Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS38136.roa
File: AS38136.roa (raw, json)
Hash identifier: IujZEbx+uM9+WyWyH6f0HXHzrWmLEoPUJfQhrB1axs8=
Subject key identifier: 6F:5F:2B:53:AC:A8:65:2C:FD:57:28:FC:35:7E:E3:24:E9:A8:98:C3
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 3D2605DA05855F26F8BD7AE1951D703852F5C95C
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS38136.roa
Signing time: Mon 18 May 2026 15:15:06 +0000
ROA not before: Mon 18 May 2026 15:10:06 +0000
ROA not after: Mon 17 May 2027 15:15:06 +0000
asID: 38136
IP address blocks: 45.153.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 06:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:26:05:da:05:85:5f:26:f8:bd:7a:e1:95:1d:70:38:52:f5:c9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: May 18 15:10:06 2026 GMT
Not After : May 17 15:15:06 2027 GMT
Subject: CN=6F5F2B53ACA8652CFD5728FC357EE324E9A898C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:53:e6:c2:51:4a:91:38:ef:a6:71:0f:31:
a8:cf:73:eb:11:7e:c0:21:f9:e4:c6:90:4e:59:4c:
37:96:e6:48:6d:0f:80:8d:f2:69:0c:c4:76:8b:9c:
3d:58:e4:da:ff:38:a7:3f:e9:ed:d3:95:30:93:ec:
26:55:f9:ed:24:09:b1:c4:f0:12:d6:4a:24:43:eb:
7d:2c:06:fa:e5:78:6c:f7:d3:04:51:d8:16:c5:69:
7c:94:cc:d3:f5:41:81:4a:89:e4:de:0a:e7:b7:e1:
17:71:d1:e3:a5:c6:5f:f5:e4:66:b0:06:dd:a5:2b:
ec:67:22:93:7a:6d:9e:86:4b:13:b5:fc:05:cc:27:
27:d1:1c:9b:fc:f8:f1:27:18:7a:52:db:69:5e:4b:
f0:72:2b:4d:90:d8:11:53:a6:ad:a1:1e:40:e5:ed:
df:b3:f1:6e:48:b6:97:2b:34:53:1f:f7:f4:e0:7a:
aa:f7:a9:39:f0:7d:70:2a:60:84:d8:23:16:6e:2c:
63:67:db:6d:df:19:3e:ce:5c:7f:e6:4e:ac:a1:f1:
0f:eb:02:fe:db:74:80:f5:ff:5c:e1:c3:39:c7:29:
c7:42:e1:f2:b1:2d:cf:23:85:45:d2:c5:d6:c0:37:
ae:7b:ab:12:e7:c0:44:f4:7e:e3:43:ac:27:aa:13:
b2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5F:2B:53:AC:A8:65:2C:FD:57:28:FC:35:7E:E3:24:E9:A8:98:C3
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS38136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.5.0/24
Signature Algorithm: sha256WithRSAEncryption
40:0a:92:8b:96:bc:00:68:74:93:07:d4:40:52:6e:1f:43:b8:
78:dc:08:e8:6d:91:0b:19:4c:a7:4c:bc:10:d1:8b:f3:93:ff:
d1:54:ea:f9:42:68:93:c1:0b:2c:95:f4:6d:e8:eb:b3:d3:c2:
dc:ab:44:49:09:42:19:7f:eb:3c:2a:47:7d:f4:6f:f1:d3:a7:
d5:a1:df:f8:06:64:fa:26:b6:07:74:fd:a2:89:8b:02:04:0b:
a8:69:c0:1a:23:0c:42:a3:00:2f:8e:1d:d3:52:ad:06:cc:cd:
88:08:17:86:c7:95:94:2b:79:e7:7c:80:00:04:95:30:2f:ff:
66:d6:09:5e:cc:d7:4c:b2:48:af:4f:f5:40:6e:12:e6:c9:79:
94:e5:62:84:2a:fe:4d:0d:8c:59:d5:57:dd:41:fc:c4:af:e7:
03:20:a2:d4:a5:7b:77:95:b6:41:2e:1f:d2:64:c7:bb:d1:2a:
a1:25:f5:37:d5:77:9c:9d:5a:25:37:c5:92:ca:ca:c2:d9:98:
2f:61:2d:4b:09:37:ee:e2:bb:6b:ea:5a:94:ad:96:63:b8:d2:
7c:b4:e7:81:e9:0b:d5:9d:09:8b:e0:d1:84:0c:40:2d:72:39:
b6:8e:86:1c:9e:7a:dd:3a:0b:8b:97:dc:22:be:17:bc:5c:bc:
56:ab:d5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:32 2026 by rpki-client