Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138195.roa
File: AS138195.roa (raw, json)
Hash identifier: pGl+h+VO7NgprhuEToHDQtUzRWcJuY80ppf6nD8XBXI=
Subject key identifier: D4:3F:1C:BD:3C:EE:83:72:83:21:3F:CB:63:8F:1B:FC:08:08:27:3B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4D8EFE04200F46778B13AA12AB92475E1550541A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138195.roa
Signing time: Tue 17 Jun 2025 00:00:22 +0000
ROA not before: Mon 16 Jun 2025 23:55:22 +0000
ROA not after: Tue 16 Jun 2026 00:00:22 +0000
asID: 138195
IP address blocks: 143.14.143.0/24 maxlen: 24
146.103.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:8e:fe:04:20:0f:46:77:8b:13:aa:12:ab:92:47:5e:15:50:54:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 16 23:55:22 2025 GMT
Not After : Jun 16 00:00:22 2026 GMT
Subject: CN=D43F1CBD3CEE837283213FCB638F1BFC0808273B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:08:21:ab:3c:5b:72:ac:a6:fe:4b:da:52:b4:
9d:9a:a3:ad:03:ee:e2:61:88:93:fe:ea:35:b4:a5:
92:c5:06:a8:20:a9:73:a0:fa:17:80:b5:12:49:5b:
a6:0d:b3:e7:2c:fe:b6:3e:c8:40:5a:12:cc:40:8c:
3b:09:82:c6:e4:28:0e:83:57:eb:c5:c9:0d:eb:d9:
c3:ac:5c:a0:94:cf:eb:14:0a:e9:f8:6c:ba:26:a6:
48:cd:e8:81:83:37:b4:f4:df:a4:10:3b:5f:99:43:
4b:76:ef:5b:41:0a:30:ae:0e:5e:f8:0f:a0:bd:09:
a6:1d:62:89:41:c0:fd:7d:1b:2f:e5:aa:63:90:eb:
79:81:3d:f3:09:6c:ca:28:44:14:c2:93:fd:71:98:
56:39:0d:f1:9b:56:09:e8:98:7e:be:bc:45:6b:18:
99:d0:03:a7:35:ce:e0:0f:2e:59:e1:db:f4:c0:98:
3f:61:77:6f:3b:f9:88:2a:a0:ee:c4:3d:bc:f8:93:
73:ea:da:74:40:a1:4c:15:fe:1f:eb:c5:26:08:77:
24:9c:dc:84:6d:21:df:36:14:fe:c2:6e:5e:7e:ba:
35:3d:92:e8:c4:c3:11:63:ec:03:dd:ec:3c:b3:d8:
62:27:c8:74:da:d1:33:ea:70:3c:df:9f:7f:fc:e3:
7f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3F:1C:BD:3C:EE:83:72:83:21:3F:CB:63:8F:1B:FC:08:08:27:3B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138195.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.143.0/24
146.103.27.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:99:0e:ec:e9:f0:32:14:61:52:3b:42:74:a0:21:07:5e:a4:
16:1b:70:72:16:14:e9:29:02:2d:80:87:2d:86:4f:ba:ca:8a:
b7:12:55:cb:1c:46:84:43:83:64:b2:83:bc:c9:a6:8f:7c:f3:
c4:90:d2:2e:88:c5:b1:1b:bf:50:09:e5:e7:1f:3c:62:27:b1:
f5:f5:e4:7d:d2:f9:f3:a7:8b:4c:b3:bc:3d:b3:f0:4e:20:14:
fe:86:72:36:96:18:13:72:7e:59:a7:28:ad:68:c1:e4:ba:d9:
f5:80:12:33:9e:57:15:03:1d:f3:4b:c2:0d:d7:ac:73:5f:e1:
75:30:38:03:72:19:d0:21:e4:78:8b:eb:37:a3:5b:31:04:e0:
f0:e1:80:91:17:d3:22:91:b9:61:2c:b8:96:f7:f4:65:6f:4b:
34:0b:0d:9a:91:ef:20:77:7b:1e:c9:0f:5e:0e:7c:f9:da:ea:
50:88:b4:e0:8b:6f:72:a8:63:9b:43:86:6e:80:b0:6a:d1:29:
28:7d:e6:ec:59:87:0f:b9:6f:5d:a6:35:a9:18:24:3b:db:4b:
a6:45:60:45:26:64:b7:75:94:d9:7d:f7:ad:b3:d5:bd:81:42:
ae:64:cc:fd:95:64:d8:b5:cd:29:84:d2:f1:1d:5e:2c:05:5b:
58:7b:82:d6
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUTY7+BCAPRneLE6oSq5JHXhVQVBowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA2MTYyMzU1MjJaFw0yNjA2MTYwMDAwMjJaMDMxMTAvBgNV
BAMTKEQ0M0YxQ0JEM0NFRTgzNzI4MzIxM0ZDQjYzOEYxQkZDMDgwODI3M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSCCGrPFtyrKb+S9pStJ2ao60D
7uJhiJP+6jW0pZLFBqggqXOg+heAtRJJW6YNs+cs/rY+yEBaEsxAjDsJgsbkKA6D
V+vFyQ3r2cOsXKCUz+sUCun4bLompkjN6IGDN7T036QQO1+ZQ0t271tBCjCuDl74
D6C9CaYdYolBwP19Gy/lqmOQ63mBPfMJbMooRBTCk/1xmFY5DfGbVgnomH6+vEVr
GJnQA6c1zuAPLlnh2/TAmD9hd287+YgqoO7EPbz4k3Pq2nRAoUwV/h/rxSYIdySc
3IRtId82FP7Cbl5+ujU9kujEwxFj7APd7Dyz2GInyHTa0TPqcDzfn3/84397AgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQU1D8cvTzug3KDIT/LY48b/AgIJzswHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTM4MTk1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjw6P
AwQAkmcbMA0GCSqGSIb3DQEBCwUAA4IBAQAbmQ7s6fAyFGFSO0J0oCEHXqQWG3By
FhTpKQItgIcthk+6yoq3ElXLHEaEQ4NksoO8yaaPfPPEkNIuiMWxG79QCeXnHzxi
J7H19eR90vnzp4tMs7w9s/BOIBT+hnI2lhgTcn5ZpyitaMHkutn1gBIznlcVAx3z
S8IN16xzX+F1MDgDchnQIeR4i+s3o1sxBODw4YCRF9MikblhLLiW9/Rlb0s0Cw2a
ke8gd3seyQ9eDnz52upQiLTgi29yqGObQ4ZugLBq0SkofebsWYcPuW9dpjWpGCQ7
20umRWBFJmS3dZTZffets9W9gUKuZMz9lWTYtc0phNLxHV4sBVtYe4LW
-----END CERTIFICATE-----
Generated at Sun Jun 29 07:27:04 2025 by rpki-client