Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS138737.roa
File: AS138737.roa (raw, json)
Hash identifier: CSkRCxFBj3jMGymJZduz93QdrwJaIc+KPx/gfuLox8g=
Subject key identifier: 7F:14:CB:72:4E:AB:E0:DB:E5:68:67:4A:F7:C5:25:3F:D7:E9:50:91
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 45D622D2E94E4E052D3B5C60068B1586231E5CAD
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS138737.roa
Signing time: Thu 10 Sep 2026 08:51:33 +0000
ROA not before: Thu 10 Sep 2026 08:46:33 +0000
ROA not after: Thu 09 Sep 2027 08:51:33 +0000
asID: 138737
IP address blocks: 82.23.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:d6:22:d2:e9:4e:4e:05:2d:3b:5c:60:06:8b:15:86:23:1e:5c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 10 08:46:33 2026 GMT
Not After : Sep 9 08:51:33 2027 GMT
Subject: CN=7F14CB724EABE0DBE568674AF7C5253FD7E95091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:43:7c:a3:bc:d5:a3:28:ee:7c:89:b2:b4:63:
e2:14:06:62:98:01:35:4f:05:20:51:80:c8:4e:87:
42:54:e5:dd:12:2c:c7:af:dd:8e:66:b8:4c:3e:a1:
1a:af:2d:59:69:74:4c:49:ed:97:5b:38:bd:97:de:
3e:d0:7d:74:10:2e:fa:7c:c5:4e:f0:f8:85:9b:d9:
5a:27:4e:3c:42:d5:36:e4:58:54:42:ce:5a:c9:5e:
ca:cd:25:88:bc:ea:a7:0c:be:0d:89:7b:7b:3f:97:
46:82:aa:43:c0:63:b2:6d:fb:9b:93:b9:b8:35:b8:
17:67:4a:c7:8d:28:74:0c:6c:f0:80:e2:06:56:3d:
76:c2:6f:f3:99:73:6c:dc:d6:d4:71:fe:e4:90:f6:
9f:5b:38:14:94:dd:3d:1c:6c:3f:31:42:f0:20:f7:
b1:a0:e4:19:4c:1a:ae:f2:f2:4b:45:cb:c3:30:bb:
49:b5:2e:82:2e:e9:be:8b:98:68:1e:d9:6c:27:4b:
83:70:f0:f5:7e:fc:35:42:53:5f:52:eb:7b:65:aa:
d8:88:25:0a:d1:07:d1:a3:5a:26:71:2d:4a:9f:a2:
d3:a0:64:a2:08:fd:e3:51:8c:58:25:ed:51:a1:69:
34:5f:18:cd:c6:45:75:6e:ea:d0:27:05:c8:3b:54:
76:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:14:CB:72:4E:AB:E0:DB:E5:68:67:4A:F7:C5:25:3F:D7:E9:50:91
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS138737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.23.149.0/24
Signature Algorithm: sha256WithRSAEncryption
38:90:8b:ad:c6:e2:54:44:6b:c8:f6:ba:9e:aa:29:b8:c2:53:
c0:af:05:58:f0:d2:13:1a:07:5d:f9:36:34:07:aa:d7:86:7e:
74:cd:fb:71:59:51:62:85:78:fc:e7:ef:cf:35:6f:37:e3:c7:
17:08:a8:46:6c:e5:74:2e:d2:ab:5f:91:b6:84:26:8c:83:cb:
74:a7:ea:8c:20:36:97:b6:04:02:29:96:65:cc:b5:12:83:3c:
92:7e:52:f7:3c:98:cd:ce:27:de:24:3c:fa:a1:0c:af:38:91:
e8:6a:55:24:f2:68:25:ee:cf:15:a1:f1:cb:5f:30:74:ea:ce:
d5:57:5b:2c:7d:c4:3a:5b:e2:fb:7b:db:9f:1e:5d:eb:87:d3:
90:08:a3:97:59:73:70:a5:07:3a:43:4a:54:64:2f:9d:9f:8c:
c2:c8:b0:c7:dc:42:b1:ed:59:8e:b5:05:f8:b1:ff:74:78:a2:
f8:80:f2:a7:d9:1f:cb:dc:04:eb:6c:ec:d5:5a:54:67:f2:98:
c4:0b:a3:54:ae:52:3f:7f:2e:45:50:9e:de:67:1c:bb:75:37:
af:79:fa:46:6a:8f:8a:71:90:fd:66:52:50:cc:28:e1:c5:7f:
0e:d9:d4:3e:bd:0f:ef:1a:5f:05:5c:1e:16:f4:39:f7:5d:fa:
38:d8:d9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:26:12 2026 by rpki-client