Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS138156.roa
File: AS138156.roa (raw, json)
Hash identifier: 75Et3tWqXfqA8MgVOv1HPjiCArQb+61fG8hciubYHQk=
Subject key identifier: 9C:01:C4:19:B1:EA:11:5B:F3:EB:53:A2:25:AB:4E:7E:FF:D1:16:E0
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7197152DC335D0800A3207A6B368474F860E3ADB
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS138156.roa
Signing time: Tue 29 Jul 2025 14:15:07 +0000
ROA not before: Tue 29 Jul 2025 14:10:07 +0000
ROA not after: Tue 28 Jul 2026 14:15:07 +0000
asID: 138156
IP address blocks: 191.96.92.0/24 maxlen: 24
191.96.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:97:15:2d:c3:35:d0:80:0a:32:07:a6:b3:68:47:4f:86:0e:3a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 29 14:10:07 2025 GMT
Not After : Jul 28 14:15:07 2026 GMT
Subject: CN=9C01C419B1EA115BF3EB53A225AB4E7EFFD116E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2a:9c:22:42:f6:ae:79:7f:4d:eb:ec:4d:e5:
45:ca:3c:10:72:a0:cf:cf:b0:c8:52:b1:91:06:a8:
84:cc:86:48:ae:b4:e2:e4:44:e2:9f:0a:cf:e8:54:
1c:34:89:17:b6:35:93:52:20:00:5a:05:e6:70:87:
a7:77:ec:80:48:46:e2:38:7f:22:7b:fa:62:cb:e6:
02:d9:07:94:b0:c8:4b:76:63:d6:dd:cd:4e:dd:3b:
d8:ce:2e:ba:89:3f:e9:6d:a8:3a:21:db:8e:c8:e6:
8b:7b:65:55:e4:8d:e4:22:81:f4:17:6e:43:a4:8d:
fc:13:d1:41:21:32:12:8f:25:0e:2a:a5:4e:d6:46:
7a:95:b3:14:eb:25:6b:01:0e:e2:25:e3:14:79:ee:
e3:b4:00:17:0d:9e:db:db:92:37:94:c9:95:cd:09:
f0:f3:bd:bf:72:c8:41:40:43:7a:46:31:49:85:92:
6a:a2:ae:18:dc:13:50:9a:e5:af:03:a7:d6:01:1b:
01:7b:8c:9f:a2:bc:36:a8:0b:24:26:ab:aa:0c:db:
bc:4d:44:cd:b1:f1:11:d4:2d:fd:06:b7:6c:91:17:
96:26:17:53:56:8a:08:1d:32:9b:17:4b:32:70:7a:
68:45:51:eb:f8:94:48:ff:aa:71:9b:cf:ab:d4:f7:
1a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:01:C4:19:B1:EA:11:5B:F3:EB:53:A2:25:AB:4E:7E:FF:D1:16:E0
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS138156.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.92.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:86:65:e1:48:5e:7b:6d:78:69:d9:c1:17:32:2c:67:a7:3c:
15:93:05:5a:23:cf:40:c5:54:42:59:aa:23:11:dc:65:5b:9d:
69:c4:6b:79:6b:60:ea:a4:7c:80:f1:bb:74:55:c1:7d:60:30:
6b:ac:25:4f:06:00:3b:81:08:0c:63:ee:74:c9:00:da:41:89:
19:ca:27:47:b3:61:11:cb:91:b2:44:9f:af:b5:e8:79:5f:0a:
84:a2:8a:17:af:f9:a9:5c:3e:70:fa:f1:ac:92:e3:60:fa:b3:
eb:0e:b2:b1:a2:aa:3d:ed:20:34:c7:d0:aa:fd:c3:da:aa:40:
38:37:64:65:5d:7f:06:0e:c7:d9:60:4a:f6:f3:87:e5:a1:aa:
d6:79:08:ab:12:f0:87:eb:ad:61:ae:0f:04:87:67:ec:93:4c:
6c:40:17:8f:22:4f:5c:96:b7:80:d0:ae:a2:20:d8:a3:9e:a5:
cf:f8:1f:4f:78:74:8a:db:e3:d8:f2:28:65:8a:71:80:1a:65:
23:d0:be:cd:82:d4:2a:7a:b7:9b:52:2a:d8:a8:dd:a9:1a:a6:
02:f9:1b:82:16:97:b6:7b:cb:c8:1d:81:d5:79:a7:c5:62:d0:
17:3a:18:d9:ea:38:eb:92:66:b2:57:e2:9d:09:84:0a:40:50:
aa:b6:c9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:44:53 2025 by rpki-client