Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS38136.roa
File: AS38136.roa (raw, json)
Hash identifier: eG74RdRWQB+1pfHmLkHKv/O4k74wqEBXcXCFJhVhw3s=
Subject key identifier: 83:FA:97:FE:81:EC:B4:EB:DB:21:2A:5A:00:F4:5F:1E:72:E9:D5:22
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 045C021EC1AFB5E3EFA6BCCE1B8C85EC6F600FA3
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS38136.roa
Signing time: Mon 14 Sep 2026 12:27:24 +0000
ROA not before: Mon 14 Sep 2026 12:22:24 +0000
ROA not after: Mon 13 Sep 2027 12:27:24 +0000
asID: 38136
IP address blocks: 2a14:7582:9000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:5c:02:1e:c1:af:b5:e3:ef:a6:bc:ce:1b:8c:85:ec:6f:60:0f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 14 12:22:24 2026 GMT
Not After : Sep 13 12:27:24 2027 GMT
Subject: CN=83FA97FE81ECB4EBDB212A5A00F45F1E72E9D522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:4e:04:ef:e8:5f:53:42:0b:58:bb:45:17:
1f:74:c3:d7:ad:bd:35:76:dc:a9:13:a0:4a:7d:15:
64:9d:35:22:02:d5:08:2f:d6:d6:40:c8:0b:2c:fc:
2d:cd:ac:3e:38:73:1b:c8:c3:cd:8a:23:ea:e8:26:
a0:b5:ec:87:08:24:f2:98:4a:7f:db:97:54:ac:b1:
f7:5a:9a:82:17:71:d2:7b:46:81:cc:a9:e7:69:2c:
77:14:57:91:b8:e9:e8:02:a1:f0:46:0e:6d:63:24:
fe:a4:e6:c7:0c:a6:f5:0e:95:93:ad:8c:67:1e:b1:
79:25:9a:f0:09:34:af:80:61:2d:a9:30:c0:3b:65:
21:0e:3e:23:60:40:95:27:cd:aa:73:45:e9:ba:f0:
69:89:78:6f:55:42:76:64:13:4b:40:66:88:be:db:
76:87:77:82:11:00:8b:9a:9d:d4:ca:b8:1c:20:55:
1d:4a:5d:04:a1:0e:56:24:f2:d2:79:b0:48:13:84:
7a:77:18:f8:00:4c:ee:27:a0:7c:7c:20:57:0f:ed:
1a:44:94:59:4a:50:48:62:49:08:f1:82:f9:37:48:
a2:f7:79:fd:2f:41:97:be:e6:92:7e:38:9c:02:7c:
b8:20:ea:78:98:5d:97:5a:cd:68:3d:53:d0:06:21:
2c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FA:97:FE:81:EC:B4:EB:DB:21:2A:5A:00:F4:5F:1E:72:E9:D5:22
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS38136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7582:9000::/36
Signature Algorithm: sha256WithRSAEncryption
9b:d8:e5:70:e1:31:c3:2d:55:15:70:24:9a:fd:77:7a:95:d4:
c8:45:9d:5b:7d:a0:92:b1:4f:fa:b3:3e:82:56:6d:67:d0:c7:
f4:03:25:80:48:4a:55:3b:10:3c:36:f4:46:f7:20:27:95:69:
72:fe:bf:24:18:fa:54:9d:d5:43:c0:27:84:83:e1:ad:7c:d7:
80:ec:dd:b6:89:09:42:85:1e:69:c0:34:24:b0:5d:c3:00:43:
3a:4f:2b:03:60:2b:75:83:23:7b:72:e6:9c:8d:37:6c:99:65:
c4:2d:62:5c:a5:51:23:30:7a:b4:55:fc:15:43:b3:78:04:fc:
45:24:b7:a2:73:67:5c:b9:b2:c2:d2:97:e2:b1:48:2f:78:a5:
d1:94:39:94:50:a1:25:07:49:43:31:66:ee:b1:24:e8:dd:c8:
89:32:81:75:e7:d5:23:89:c1:f2:dc:90:7c:e7:98:68:97:9f:
88:f8:c2:5f:cc:73:e9:1f:00:31:7f:a5:5f:d7:b1:24:5b:aa:
03:c4:a3:8c:bc:73:ee:39:b7:e8:7c:0f:d4:e7:b8:3f:ca:22:
c3:fb:1f:d5:82:98:43:9b:c4:9f:97:26:91:94:62:aa:f7:1a:
b4:bf:bf:29:5f:22:97:92:eb:7f:b6:58:52:3c:6c:5c:5a:8f:
75:8d:32:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:46:08 2026 by rpki-client