Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS61138.roa
File: AS61138.roa (raw, json)
Hash identifier: azlbZWyVO7kFT52yW+iOkXCUdkoWrt+gD1aiML3iIdk=
Subject key identifier: 93:2F:EF:9D:33:0E:59:13:D3:7D:CC:4B:6A:55:6F:1A:8F:DB:2C:0E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 172E17DF7E3A405F9F60AEBE68F12B9837B78B5D
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS61138.roa
Signing time: Fri 14 Aug 2026 12:49:28 +0000
ROA not before: Fri 14 Aug 2026 12:44:28 +0000
ROA not after: Fri 13 Aug 2027 12:49:28 +0000
asID: 61138
IP address blocks: 92.112.96.0/22 maxlen: 24
92.113.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:2e:17:df:7e:3a:40:5f:9f:60:ae:be:68:f1:2b:98:37:b7:8b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 14 12:44:28 2026 GMT
Not After : Aug 13 12:49:28 2027 GMT
Subject: CN=932FEF9D330E5913D37DCC4B6A556F1A8FDB2C0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:96:a5:e9:07:bc:4a:17:a7:b1:9b:9c:f2:3f:
cb:7b:f7:9b:75:fb:4b:4b:15:0a:e3:2f:a2:e9:eb:
31:e4:c8:13:0b:a6:e2:1d:f2:2d:c2:48:d4:1e:ba:
68:0a:95:07:aa:5e:26:87:4c:85:f4:7b:20:a0:a1:
9c:3a:18:9e:ad:0c:46:9b:fa:c9:84:bf:7f:56:06:
59:e0:a6:cf:02:e8:87:03:f9:57:c9:a2:e4:3a:6f:
3d:e9:7a:d3:1a:2b:7b:bd:69:0a:02:d4:34:23:87:
1b:12:a0:76:42:71:95:22:a2:5f:1d:76:f1:f3:23:
12:a8:4c:72:b7:d8:0d:e9:14:f1:5e:ce:10:68:f3:
65:50:97:9d:6e:a3:42:e7:77:bf:ff:e6:6f:7c:e0:
8d:bd:fd:ae:97:4a:29:8b:12:fb:2a:04:3a:21:ea:
ff:a2:31:e2:4b:6c:3c:07:f5:67:49:57:db:c6:4d:
6b:f1:d4:67:ab:71:8b:b0:29:2f:25:4f:92:59:50:
fd:b9:6d:0e:bf:ce:20:35:0d:32:cb:ef:63:b4:32:
e4:7f:f3:8f:5a:fe:6d:15:3d:b3:f9:4a:b3:73:ba:
e4:f3:7e:fc:c2:d0:4a:99:c7:07:ff:aa:42:86:44:
3d:e1:46:e4:e7:61:f8:95:c0:10:88:f6:73:58:34:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2F:EF:9D:33:0E:59:13:D3:7D:CC:4B:6A:55:6F:1A:8F:DB:2C:0E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS61138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.96.0/22
92.113.152.0/22
Signature Algorithm: sha256WithRSAEncryption
37:6b:38:00:89:cb:b7:53:f7:1d:00:77:29:67:89:a9:fa:a6:
71:17:1c:30:b1:e2:67:5c:bd:f5:b0:7e:e5:4c:fb:5c:72:a0:
08:0a:97:60:76:3b:f6:26:49:0c:9b:c3:5e:44:85:64:67:a8:
b6:2c:e8:e6:e5:44:0d:3d:6c:da:53:8e:1b:bf:49:2d:2b:23:
d7:e2:f9:0e:60:13:5f:82:0f:e8:6e:6e:ba:8a:09:de:6b:a0:
d4:1e:a6:30:b6:16:68:13:e8:7d:11:ce:69:ae:01:9d:c6:33:
71:74:ab:dc:d6:44:45:9b:f1:7e:03:db:15:c1:2f:83:80:20:
7f:86:63:6c:fd:c6:ac:0d:8f:ac:6f:94:51:0c:0a:f5:63:61:
3e:20:37:60:f2:ae:b5:93:eb:af:be:f8:d1:80:61:73:fc:6a:
13:83:a7:72:ae:2c:59:d4:1e:cd:e4:a9:b4:4d:b5:85:78:04:
0a:72:09:88:f5:76:b9:73:89:81:77:38:ea:18:c5:a1:40:5b:
1a:ff:52:ee:f8:7e:b8:df:97:2c:0d:2f:3d:c3:12:bd:36:14:
cb:a0:d3:85:83:fc:12:bc:fb:30:f0:3d:c0:1c:ae:05:b8:1c:
1f:12:70:34:7c:6f:73:fb:fd:c7:39:da:b0:f5:de:a2:2c:a4:
11:c5:23:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:33:30 2026 by rpki-client