Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS138997.roa
File: AS138997.roa (raw, json)
Hash identifier: ClI48gTOP/oQ06BZdvNetAmqWqABX6TsHR9qTBo0Ppc=
Subject key identifier: 5C:3C:D1:8C:DF:7B:E0:EF:B9:26:F2:B6:71:6C:B6:49:55:CA:E7:E9
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7B8EAB0558459CCEEA6EBE42F7C1718D373588AE
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS138997.roa
Signing time: Thu 10 Sep 2026 08:53:24 +0000
ROA not before: Thu 10 Sep 2026 08:48:24 +0000
ROA not after: Thu 09 Sep 2027 08:53:24 +0000
asID: 138997
IP address blocks: 95.134.2.0/23 maxlen: 23
178.95.78.0/24 maxlen: 24
178.95.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:8e:ab:05:58:45:9c:ce:ea:6e:be:42:f7:c1:71:8d:37:35:88:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 10 08:48:24 2026 GMT
Not After : Sep 9 08:53:24 2027 GMT
Subject: CN=5C3CD18CDF7BE0EFB926F2B6716CB64955CAE7E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3b:7d:c1:e8:90:83:fd:a5:81:63:57:42:87:
a0:72:85:8b:f5:ad:5b:2c:3d:b7:fa:86:53:b3:a3:
2c:c4:3e:d7:66:97:70:6d:26:50:ea:68:d1:f9:c3:
4b:4b:09:bd:92:27:68:f3:77:79:03:2b:6b:72:ca:
47:a6:39:59:6c:fc:71:3f:b3:0a:63:df:51:66:a5:
92:fb:3b:8f:84:15:9c:a5:3d:de:b9:3a:59:13:ce:
f9:93:4b:c3:3c:be:d6:e0:12:fe:2b:b7:2b:67:79:
cf:f8:d0:7f:e4:88:27:cb:6d:72:bd:7e:70:fa:01:
ab:4a:38:44:2e:20:ce:0c:16:97:98:5f:21:e5:84:
9a:0a:66:6a:2a:f8:d4:80:47:45:6d:20:51:b3:93:
e8:f3:1e:96:bd:fa:ff:3c:6e:aa:53:2c:41:b1:81:
3d:a1:e5:62:c0:a6:66:08:be:44:8a:24:83:03:9f:
f7:18:d8:ed:ff:0b:93:0c:23:5f:cf:ec:ef:7a:28:
ca:39:77:0e:cc:8f:43:0b:74:56:5e:0e:b1:fb:f1:
52:8c:89:19:01:d2:5f:57:05:0b:b5:b7:51:32:a3:
63:47:0e:47:e1:fe:eb:fa:d3:86:a7:ce:c1:94:71:
37:0b:7f:67:b8:25:8a:59:f7:2f:43:ce:fa:f8:04:
34:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3C:D1:8C:DF:7B:E0:EF:B9:26:F2:B6:71:6C:B6:49:55:CA:E7:E9
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS138997.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.2.0/23
178.95.78.0/24
178.95.188.0/23
Signature Algorithm: sha256WithRSAEncryption
74:73:e4:c7:ff:9a:6f:a9:96:dc:73:7e:f2:d2:ed:46:d3:58:
b8:5a:a3:fe:38:9f:f5:c8:b6:f1:2b:be:4b:44:d6:8d:a5:77:
dc:52:ef:e6:c1:d0:78:d7:2e:50:3f:60:3a:70:0c:4d:6f:a8:
56:3c:9c:6b:de:44:d6:df:39:a6:f0:14:b6:af:9a:b0:cc:40:
c7:28:d5:b3:2c:d6:45:2b:3e:de:44:df:38:f2:4c:f1:b8:df:
ad:94:08:b5:08:cf:d5:d6:a3:a3:1b:52:0f:ed:d6:ff:8f:e5:
54:de:a1:e4:38:bb:59:9b:a4:5d:66:2b:8c:8b:7e:b6:87:92:
e4:ea:ec:2f:97:9f:ab:b9:15:99:d1:96:4f:7d:25:8d:58:48:
57:79:55:a6:4c:89:c8:aa:8c:82:11:ec:d7:17:3f:ca:0b:53:
60:d4:62:4f:5a:b2:ba:3f:07:59:fd:15:a2:39:94:0d:c7:b9:
43:4f:5e:1a:83:30:e4:0f:92:b4:3e:14:62:be:22:5a:11:a2:
5c:3d:67:53:d0:a6:61:e0:7b:42:ea:30:98:b7:ea:de:90:1b:
67:69:66:14:03:59:05:7c:bf:18:65:8b:c7:0f:08:fc:7f:7e:
c7:2c:ed:03:9f:b7:18:d2:7d:86:85:e8:b5:df:55:42:ca:32:
93:25:66:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:10:59 2026 by rpki-client