Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS138888.roa
File: AS138888.roa (raw, json)
Hash identifier: AzBmzRCwtyYxOSd9imsOgrsIbSG5fc0+lzJNPoG2Mdw=
Subject key identifier: 95:A4:13:D3:8B:70:6E:E3:7C:D3:31:EE:0A:B8:D6:B0:5E:28:9B:F5
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 37E9DDEA59C1F0F0F94FDE35D8BF0C5AF97EEDEF
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS138888.roa
Signing time: Wed 27 Aug 2025 09:58:57 +0000
ROA not before: Wed 27 Aug 2025 09:53:57 +0000
ROA not after: Wed 26 Aug 2026 09:58:57 +0000
asID: 138888
IP address blocks: 45.146.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:e9:dd:ea:59:c1:f0:f0:f9:4f:de:35:d8:bf:0c:5a:f9:7e:ed:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Aug 27 09:53:57 2025 GMT
Not After : Aug 26 09:58:57 2026 GMT
Subject: CN=95A413D38B706EE37CD331EE0AB8D6B05E289BF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:94:da:0c:fa:fa:30:fd:6b:c7:1e:2e:45:b3:
f1:ea:ba:13:aa:40:bd:fb:15:87:d3:5d:1e:ef:2e:
be:67:4a:79:0f:c8:f0:0e:d1:28:bd:56:b1:9d:99:
b7:0f:85:04:b1:52:e5:3a:d6:f9:52:a9:7e:da:ee:
d2:0a:81:5a:cb:0d:c4:6b:f2:d3:67:14:0b:93:4b:
ff:6b:9f:c6:72:d4:89:93:2b:cc:63:be:96:64:04:
94:96:fa:9c:5a:e3:00:80:73:46:c6:fe:1a:13:5a:
ac:f5:48:87:66:f0:42:b9:1c:e4:72:fd:43:ea:1c:
78:dd:67:91:b6:ef:cc:39:2e:2a:21:8a:19:d7:6f:
42:90:46:9d:2a:b1:d0:b8:94:89:dd:18:ae:9c:a2:
3b:14:8c:1f:c5:34:d9:52:40:7a:9e:a8:8d:20:e0:
b0:cb:1e:59:11:7b:2c:4f:28:2b:0e:7f:b1:af:73:
4a:84:d8:7a:b0:b7:22:33:db:24:0a:06:5c:00:c4:
54:eb:27:83:eb:84:96:01:08:71:66:ac:04:ba:75:
e6:ba:98:20:b1:a1:49:59:da:33:00:6e:13:53:5d:
cd:61:6e:04:63:04:43:9b:a1:3e:56:ae:e2:c4:df:
52:ac:dd:c4:67:55:91:32:f6:59:dd:ce:41:81:b2:
65:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A4:13:D3:8B:70:6E:E3:7C:D3:31:EE:0A:B8:D6:B0:5E:28:9B:F5
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS138888.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.80.0/24
Signature Algorithm: sha256WithRSAEncryption
66:45:a5:c2:f3:cb:26:10:c5:75:37:5c:48:74:01:9c:88:01:
59:86:64:4f:d2:3a:9c:b3:70:07:66:db:b0:9a:c1:3a:b2:bf:
b1:b4:18:44:10:44:ad:b5:f2:eb:48:73:03:6c:3e:ca:db:68:
82:52:b4:37:bf:2b:59:48:0e:5b:1c:fe:20:a9:92:e9:36:d8:
ba:46:72:b8:02:c8:ca:e7:b5:97:0f:f8:2c:a6:0c:f8:3a:db:
d2:bf:ae:61:ea:a5:55:d3:84:9a:95:94:66:63:81:f5:e6:66:
07:5c:8a:a6:5e:49:95:0d:67:7a:34:7a:47:22:55:4a:54:f2:
ed:06:a6:8f:7c:61:91:19:fc:5a:22:f3:c2:d3:9b:5e:6f:55:
19:04:b2:58:e0:40:e7:76:49:93:dc:d0:57:f5:e2:eb:de:67:
66:80:dc:76:08:7f:24:a0:2a:ed:c6:aa:6f:30:a0:d1:e1:6d:
a6:c7:d8:3c:76:07:ff:1b:c2:d3:63:c7:fc:74:db:ef:3f:b8:
b4:24:44:a4:43:03:02:28:76:7b:d8:9c:53:e3:3b:cb:8a:77:
2b:83:b6:35:f5:8f:02:ac:f2:75:cc:43:72:51:91:84:2c:95:
b9:c1:e3:fc:ed:02:c3:24:52:c0:ff:07:b2:c1:0a:9c:05:1b:
71:8c:02:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 16:02:42 2025 by rpki-client