:
cf:82:82:24:73:d6:5f:3c:fb:35:e5:13:3f:8a:2a:
4c:4c:cd:f1:78:54:55:ed:6e:af:1a:b2:71:58:4c:
75:f7:15:cf:81:72:5c:98:c3:dc:3e:1b:ab:a0:5a:
f0:be:6d:35:e9:2a:c6:14:26:22:4f:53:52:b4:37:
a2:a2:a8:74:c6:cf:68:24:43:b5:19:7c:f5:7b:91:
87:6d:55:60:cf:4e:bf:61:2b:3d:be:0b:4b:8b:a7:
82:12:30:23:bb:ab:2b:a3:5c:55:a6:a3:3b:0f:a3:
81:98:8b:a9:bd:0d:1a:0c:be:0b:fd:a1:03:c4:05:
01:74:af:fc:ea:87:c2:66:44:44:da:6f:1d:60:20:
32:98:85:a6:ba:a3:c4:5a:59:c8:06:64:65:bd:82:
42:dc:6e:2e:f5:52:75:63:06:d0:7b:6f:79:42:db:
bc:1b:3a:df:59:31:0f:61:e3:33:71:cb:59:da:80:
ad:50:f6:c2:1c:74:8d:81:20:f1:42:51:6f:a1:f2:
fc:c6:25:0d:ee:0d:2f:cc:b9:ef:0d:90:0d:8c:4d:
cb:e4:7d:2c:c8:d6:13:14:57:0b:69:69:3e:a9:d2:
84:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D9:B9:C0:B8:FA:C1:C9:E4:79:DC:2D:56:29:65:AD:6B:65:5E:51
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS139631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.157.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:2b:59:e3:3e:6c:79:3e:68:e4:18:90:fd:02:da:92:ec:51:
04:cc:0a:90:4e:53:68:5f:f8:22:91:04:ed:bc:3b:e3:79:08:
3a:a8:7b:95:96:98:1a:0c:57:02:66:c1:c5:49:9b:23:d4:b6:
9c:f8:11:88:13:75:89:e4:81:11:9f:ff:39:98:0b:01:b0:c2:
d0:83:f4:34:71:74:73:b2:40:9c:28:f9:39:32:bb:d4:b6:ee:
9f:d1:18:c1:e4:3a:ae:61:f4:d8:cd:56:1d:c1:cb:86:77:a8:
13:3b:5e:5c:59:76:2d:8c:5e:14:f5:1e:19:a5:11:17:80:16:
a4:58:2a:a1:ec:1f:44:1f:99:44:2b:0d:d6:79:75:ef:21:f7:
7d:9c:8a:f8:15:a4:0c:a1:f3:0c:8d:22:be:c7:bc:6e:24:b7:
14:b0:e3:24:62:62:96:cc:65:5f:f7:9d:d2:83:f2:7a:8c:39:
d4:d3:0d:0a:78:7d:76:60:23:96:95:e0:8a:6e:9b:23:37:59:
dc:02:02:48:f9:a1:f3:be:f6:33:13:d0:6c:54:d1:c2:b2:e8:
7c:dc:b6:61:eb:4d:77:6c:c7:44:50:f1:f8:f6:7a:2d:87:33:
b1:01:63:85:20:00:0d:a6:32:a5:a1:17:b5:19:a8:7b:3a:86:
cf:be:60:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:53 2026 by rpki-client