Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS139642.roa
File: AS139642.roa (raw, json)
Hash identifier: ZYsUpKkBzhDNkCnpCxmpkHhvi69F3mknZXZFi6tIGCQ=
Subject key identifier: 90:D7:6D:BC:A2:07:82:5A:FF:8D:98:F4:F0:59:71:1E:C3:5A:4A:C3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5821A183D97F6771A295E1F9521DD1466089FD20
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS139642.roa
Signing time: Sat 08 Aug 2026 05:31:52 +0000
ROA not before: Sat 08 Aug 2026 05:26:52 +0000
ROA not after: Sat 07 Aug 2027 05:31:52 +0000
asID: 139642
IP address blocks: 82.21.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 13:18:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:21:a1:83:d9:7f:67:71:a2:95:e1:f9:52:1d:d1:46:60:89:fd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 8 05:26:52 2026 GMT
Not After : Aug 7 05:31:52 2027 GMT
Subject: CN=90D76DBCA207825AFF8D98F4F059711EC35A4AC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:66:6a:ec:37:7c:3d:87:a5:dd:48:d9:7e:36:
f3:7e:dd:1c:8d:63:d3:f7:7a:7c:c7:66:23:53:7f:
6e:46:4c:90:28:e4:59:da:e1:f8:63:3a:0d:60:11:
1c:cc:e0:9d:fd:c4:b2:37:d8:c9:ee:97:4b:55:d3:
c6:59:c7:1e:62:43:2e:62:78:58:f5:eb:0d:d7:54:
be:43:d9:6e:f6:14:c4:47:cd:1c:70:18:3c:bb:b5:
02:b4:af:d2:82:11:e7:fd:9a:df:a6:87:7a:fb:fa:
59:ad:c1:31:5e:54:cd:e8:d2:7b:de:67:18:3c:8a:
a2:01:d1:5b:08:fa:7e:c9:62:e9:33:c3:d0:ff:38:
1f:2d:46:46:c8:0c:01:d9:0b:d5:2a:12:73:c2:d2:
52:8a:e0:0d:b9:43:a8:e7:ac:67:d5:7f:de:df:a1:
af:9e:32:87:08:ee:54:68:69:df:a8:75:52:91:2f:
aa:b4:c4:c8:38:54:e7:ec:1b:2b:4d:f2:65:1e:ee:
aa:bc:fa:32:43:a6:30:bd:41:39:3a:12:6f:ad:fb:
aa:9a:fd:f6:19:84:9e:d4:0d:cf:3c:f0:1b:60:70:
87:2f:4b:f3:7a:7e:f3:86:14:b4:60:37:6c:e6:e7:
bf:05:64:fe:10:c4:e8:f6:81:2f:cd:de:95:48:42:
42:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D7:6D:BC:A2:07:82:5A:FF:8D:98:F4:F0:59:71:1E:C3:5A:4A:C3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS139642.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.57.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:38:27:e5:a7:73:e1:13:9f:58:39:b1:16:59:57:83:8d:d8:
22:db:92:93:58:c8:24:09:8e:96:5e:c5:73:46:52:75:2e:98:
1e:c1:4f:2d:19:1b:cc:74:3b:6a:66:06:b4:8b:01:09:c2:5d:
ce:fb:ca:6a:53:27:f4:a1:a7:b2:ac:4b:20:06:51:29:bb:b0:
e1:2e:1d:70:94:91:69:a4:58:d6:a4:e2:71:c4:1c:5b:98:ec:
a8:f0:35:fb:c2:36:a2:a6:7d:ed:d3:7f:af:12:34:50:25:87:
b7:1d:d7:ff:ad:a1:57:c4:9a:93:8c:e4:9a:db:1b:aa:0d:3b:
fa:68:d7:31:c8:e5:7d:0f:1c:ab:ba:d9:c4:d4:ed:84:9e:f1:
18:7b:e9:4c:21:d1:e3:a8:f4:1d:e8:26:18:e6:b4:83:f7:c3:
71:c3:72:1c:eb:d6:ae:00:44:f2:d1:0f:df:59:19:40:a2:47:
d3:bc:50:99:91:a9:09:b6:ac:f8:5f:9c:9c:6d:43:18:76:80:
45:67:ff:34:96:f1:f1:6d:5b:15:55:5b:f0:75:86:66:70:67:
31:74:73:90:d6:b7:89:80:54:45:db:51:db:07:b7:2f:37:e9:
6e:0e:14:81:46:96:73:81:08:76:15:7e:f9:6a:92:60:ec:cc:
f5:fd:f9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 15:12:00 2026 by rpki-client