Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138195.roa
File: AS138195.roa (raw, json)
Hash identifier: cv4DYxuwIA1U3JzHC3CJX1gWaPRyEimBrDiIP15eRgw=
Subject key identifier: 1E:9B:AD:ED:82:D1:66:9F:B6:0B:01:98:38:CA:B2:51:E8:C8:D9:E8
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 45A5C635E332446B3BFBCCD81D3570C597044A78
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138195.roa
Signing time: Sat 09 May 2026 02:58:19 +0000
ROA not before: Sat 09 May 2026 02:53:19 +0000
ROA not after: Sat 08 May 2027 02:58:19 +0000
asID: 138195
IP address blocks: 143.14.82.0/23 maxlen: 23
143.14.143.0/24 maxlen: 24
162.141.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:a5:c6:35:e3:32:44:6b:3b:fb:cc:d8:1d:35:70:c5:97:04:4a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 9 02:53:19 2026 GMT
Not After : May 8 02:58:19 2027 GMT
Subject: CN=1E9BADED82D1669FB60B019838CAB251E8C8D9E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2f:b5:8c:29:76:ba:bb:6f:20:8e:b1:6c:19:
d4:aa:88:22:5d:9e:95:05:05:24:a6:e1:0e:6b:69:
01:b4:6a:d8:c8:6b:e6:51:16:0d:6b:1a:19:90:32:
3e:85:4a:7d:18:7b:8c:89:fe:ec:85:75:30:d7:a2:
08:cc:21:fb:c8:40:d2:66:6a:03:c9:7f:57:1c:42:
db:db:70:31:7b:f6:2a:61:b7:1c:49:93:9b:8b:e7:
e9:c7:ed:b0:ca:ed:5b:a8:d7:5b:c1:f7:bb:fc:fc:
c0:c9:07:12:90:3b:2b:7b:dd:57:44:21:29:5f:3a:
90:8a:7d:a2:13:e1:26:62:39:7f:a0:fe:3b:a2:ea:
31:a8:36:12:3e:dd:40:a5:68:33:66:6d:47:3d:e2:
9f:34:e2:15:d0:a6:02:f3:89:0e:3e:e1:f4:bd:ee:
58:68:dd:d4:8c:e0:0f:fb:81:17:bb:87:7b:a9:2f:
2a:13:fd:04:60:2e:7b:b8:83:ae:e1:79:62:80:67:
c3:96:58:67:34:80:c9:b8:9a:c2:ab:89:5f:ea:ef:
65:50:99:03:e7:0b:62:55:c7:1e:bf:cc:50:4d:1a:
1b:06:db:f3:80:d6:8c:b6:2d:af:02:cb:56:3f:c7:
40:bc:b1:60:cb:69:38:71:88:da:fe:ba:0a:c1:b3:
9e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9B:AD:ED:82:D1:66:9F:B6:0B:01:98:38:CA:B2:51:E8:C8:D9:E8
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138195.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.82.0/23
143.14.143.0/24
162.141.84.0/22
Signature Algorithm: sha256WithRSAEncryption
65:c3:e5:84:9e:81:db:1c:46:87:a7:3a:71:7e:9d:c4:90:d4:
3b:47:50:78:9e:bd:94:ad:72:99:af:1f:c4:68:7d:73:1d:66:
e6:f1:2a:4f:6c:fd:63:cb:3b:8e:4a:fe:44:43:2a:7e:fb:32:
04:77:26:24:d1:a6:d4:61:73:d2:fc:f4:9d:2d:9e:f7:db:49:
37:fa:7d:84:3a:39:cf:9b:08:d9:b2:c6:52:1a:8e:75:d4:56:
6b:0f:5b:db:da:6c:25:ec:38:3a:e0:bc:2b:cd:f8:5e:74:04:
38:56:1e:13:25:93:b5:06:97:5f:80:0d:50:df:23:c3:9f:dc:
00:f6:68:63:7b:77:cd:08:ce:2a:4b:42:75:eb:ad:d5:e7:0f:
02:c0:06:e4:ba:c7:52:0b:1e:d8:79:35:5b:23:88:07:22:c4:
8f:8b:11:96:92:4a:7a:37:b2:81:2c:66:bd:e5:b9:02:56:db:
2c:4f:f7:36:e7:2f:27:8c:20:42:83:cc:5b:ec:8d:0e:a0:f8:
ed:44:96:bc:e4:bf:f2:1d:ed:ff:09:27:88:6a:b0:e0:32:94:
79:01:00:4c:45:b1:95:74:91:7d:03:0c:85:ab:95:23:d5:25:
03:5b:a9:2c:dc:b1:b7:33:93:ab:d9:28:c4:c4:e9:ec:8b:47:
1f:b3:47:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:08:52 2026 by rpki-client