Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS139379.roa
File: AS139379.roa (raw, json)
Hash identifier: Pkz6/SYWqcd+0U3mDFXG+xu5xVvlEBXeBbrLmF6sbO8=
Subject key identifier: 94:6C:45:2E:AC:66:BE:80:2C:E9:72:6A:7E:23:76:98:DB:F2:C6:7C
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 3A4CE59B15B0D6AE0C7256A5C1DE3DC7B49C77A8
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS139379.roa
Signing time: Mon 02 Mar 2026 05:00:25 +0000
ROA not before: Mon 02 Mar 2026 04:55:25 +0000
ROA not after: Mon 01 Mar 2027 05:00:25 +0000
asID: 139379
IP address blocks: 45.157.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:34:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:4c:e5:9b:15:b0:d6:ae:0c:72:56:a5:c1:de:3d:c7:b4:9c:77:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Mar 2 04:55:25 2026 GMT
Not After : Mar 1 05:00:25 2027 GMT
Subject: CN=946C452EAC66BE802CE9726A7E237698DBF2C67C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:62:cb:8f:35:a9:3b:15:d5:bd:c7:d9:36:
f5:6f:74:1d:25:35:80:d7:80:71:42:56:02:a3:7d:
20:ec:6f:b7:a1:ea:4f:e5:c4:af:c3:d3:4b:f8:df:
e8:78:b6:3b:21:44:e6:87:6b:1f:8a:c7:22:f9:6a:
3d:32:b0:14:3b:ad:21:82:75:1e:90:ba:b2:9e:53:
93:2c:dc:e0:50:37:21:8b:ff:ca:26:84:48:53:9f:
17:f8:9c:fb:f9:c1:23:89:83:5a:bd:0e:e0:a0:d5:
79:f4:37:b0:6a:cd:18:92:a6:57:c4:53:de:04:41:
5b:c8:46:04:f5:47:d8:40:b9:2c:a9:50:68:5e:3e:
13:9b:3f:0c:46:65:29:85:49:a2:ec:fe:0c:f2:74:
b3:06:cd:a3:72:10:eb:74:56:f8:8e:43:e5:a0:4d:
bb:b4:3f:1b:7c:27:7b:ef:50:73:92:02:a8:9a:68:
f2:bc:40:45:a6:61:69:42:e7:c6:31:3f:3a:35:ac:
76:a9:36:f1:9d:24:92:79:da:7b:1f:db:99:18:a8:
0f:e1:02:05:be:2d:25:78:05:d6:7e:e4:16:11:20:
3d:30:91:d1:d8:a0:18:7b:31:3c:61:eb:08:40:2a:
f9:0e:40:01:bb:d6:06:e2:05:81:79:e0:d8:c4:6d:
20:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6C:45:2E:AC:66:BE:80:2C:E9:72:6A:7E:23:76:98:DB:F2:C6:7C
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS139379.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.18.0/24
Signature Algorithm: sha256WithRSAEncryption
78:65:6c:fc:71:d8:ee:36:d4:89:1e:45:d2:48:9e:dc:b4:a7:
50:7c:2f:03:3b:95:eb:9d:b9:58:7c:0f:a9:03:fb:92:1b:84:
b2:3c:8c:bf:d0:d4:ad:2a:c1:cd:50:48:18:0c:dc:be:cb:db:
9c:18:2e:9d:79:12:e6:06:10:2f:10:fb:09:38:01:34:7f:45:
14:c3:c2:bf:30:57:1d:66:bc:41:c8:12:84:7d:ae:8b:8a:64:
9a:c5:98:68:4d:43:c7:71:4e:e1:0e:dd:a2:38:00:7f:60:b9:
48:56:15:63:15:55:86:b3:8d:e0:32:3f:7f:b3:03:53:b4:64:
9b:97:3a:0e:36:2a:75:74:31:e2:79:db:e3:b0:86:02:6f:42:
7c:32:89:09:a2:c1:c8:98:6c:50:7e:dc:29:49:f6:58:2e:1f:
44:a8:9a:eb:96:61:1b:5f:c2:d2:e1:4b:ec:f9:36:42:92:d0:
ed:ba:ed:3b:70:ca:78:4c:20:a3:ea:39:60:f4:79:cc:a0:ed:
c6:97:ff:0e:43:95:03:2c:b3:a8:bf:ad:99:b4:7f:14:08:77:
ea:c9:ea:f0:5b:03:b4:ab:21:11:82:f5:da:21:c2:5f:b3:e6:
70:6e:43:33:88:e4:f8:c1:ed:4d:a2:40:13:74:da:c6:ef:8f:
98:d4:56:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:46:42 2026 by rpki-client