Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS138995.roa
File: AS138995.roa (raw, json)
Hash identifier: F0kZDFpPxdrIlW9Flxj4uSnbCW1EhPOPv0+o3chb+9k=
Subject key identifier: 8D:13:36:88:C4:65:6B:16:9F:D2:C3:4D:1E:35:BC:6B:38:8C:90:3F
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 5CE5EAF781D0AED81A8B13190A2AEFA95BCC7F9D
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS138995.roa
Signing time: Tue 13 Oct 2026 07:56:30 +0000
ROA not before: Tue 13 Oct 2026 07:51:30 +0000
ROA not after: Tue 12 Oct 2027 07:56:30 +0000
asID: 138995
IP address blocks: 141.11.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:e5:ea:f7:81:d0:ae:d8:1a:8b:13:19:0a:2a:ef:a9:5b:cc:7f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 13 07:51:30 2026 GMT
Not After : Oct 12 07:56:30 2027 GMT
Subject: CN=8D133688C4656B169FD2C34D1E35BC6B388C903F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bd:4f:b5:fa:de:f2:7d:7b:8b:b6:1e:e9:c1:
40:88:05:bf:52:1a:a4:40:40:92:0b:94:ae:22:ed:
32:55:5f:21:33:80:d1:c5:9d:bf:aa:4b:29:1e:65:
0a:a7:45:c8:33:d3:88:4f:7b:01:4c:cf:5e:05:a9:
de:a0:a9:63:36:b8:4d:63:80:3e:66:ee:9a:c9:57:
22:09:10:d0:85:1b:e5:78:85:ac:f9:f1:0f:12:63:
05:9a:65:18:9b:3a:0c:2e:85:55:5b:65:88:57:5d:
d1:c9:9a:81:94:99:36:91:4f:f9:2c:37:44:65:61:
5d:6a:b5:7e:f4:d6:0f:3e:f1:3d:03:73:f3:25:29:
04:21:61:6e:3f:95:34:76:1b:36:e9:d7:e1:88:4a:
08:af:24:c6:f2:34:ba:cd:19:db:23:db:a9:3a:ce:
ae:90:93:fa:dd:61:56:eb:52:1f:29:9d:7a:f0:a3:
7d:40:59:af:c6:a2:a7:54:aa:81:3b:28:8d:7e:d0:
39:0b:1a:d8:f5:4e:e8:15:b1:c7:42:9a:02:7e:37:
99:62:23:20:93:87:9c:2d:d8:78:f1:59:c1:81:09:
8a:e5:3a:5b:5e:b4:7f:3a:5c:db:c2:d3:73:75:a1:
2c:99:78:b8:b1:dd:d4:4f:11:62:30:fb:90:2c:27:
26:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:13:36:88:C4:65:6B:16:9F:D2:C3:4D:1E:35:BC:6B:38:8C:90:3F
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS138995.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.79.0/24
Signature Algorithm: sha256WithRSAEncryption
34:9f:2c:15:37:c2:f4:35:88:23:17:77:bb:e8:60:34:f7:96:
49:67:75:6b:82:02:0f:ac:8e:31:e9:0c:2b:e0:c1:66:2e:d2:
a2:07:d5:9d:ad:95:32:1e:3f:1e:63:da:16:00:3e:4e:e2:cb:
cd:d0:f3:0f:de:8c:9e:b1:4c:d5:96:4e:d7:f8:c6:52:b0:ae:
90:99:ad:9f:2f:1b:6b:a7:cb:5b:63:30:1f:88:ac:c5:12:7d:
b9:f2:6f:be:c1:de:e7:64:90:8f:9a:91:61:57:c9:26:be:ef:
27:2c:07:a8:48:30:17:fc:03:6c:24:ed:ce:30:6c:94:98:9f:
ea:5f:fa:6d:ce:ad:ac:c6:75:1d:8e:a9:0e:74:7b:d1:0d:28:
75:57:e2:e8:b4:dc:f1:94:e3:8e:60:61:92:09:c3:48:56:24:
cf:4f:a2:e1:8e:a6:d4:80:77:66:7e:13:9d:59:65:b3:16:c4:
5b:52:79:1c:e3:c1:eb:bb:48:b6:85:d0:fb:53:cf:08:f6:a9:
1a:48:b8:87:b7:86:e9:22:15:0f:25:70:f0:e8:ed:40:c8:05:
81:b2:3d:d6:e4:02:21:6d:50:ef:84:5e:33:7e:1a:63:db:66:
d0:57:c3:5d:8b:7b:f2:36:bb:46:83:68:60:1e:b6:10:ba:b4:
1f:89:2d:5c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUXOXq94HQrtgaixMZCirvqVvMf50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjEwMTMwNzUxMzBaFw0yNzEwMTIwNzU2MzBaMDMxMTAvBgNV
BAMTKDhEMTMzNjg4QzQ2NTZCMTY5RkQyQzM0RDFFMzVCQzZCMzg4QzkwM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVvU+1+t7yfXuLth7pwUCIBb9S
GqRAQJILlK4i7TJVXyEzgNHFnb+qSykeZQqnRcgz04hPewFMz14Fqd6gqWM2uE1j
gD5m7prJVyIJENCFG+V4haz58Q8SYwWaZRibOgwuhVVbZYhXXdHJmoGUmTaRT/ks
N0RlYV1qtX701g8+8T0Dc/MlKQQhYW4/lTR2Gzbp1+GISgivJMbyNLrNGdsj26k6
zq6Qk/rdYVbrUh8pnXrwo31AWa/GoqdUqoE7KI1+0DkLGtj1TugVscdCmgJ+N5li
IyCTh5wt2HjxWcGBCYrlOltetH86XNvC03N1oSyZeLix3dRPEWIw+5AsJya5AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUjRM2iMRlaxaf0sNNHjW8aziMkD8wHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMTM4OTk1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQtP
MA0GCSqGSIb3DQEBCwUAA4IBAQA0nywVN8L0NYgjF3e76GA095ZJZ3VrggIPrI4x
6Qwr4MFmLtKiB9WdrZUyHj8eY9oWAD5O4svN0PMP3oyesUzVlk7X+MZSsK6Qma2f
Lxtrp8tbYzAfiKzFEn258m++wd7nZJCPmpFhV8kmvu8nLAeoSDAX/ANsJO3OMGyU
mJ/qX/ptzq2sxnUdjqkOdHvRDSh1V+LotNzxlOOOYGGSCcNIViTPT6LhjqbUgHdm
fhOdWWWzFsRbUnkc48Hru0i2hdD7U88I9qkaSLiHt4bpIhUPJXDw6O1AyAWBsj3W
5AIhbVDvhF4zfhpj22bQV8Ndi3vyNrtGg2hgHrYQurQfiS1c
-----END CERTIFICATE-----
Generated at Tue Oct 20 22:20:19 2026 by rpki-client