Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS138997.roa
File: AS138997.roa (raw, json)
Hash identifier: 0hIz22FbdxfbeRFhcD9EP2C4uoAwwBQihvleeDwezH0=
Subject key identifier: F3:8A:9F:73:D8:79:01:71:90:AF:14:BC:C1:97:07:AC:2B:F7:55:E3
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1D4DF821948CC71EFE1B4498FD64B0DABC7F5D5E
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS138997.roa
Signing time: Mon 15 Sep 2025 00:07:04 +0000
ROA not before: Mon 15 Sep 2025 00:02:04 +0000
ROA not after: Mon 14 Sep 2026 00:07:04 +0000
asID: 138997
IP address blocks: 179.61.173.0/24 maxlen: 24
181.214.33.0/24 maxlen: 24
181.214.75.0/24 maxlen: 24
181.214.185.0/24 maxlen: 24
181.214.250.0/24 maxlen: 24
181.215.127.0/24 maxlen: 24
181.215.136.0/24 maxlen: 24
181.215.148.0/24 maxlen: 24
181.215.154.0/24 maxlen: 24
181.215.239.0/24 maxlen: 24
185.173.27.0/24 maxlen: 24
194.53.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:4d:f8:21:94:8c:c7:1e:fe:1b:44:98:fd:64:b0:da:bc:7f:5d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 15 00:02:04 2025 GMT
Not After : Sep 14 00:07:04 2026 GMT
Subject: CN=F38A9F73D879017190AF14BCC19707AC2BF755E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:61:20:84:d1:02:89:40:93:e8:7b:9c:54:
89:0e:f3:4f:5f:bf:ae:a8:d2:51:c5:e8:42:43:8c:
a8:da:24:8b:3c:3e:07:7c:39:23:d6:95:e1:49:ec:
60:23:33:cc:a2:7a:39:e5:4b:b7:25:ec:06:0c:36:
0f:ad:3d:e7:79:12:8d:7c:cf:b7:23:7e:02:ad:1a:
95:4f:4e:fd:bb:06:f1:96:08:47:72:1a:75:f8:a5:
17:7b:0e:5e:cf:81:0b:49:65:91:fc:d6:5d:8b:ae:
d9:3d:d4:1d:de:64:74:86:9b:08:5c:28:76:9c:e3:
bb:3b:ae:35:f3:82:13:39:11:04:08:f4:3f:03:df:
45:db:15:c1:fa:01:bb:3b:7d:27:e3:1f:f2:42:ea:
4e:b2:b8:4b:c3:da:9d:6b:d3:ac:67:d8:4d:9b:fa:
6e:55:95:14:ee:2d:79:00:64:06:3e:5f:7c:19:d8:
3e:ef:41:7d:ef:cb:6a:50:c4:46:2d:d1:df:21:f5:
2d:e8:76:57:48:f0:3d:09:1b:09:02:4d:06:db:d5:
92:61:63:70:7f:08:58:45:c8:fa:09:71:e0:62:11:
ef:21:30:83:88:f2:37:e7:dd:c8:f1:90:b8:9e:33:
ff:a7:8d:1c:61:47:d8:ce:09:16:f3:c7:17:bd:fa:
79:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8A:9F:73:D8:79:01:71:90:AF:14:BC:C1:97:07:AC:2B:F7:55:E3
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS138997.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.173.0/24
181.214.33.0/24
181.214.75.0/24
181.214.185.0/24
181.214.250.0/24
181.215.127.0/24
181.215.136.0/24
181.215.148.0/24
181.215.154.0/24
181.215.239.0/24
185.173.27.0/24
194.53.142.0/24
Signature Algorithm: sha256WithRSAEncryption
75:80:72:9d:00:1a:34:18:15:70:0d:9a:d6:b7:b6:d3:28:83:
f0:8b:c3:2d:55:51:b8:ac:d7:80:98:f8:ea:de:59:0a:7d:05:
e4:ab:66:df:22:ab:89:be:4d:37:ec:c6:4a:fe:de:23:a1:14:
e8:1b:cc:bc:d8:cc:31:5c:1a:31:f8:3c:10:1a:55:b2:5f:9c:
10:98:4e:ea:ca:64:7c:bb:0e:c7:c7:06:44:77:de:ee:55:e0:
d9:5f:f3:b3:5b:0c:f7:a6:a5:0e:19:4d:ea:19:d0:95:1d:55:
79:30:3d:87:57:ad:4b:72:cc:08:48:d2:59:a2:92:a2:cf:98:
ee:7d:17:8f:40:65:6d:9c:c4:0b:19:9c:00:e7:8d:98:34:bd:
38:35:be:0e:a5:a4:5a:f8:b6:62:8d:bd:e6:c9:ca:92:2e:ac:
5b:b9:19:d2:fe:d5:84:8a:1d:b2:c5:2c:1d:ec:83:71:1c:70:
57:fa:b0:3b:5d:ba:95:d3:34:b6:c2:62:80:78:82:85:75:29:
1b:b3:c6:5e:c6:f5:66:6f:87:ee:18:16:fb:4f:34:d2:6d:a1:
b6:de:3b:4b:77:0e:8c:b6:84:71:96:4b:87:b2:2e:0c:9d:0d:
48:16:03:6f:84:02:c6:0f:ab:e4:cc:65:d1:84:00:c0:ea:31:
b3:a7:02:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:03:33 2025 by rpki-client