Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS138997.roa
File: AS138997.roa (raw, json)
Hash identifier: iBtO1Y+pTiHHfea8bigixmqw2+xaBX+4yPR1pV9cSTc=
Subject key identifier: 71:54:D7:82:23:34:54:AF:C3:4C:B0:B5:66:D7:4F:34:FF:5B:76:C0
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 59C98107694DC6B5334CC4522FE13B5B0D5A1B1A
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS138997.roa
Signing time: Tue 19 May 2026 15:47:14 +0000
ROA not before: Tue 19 May 2026 15:42:14 +0000
ROA not after: Tue 18 May 2027 15:47:14 +0000
asID: 138997
IP address blocks: 141.11.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:c9:81:07:69:4d:c6:b5:33:4c:c4:52:2f:e1:3b:5b:0d:5a:1b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: May 19 15:42:14 2026 GMT
Not After : May 18 15:47:14 2027 GMT
Subject: CN=7154D782233454AFC34CB0B566D74F34FF5B76C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ea:db:71:65:60:a4:2f:8b:19:cc:f2:6a:21:
8f:39:f6:d5:54:c7:02:43:33:e1:37:16:f0:51:63:
c0:0e:eb:59:2f:c3:4a:44:9f:08:a7:9a:de:f6:89:
8d:84:8c:9c:44:54:9d:09:df:7c:f3:40:99:3a:d9:
47:5a:89:60:87:3c:ab:69:cb:a0:9e:25:53:72:68:
c6:cd:08:e7:fc:97:2e:a6:b3:95:1d:07:65:6b:c8:
98:a9:39:06:e5:bc:84:72:c2:26:e0:bc:81:d1:ed:
c1:54:37:ec:c1:61:0b:ba:73:d3:a9:18:35:84:df:
13:5f:e1:cc:6c:55:e7:f5:68:7c:e0:b4:cb:de:41:
22:50:25:21:ad:58:2f:d6:ee:ea:d5:43:b8:83:a0:
4e:06:92:d2:48:b1:ac:aa:22:eb:49:16:5b:17:1f:
6d:b4:77:25:5d:47:a8:ef:3c:6a:ce:24:31:63:7d:
35:e1:ef:f8:08:64:d9:ca:87:3f:30:3f:02:c7:ce:
06:7c:10:0f:d3:27:96:a7:92:cb:ae:7c:34:85:37:
23:b3:46:29:9a:3a:61:bb:62:ad:9e:a9:a2:b6:01:
77:28:d6:92:7d:f1:2f:c9:f0:56:94:4a:b7:9e:2b:
18:e7:f6:58:79:a1:46:41:86:7f:85:a0:81:d1:70:
32:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:54:D7:82:23:34:54:AF:C3:4C:B0:B5:66:D7:4F:34:FF:5B:76:C0
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS138997.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.134.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:76:ae:7c:e8:bd:00:e4:a2:1f:7d:b5:b6:6a:8d:2d:4c:d1:
23:40:a5:55:c4:c8:f6:b8:6d:d4:1d:8d:3f:25:ae:05:7d:8b:
a6:3a:64:74:9d:cd:04:4f:de:30:1d:6a:32:a0:9d:fd:dc:7c:
c8:2e:d0:ca:c5:1e:01:24:7e:85:9f:c9:90:f4:db:17:c5:df:
8f:48:96:f8:3f:87:15:b8:06:42:86:6d:7c:38:ea:aa:a5:c6:
35:a2:eb:11:62:6d:b8:07:5d:9e:65:08:17:22:02:54:89:fe:
b0:5b:68:ec:89:be:34:fd:4e:aa:ed:0f:0e:54:48:09:58:03:
5a:3a:be:40:a6:f1:fc:2f:9b:a1:d6:78:cb:36:90:e6:b3:33:
3c:76:96:ac:28:91:39:70:45:34:66:ad:82:34:58:7c:f5:c5:
13:75:0e:c5:6e:3c:19:be:99:29:0c:15:62:08:fe:6b:c1:7a:
6f:e3:99:77:2b:37:ff:5f:4b:07:5e:a6:38:29:b5:b1:1d:52:
f5:f6:05:70:a3:b7:ec:6b:21:21:56:c7:c8:9d:52:eb:9a:3d:
48:52:b3:ee:f4:c0:4f:ff:c8:3f:5a:69:4c:27:19:ba:05:c1:
30:2f:c2:b4:fc:79:cc:26:48:7c:89:cf:61:23:2d:62:0b:ad:
ca:fa:a1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:01:14 2026 by rpki-client