Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS138643.roa
File: AS138643.roa (raw, json)
Hash identifier: C6YZck0IkzkqLAKoqnnahu6PLZo0zQrXu8tOgwgpQyI=
Subject key identifier: 99:5A:F0:E3:EB:C8:DE:9A:B5:58:68:3E:01:E8:99:2A:00:E2:6C:07
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4AA9CF146DF401F3FBB3F3FF5F2D6DFB7C77F2C8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS138643.roa
Signing time: Tue 15 Sep 2026 07:10:19 +0000
ROA not before: Tue 15 Sep 2026 07:05:19 +0000
ROA not after: Tue 14 Sep 2027 07:10:19 +0000
asID: 138643
IP address blocks: 82.23.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:a9:cf:14:6d:f4:01:f3:fb:b3:f3:ff:5f:2d:6d:fb:7c:77:f2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 15 07:05:19 2026 GMT
Not After : Sep 14 07:10:19 2027 GMT
Subject: CN=995AF0E3EBC8DE9AB558683E01E8992A00E26C07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:61:02:91:b7:3e:b0:29:be:a7:01:76:71:
80:05:b2:8c:31:f7:33:8a:34:4e:10:64:5f:ec:5e:
dc:de:18:22:ca:45:33:c1:44:84:0b:71:4a:c8:2c:
12:3d:45:e5:b8:9c:7c:51:b1:a8:b1:e2:ad:49:a9:
43:4a:32:f6:29:d8:61:6a:41:a7:93:de:36:3d:52:
18:24:67:2f:d6:d9:51:ad:9e:58:2f:b5:e0:99:b1:
fa:c7:21:98:e1:77:34:35:da:2e:ad:9e:64:ee:16:
6d:df:4b:5b:49:9a:25:a6:0b:3d:27:1b:fa:83:bf:
32:05:f0:c6:95:7c:aa:10:39:bf:a3:7e:8d:44:cc:
6c:ed:39:0e:e6:19:4e:7b:7e:93:b1:7c:d9:f8:77:
8d:13:e0:54:e5:7b:9f:0f:de:cd:97:17:79:b5:d7:
ac:9c:9b:7b:b9:54:d4:b6:19:e5:89:86:ff:f4:a0:
83:e5:4c:ce:8e:3b:39:48:ec:7f:76:01:da:9b:19:
18:6f:9c:18:4b:e5:08:ce:d4:ca:68:19:e1:d5:52:
b4:fa:85:71:fb:49:3b:80:0e:f0:07:a0:3c:e0:11:
f4:51:65:f6:37:f4:44:db:26:75:fc:10:22:56:df:
bc:c2:da:f5:37:bc:2f:8b:15:b3:71:8b:99:ed:4e:
39:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5A:F0:E3:EB:C8:DE:9A:B5:58:68:3E:01:E8:99:2A:00:E2:6C:07
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS138643.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.23.246.0/24
Signature Algorithm: sha256WithRSAEncryption
74:0b:bc:57:ca:7a:86:42:ff:81:4f:92:0c:2d:f2:94:74:68:
60:1d:60:7b:67:d4:8f:33:1a:35:bf:29:91:10:eb:92:60:ff:
40:23:33:87:fb:9c:ee:01:c5:f6:b2:4f:eb:96:e4:8b:af:cb:
0c:f3:83:1d:35:55:02:79:f3:45:a4:ea:59:2d:71:12:d8:2b:
d7:75:f9:71:e9:90:65:a4:81:89:1c:d2:6c:96:b1:d4:cf:92:
40:cc:be:aa:df:78:e7:13:9c:9c:95:bf:2b:44:2a:42:59:6d:
93:98:f4:e4:52:d3:c8:b8:95:be:df:b9:23:60:e5:e5:a9:00:
8e:8e:ab:bb:43:cc:a1:90:be:b0:af:6e:30:80:ec:9b:bb:3c:
8b:c5:1c:b5:26:52:17:ed:39:66:6d:c9:b1:cb:01:30:82:67:
86:5c:84:79:ac:d0:9d:0e:01:77:47:6b:10:01:1a:36:69:78:
de:e6:53:c2:33:4b:97:6b:d0:ac:75:72:b0:85:99:c8:86:94:
92:eb:d4:f0:3c:51:5d:4e:63:3f:64:e1:07:e4:87:6d:b9:0c:
34:41:e7:db:f3:ca:dc:3b:f5:a4:7b:e0:3f:40:c5:a0:cb:f0:
c0:15:a5:9b:05:e4:ab:b2:e2:f4:1b:f4:f0:72:7f:f7:30:07:
ca:c3:32:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:28:56 2026 by rpki-client