Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS138887.roa
File: AS138887.roa (raw, json)
Hash identifier: 6WO1uTtdrTxFfS2vuuwGKx8WDBbkNkqqMfuwW5G8KzA=
Subject key identifier: 38:86:DC:CB:A5:0C:85:B3:88:35:C5:8D:3C:30:68:95:BC:94:72:E4
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 71312CA6E28E150E1058D1386F52BA4A7D09462F
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS138887.roa
Signing time: Mon 14 Sep 2026 21:47:58 +0000
ROA not before: Mon 14 Sep 2026 21:42:58 +0000
ROA not after: Mon 13 Sep 2027 21:47:58 +0000
asID: 138887
IP address blocks: 45.139.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:31:2c:a6:e2:8e:15:0e:10:58:d1:38:6f:52:ba:4a:7d:09:46:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 14 21:42:58 2026 GMT
Not After : Sep 13 21:47:58 2027 GMT
Subject: CN=3886DCCBA50C85B38835C58D3C306895BC9472E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:f0:91:74:1c:12:98:d7:cc:17:89:c1:1e:
94:62:af:aa:cf:01:a7:be:fc:cd:99:5b:29:35:ce:
6c:03:75:16:93:6e:af:74:da:f5:92:0c:cf:09:87:
c6:f1:a0:d7:96:cc:af:b6:67:57:4a:94:32:bc:4a:
0a:b0:7e:8a:92:ab:d8:71:26:22:4c:98:36:3b:15:
30:59:a5:73:fd:c5:db:77:07:c6:27:be:58:a2:f8:
76:76:46:f0:4a:39:46:f8:d1:36:7c:9e:45:d6:ba:
a9:84:1d:86:c7:f7:14:10:da:f8:c7:46:ee:14:ed:
d0:c7:56:a8:ef:7a:c8:8b:45:a7:88:d2:72:bb:29:
83:04:ad:b9:0b:87:59:be:bf:b9:37:3e:b5:2d:b0:
6b:e8:79:39:bc:2e:8a:df:a0:ee:ca:3b:00:35:22:
db:15:da:c7:3e:c5:e8:52:b0:93:38:5e:b5:ff:5a:
ec:0b:19:ff:57:63:06:26:67:7b:a6:0d:f6:c3:0e:
bd:a3:ad:a1:27:15:c4:e2:e1:21:b2:79:7a:e1:85:
71:34:0f:36:2e:25:cd:ce:ad:09:30:28:58:a2:fe:
a7:06:30:26:da:11:ed:76:99:3d:00:e3:5a:19:32:
fa:38:56:99:56:26:6e:ac:b7:b5:21:84:4e:a8:94:
28:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:86:DC:CB:A5:0C:85:B3:88:35:C5:8D:3C:30:68:95:BC:94:72:E4
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS138887.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.182.0/24
Signature Algorithm: sha256WithRSAEncryption
62:9c:7e:24:be:4b:17:9f:27:42:c9:e7:a7:50:d5:74:09:18:
14:7b:ab:d8:b3:6b:41:5e:05:35:95:c8:af:e9:5d:b9:cb:b3:
e3:8c:bb:1d:aa:37:b4:28:32:c8:59:5b:47:8c:70:89:22:70:
c7:f6:de:91:48:01:81:93:c0:00:70:9c:e2:76:a2:da:dc:98:
ef:89:18:de:fa:cb:31:0b:1b:c5:a9:7d:b5:27:6d:38:46:e5:
06:e2:1e:1b:a3:c1:5f:43:99:39:c1:2b:48:a1:1e:c8:c4:38:
11:9a:85:c6:2a:ee:0c:0d:46:a4:83:ec:a5:b8:67:16:e8:ab:
cc:9a:2e:3a:cd:c6:01:5f:df:47:0c:69:ec:43:85:e6:9e:aa:
68:11:97:86:eb:ea:d2:aa:c8:9e:bb:c6:66:68:47:0a:37:f2:
5f:63:61:d8:a6:11:3b:02:c2:14:e4:0b:bf:7f:b0:16:4d:79:
80:d1:ab:82:dc:49:9c:4e:c2:1a:af:0e:90:40:cf:e4:55:2e:
ea:c6:9c:71:9a:33:73:31:47:55:e2:8d:32:bf:1f:70:10:99:
e5:47:16:05:78:57:07:55:0c:ea:98:f6:f9:b1:85:c7:8c:df:
d5:3e:5e:fe:bc:fa:cd:a5:1e:74:dd:00:54:aa:a2:34:42:ad:
8a:49:10:a3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUcTEspuKOFQ4QWNE4b1K6Sn0JRi8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA5MTQyMTQyNThaFw0yNzA5MTMyMTQ3NThaMDMxMTAvBgNV
BAMTKDM4ODZEQ0NCQTUwQzg1QjM4ODM1QzU4RDNDMzA2ODk1QkM5NDcyRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjg/CRdBwSmNfMF4nBHpRir6rP
Aae+/M2ZWyk1zmwDdRaTbq902vWSDM8Jh8bxoNeWzK+2Z1dKlDK8SgqwfoqSq9hx
JiJMmDY7FTBZpXP9xdt3B8Ynvlii+HZ2RvBKOUb40TZ8nkXWuqmEHYbH9xQQ2vjH
Ru4U7dDHVqjvesiLRaeI0nK7KYMErbkLh1m+v7k3PrUtsGvoeTm8LorfoO7KOwA1
ItsV2sc+xehSsJM4XrX/WuwLGf9XYwYmZ3umDfbDDr2jraEnFcTi4SGyeXrhhXE0
DzYuJc3OrQkwKFii/qcGMCbaEe12mT0A41oZMvo4VplWJm6st7UhhE6olChpAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUOIbcy6UMhbOINcWNPDBolbyUcuQwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTM4ODg3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYu2
MA0GCSqGSIb3DQEBCwUAA4IBAQBinH4kvksXnydCyeenUNV0CRgUe6vYs2tBXgU1
lciv6V25y7PjjLsdqje0KDLIWVtHjHCJInDH9t6RSAGBk8AAcJzidqLa3JjviRje
+ssxCxvFqX21J204RuUG4h4bo8FfQ5k5wStIoR7IxDgRmoXGKu4MDUakg+yluGcW
6KvMmi46zcYBX99HDGnsQ4XmnqpoEZeG6+rSqsieu8ZmaEcKN/JfY2HYphE7AsIU
5Au/f7AWTXmA0auC3EmcTsIarw6QQM/kVS7qxpxxmjNzMUdV4o0yvx9wEJnlRxYF
eFcHVQzqmPb5sYXHjN/VPl7+vPrNpR503QBUqqI0Qq2KSRCj
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:26:31 2026 by rpki-client