Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138997.roa
File: AS138997.roa (raw, json)
Hash identifier: f70owoq6YgPqBxKusgGoNBi59AZz0tWNWq7AsRtecXA=
Subject key identifier: 8B:97:98:0C:70:FB:B7:79:AF:98:FE:66:88:D0:9F:31:73:51:27:1F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1AAA29F8D05BDD4390392C72915C4E2D4588774D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138997.roa
Signing time: Fri 20 Jun 2025 22:29:32 +0000
ROA not before: Fri 20 Jun 2025 22:24:32 +0000
ROA not after: Fri 19 Jun 2026 22:29:32 +0000
asID: 138997
IP address blocks: 146.103.16.0/23 maxlen: 24
155.117.7.0/24 maxlen: 24
155.117.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:13:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:aa:29:f8:d0:5b:dd:43:90:39:2c:72:91:5c:4e:2d:45:88:77:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 20 22:24:32 2025 GMT
Not After : Jun 19 22:29:32 2026 GMT
Subject: CN=8B97980C70FBB779AF98FE6688D09F317351271F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:57:a1:b2:57:0e:2d:06:50:25:fa:39:da:9f:
6c:79:78:98:f3:33:cb:3d:5e:61:43:00:7d:1b:cf:
30:03:02:78:9e:ba:aa:02:43:13:23:68:1a:85:f5:
19:1c:92:17:1a:90:54:4e:e2:a3:9a:c7:2e:4a:f2:
e3:77:3b:dc:b3:1b:52:56:a4:2f:be:b4:0c:3c:d1:
66:7f:65:81:72:01:dd:0d:98:2c:b6:9a:2c:fd:2e:
be:cf:4b:f1:b1:c8:35:5d:2c:12:cb:88:e9:44:b8:
fd:d7:76:43:b5:6a:aa:d0:63:66:53:54:29:65:b9:
78:f1:88:83:17:80:6d:a9:fb:5f:99:49:a6:a7:90:
86:8f:12:08:c1:c9:7d:5d:7f:81:91:16:32:18:ba:
6a:5d:c6:f5:8a:7e:26:a6:47:8b:86:62:24:a1:75:
32:03:53:19:31:c6:a1:ae:0c:8d:96:c7:0a:1d:ad:
a0:11:72:88:fd:d1:d0:82:51:a2:5c:a2:ba:78:ad:
d4:38:98:53:9d:f3:c1:14:2f:96:e6:53:4b:96:a8:
ae:03:ea:d4:69:3e:00:e7:4c:a8:46:5d:13:c9:56:
16:a2:8f:39:3e:ac:99:36:0e:e6:f9:60:d2:ca:6e:
81:b0:6c:da:e7:f2:73:25:44:2b:7d:bd:c1:89:3d:
e1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:97:98:0C:70:FB:B7:79:AF:98:FE:66:88:D0:9F:31:73:51:27:1F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138997.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.16.0/23
155.117.7.0/24
155.117.77.0/24
Signature Algorithm: sha256WithRSAEncryption
30:aa:05:5e:8a:ba:1e:93:43:74:5b:ee:16:38:d2:ad:97:3a:
b0:18:8e:23:01:30:46:8a:58:55:fb:6a:04:60:58:41:48:d4:
d5:66:8c:82:18:e8:3a:c7:38:31:45:60:53:ac:b1:e4:8d:90:
1a:0e:91:a3:bb:b7:03:1f:b0:7d:f5:02:04:77:c6:db:71:3d:
c0:4f:c4:98:0f:87:9d:f6:0b:88:62:58:2f:02:71:44:a2:38:
cd:c9:9d:a3:97:c6:e3:df:0e:d5:1c:66:91:08:1b:95:84:fa:
5b:eb:9d:16:32:d5:0a:c2:0c:b0:4e:85:51:24:ff:74:d6:ea:
b5:62:c4:61:bf:5a:6d:60:a0:92:41:c4:86:6e:82:9f:68:e0:
df:e2:12:64:ee:61:df:0d:77:5f:86:b4:99:55:b5:79:30:9c:
34:d4:b3:6e:45:97:2e:2e:26:6d:67:8a:2e:04:5b:ca:59:51:
61:5b:61:f4:27:94:c7:e4:9a:78:62:0d:64:aa:c3:f1:18:5b:
6e:34:87:88:9a:c0:d8:3e:60:7f:12:33:37:4e:76:df:ab:01:
85:3c:47:1e:2d:1b:50:f5:78:98:a4:de:43:43:11:7f:2b:5c:
36:b1:e4:b8:52:75:2c:6c:89:53:1d:5a:12:ef:ef:f4:0d:60:
09:c4:4c:ad
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUGqop+NBb3UOQOSxykVxOLUWId00wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA2MjAyMjI0MzJaFw0yNjA2MTkyMjI5MzJaMDMxMTAvBgNV
BAMTKDhCOTc5ODBDNzBGQkI3NzlBRjk4RkU2Njg4RDA5RjMxNzM1MTI3MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIV6GyVw4tBlAl+jnan2x5eJjz
M8s9XmFDAH0bzzADAnieuqoCQxMjaBqF9RkckhcakFRO4qOaxy5K8uN3O9yzG1JW
pC++tAw80WZ/ZYFyAd0NmCy2miz9Lr7PS/GxyDVdLBLLiOlEuP3XdkO1aqrQY2ZT
VClluXjxiIMXgG2p+1+ZSaankIaPEgjByX1df4GRFjIYumpdxvWKfiamR4uGYiSh
dTIDUxkxxqGuDI2WxwodraARcoj90dCCUaJcorp4rdQ4mFOd88EUL5bmU0uWqK4D
6tRpPgDnTKhGXRPJVhaijzk+rJk2Dub5YNLKboGwbNrn8nMlRCt9vcGJPeFLAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUi5eYDHD7t3mvmP5miNCfMXNRJx8wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTM4OTk3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBkmcQ
AwQAm3UHAwQAm3VNMA0GCSqGSIb3DQEBCwUAA4IBAQAwqgVeiroek0N0W+4WONKt
lzqwGI4jATBGilhV+2oEYFhBSNTVZoyCGOg6xzgxRWBTrLHkjZAaDpGju7cDH7B9
9QIEd8bbcT3AT8SYD4ed9guIYlgvAnFEojjNyZ2jl8bj3w7VHGaRCBuVhPpb650W
MtUKwgywToVRJP901uq1YsRhv1ptYKCSQcSGboKfaODf4hJk7mHfDXdfhrSZVbV5
MJw01LNuRZcuLiZtZ4ouBFvKWVFhW2H0J5TH5Jp4Yg1kqsPxGFtuNIeImsDYPmB/
EjM3TnbfqwGFPEceLRtQ9XiYpN5DQxF/K1w2seS4UnUsbIlTHVoS7+/0DWAJxEyt
-----END CERTIFICATE-----
Generated at Sun Jun 29 10:27:44 2025 by rpki-client