Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS61138.roa
File: AS61138.roa (raw, json)
Hash identifier: x4GctyMSWMUrvcCnlAvDlxDI3cExPpWOi7ZwyNwh2Uc=
Subject key identifier: D3:21:59:03:01:FA:53:C3:73:9B:EC:3F:23:03:35:D5:6C:25:2A:46
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2385C42CDD4D3B1D65ABA16793CA141C0774E838
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS61138.roa
Signing time: Fri 12 Sep 2025 11:55:07 +0000
ROA not before: Fri 12 Sep 2025 11:50:07 +0000
ROA not after: Fri 11 Sep 2026 11:55:07 +0000
asID: 61138
IP address blocks: 92.112.96.0/22 maxlen: 24
92.113.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:85:c4:2c:dd:4d:3b:1d:65:ab:a1:67:93:ca:14:1c:07:74:e8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 12 11:50:07 2025 GMT
Not After : Sep 11 11:55:07 2026 GMT
Subject: CN=D321590301FA53C3739BEC3F230335D56C252A46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f4:da:13:f3:0d:7f:28:04:46:15:ee:00:38:
e4:64:a4:77:5e:43:6d:84:cc:16:c9:ca:0a:46:36:
4f:67:18:b1:c0:c6:62:81:96:7c:2d:76:41:4e:87:
46:bc:0e:71:d3:1a:b3:20:b8:60:b4:75:ec:f7:a7:
e4:b9:ce:2d:d0:42:9c:f5:dc:9b:5e:b8:21:ab:3c:
17:d8:fc:4d:f8:e7:69:29:4c:e3:ba:0f:6b:0c:00:
26:a3:8a:b0:93:c4:08:50:ca:16:2e:23:1e:96:8f:
a1:2c:98:1f:84:19:f5:49:b8:07:a4:b5:92:a0:df:
e9:fd:cb:e8:e9:6d:2d:42:fb:70:d2:98:6a:7b:84:
ef:b0:fe:b2:d3:87:bf:ee:d5:22:b2:5d:28:09:54:
7f:e9:fa:11:12:7e:b8:88:33:79:7c:26:85:f8:48:
b3:e5:6b:00:75:48:e2:33:50:ed:35:76:e5:77:ee:
61:78:22:e4:3e:6f:51:2a:09:d4:43:9a:08:d7:57:
c6:6e:23:68:e5:fa:15:cb:14:71:89:c8:4b:51:26:
af:d7:d5:e1:ca:8a:22:78:27:19:b8:d9:3d:9d:f4:
0e:ce:23:e2:e5:49:3a:b8:7c:96:15:ef:ef:92:d1:
85:9a:95:b8:d6:d2:27:87:03:5f:ff:50:9c:e6:a3:
5e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:21:59:03:01:FA:53:C3:73:9B:EC:3F:23:03:35:D5:6C:25:2A:46
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS61138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.96.0/22
92.113.152.0/22
Signature Algorithm: sha256WithRSAEncryption
95:43:01:c5:37:7e:51:52:ef:4a:ce:22:35:62:06:f4:50:eb:
07:81:33:98:eb:90:a4:df:95:fd:e4:bf:d0:09:b7:39:e0:4e:
40:89:d6:dd:4c:46:1d:9b:6b:95:f3:a3:f6:e8:bb:30:c7:aa:
45:63:ba:3e:05:9c:38:4e:8c:81:68:a7:8a:33:1f:27:d5:eb:
3b:e0:c6:97:5d:6e:ae:70:00:12:62:c0:cd:51:b3:cc:ad:25:
5b:0c:14:7c:f5:da:c6:76:ea:5c:9b:f2:55:18:30:ab:5c:7c:
8c:7b:2d:27:c6:5a:98:42:34:e1:7f:fc:fe:c1:07:8f:4b:cf:
77:15:4b:2d:12:e3:94:f1:bd:e0:84:df:c6:9e:6c:97:5a:50:
4b:2c:f4:8b:25:64:21:b7:c8:8b:97:d6:6f:f1:ec:48:8c:c1:
28:9c:0b:9f:c4:b5:cb:49:98:e8:0d:9c:bc:6d:ee:73:72:7f:
4d:03:03:6d:74:b2:14:85:c7:17:2f:1d:bf:f0:4a:65:ba:9c:
d0:70:89:7f:b2:e2:1a:0b:79:b6:a0:51:b2:60:56:f1:1f:a0:
76:1f:f4:bd:b1:cf:82:27:c1:6f:18:12:37:2f:31:32:1a:4a:
f3:f3:e4:18:75:13:80:d1:53:f3:7c:54:d5:bd:a4:71:5e:bd:
32:4e:ab:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 20:33:51 2025 by rpki-client