Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS138997.roa
File: AS138997.roa (raw, json)
Hash identifier: T9p7mHEgBhDXo9BulAcFTnURQ/I38fUS4B+kOvchuWA=
Subject key identifier: 6F:9E:49:27:E9:8D:A5:05:1E:CB:FF:64:91:62:D8:E5:FE:CD:A8:E1
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4E9F96AB7D9DABBAB8B65AA3FEE778F86B67DC0E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS138997.roa
Signing time: Mon 03 Aug 2026 08:49:18 +0000
ROA not before: Mon 03 Aug 2026 08:44:18 +0000
ROA not after: Mon 02 Aug 2027 08:49:18 +0000
asID: 138997
IP address blocks: 95.134.2.0/23 maxlen: 23
178.95.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Sep 2026 07:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:9f:96:ab:7d:9d:ab:ba:b8:b6:5a:a3:fe:e7:78:f8:6b:67:dc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 3 08:44:18 2026 GMT
Not After : Aug 2 08:49:18 2027 GMT
Subject: CN=6F9E4927E98DA5051ECBFF649162D8E5FECDA8E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c6:1b:64:c0:84:fd:30:8c:0e:98:b6:ce:78:
fe:f3:37:bb:74:8a:4f:19:b7:bb:08:c0:2b:a7:55:
10:16:f4:7e:bc:f9:89:5c:33:e2:0e:01:9b:09:0a:
02:3a:15:32:bd:02:ff:47:e0:84:70:f2:2c:3b:e6:
bd:02:85:cb:80:40:28:9f:49:ff:ef:54:93:bf:e5:
60:1b:36:ae:44:fb:42:21:0d:97:33:43:6f:37:31:
86:61:09:97:da:70:bb:b0:33:38:1e:fe:67:59:51:
7a:d3:6c:47:bc:8f:1d:99:58:76:52:d9:31:13:cf:
71:21:91:1c:b8:64:19:08:fd:d3:6d:14:31:3f:bf:
35:04:ba:0a:33:8e:2d:c8:f1:45:6c:eb:3b:cb:0e:
54:88:33:80:ef:c2:3b:e4:02:90:d6:2a:c0:9e:e5:
ef:03:9f:32:4b:1a:97:89:b5:3c:cc:be:c1:60:86:
16:ad:36:e1:ae:0d:72:1f:02:98:22:0e:ef:20:83:
46:6e:1a:71:8d:d5:97:03:f0:a3:b7:33:03:e1:69:
4a:04:a3:c8:d8:1e:6c:8e:b8:92:02:78:60:64:e2:
2f:62:6f:8a:4a:46:1e:2e:be:15:14:6b:94:9a:59:
8c:34:4a:8d:74:7a:b4:b9:03:2f:d9:15:53:72:01:
d2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9E:49:27:E9:8D:A5:05:1E:CB:FF:64:91:62:D8:E5:FE:CD:A8:E1
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS138997.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.2.0/23
178.95.188.0/23
Signature Algorithm: sha256WithRSAEncryption
18:59:59:34:be:f6:57:8e:08:ea:c8:d4:05:ee:69:b3:e8:76:
48:55:23:b1:05:d6:1d:33:4a:ec:b8:f1:e9:50:c0:69:a2:8e:
b8:75:b6:3d:c5:ac:09:42:4a:1e:a4:86:e1:f3:25:55:31:f1:
b2:be:be:c5:0a:8a:bb:c7:e1:f4:8f:a9:12:93:60:ea:bf:f9:
7f:7b:31:8a:f8:37:96:91:86:40:3b:9c:50:58:ed:bb:e5:0e:
03:ee:39:c5:a1:2f:5f:a0:8b:63:89:ad:11:d5:be:cc:e4:db:
c7:01:19:aa:ca:9e:a7:13:eb:06:08:a5:38:6b:9e:3a:c5:d5:
68:fb:2e:ee:92:71:c8:cb:5a:3d:8a:57:ee:6d:6d:b0:10:ed:
4e:75:50:7f:be:bc:9b:c6:63:ff:67:d1:ed:37:cd:58:bf:43:
08:ad:87:0f:b7:e1:52:ff:53:c7:16:0c:18:32:10:b3:97:46:
0c:62:78:42:e4:b0:af:71:06:f5:fd:ef:78:c6:39:9d:0d:07:
5f:b3:0f:8e:ba:73:5b:45:46:67:6a:db:f5:18:9d:12:96:44:
ab:4a:74:07:f4:e5:27:8d:48:da:6e:3a:58:b4:44:1d:db:d2:
d0:5c:40:12:cd:4c:07:55:ac:d6:e9:79:11:ef:d9:c0:9c:b0:
ad:c9:fc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 11:57:20 2026 by rpki-client