Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS138997.roa
File: AS138997.roa (raw, json)
Hash identifier: NurAK0u7HDeHRuveNbh42lLYOi+BcDYwW3nA41OzWBE=
Subject key identifier: 41:22:46:A7:12:E1:5E:D1:D1:73:AA:C6:17:81:AB:B1:07:EB:82:5A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7D7948B396E469579CF22E30425295BEA2EE6D21
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS138997.roa
Signing time: Fri 15 Aug 2025 00:02:00 +0000
ROA not before: Thu 14 Aug 2025 23:57:00 +0000
ROA not after: Fri 14 Aug 2026 00:02:00 +0000
asID: 138997
IP address blocks: 179.61.173.0/24 maxlen: 24
181.214.33.0/24 maxlen: 24
181.214.75.0/24 maxlen: 24
181.214.185.0/24 maxlen: 24
181.214.250.0/24 maxlen: 24
181.215.127.0/24 maxlen: 24
181.215.136.0/24 maxlen: 24
181.215.148.0/24 maxlen: 24
181.215.154.0/24 maxlen: 24
181.215.190.0/24 maxlen: 24
181.215.239.0/24 maxlen: 24
185.173.27.0/24 maxlen: 24
194.53.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:79:48:b3:96:e4:69:57:9c:f2:2e:30:42:52:95:be:a2:ee:6d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 14 23:57:00 2025 GMT
Not After : Aug 14 00:02:00 2026 GMT
Subject: CN=412246A712E15ED1D173AAC61781ABB107EB825A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:70:2d:63:67:99:dd:76:9f:b1:e4:65:c3:f1:
fa:5d:e5:e6:fc:0e:64:52:fd:42:5f:81:59:59:c5:
c2:41:31:31:20:1b:78:1e:49:02:45:38:b0:1a:27:
dc:72:30:76:07:b1:4f:15:2c:00:4d:ca:00:e5:ec:
90:3c:b6:57:d4:ff:f6:4e:e7:5d:8a:8e:fd:79:d6:
06:66:ba:d8:a8:4f:45:80:d6:b4:55:f1:03:c9:7a:
32:c4:39:7b:9a:84:92:da:6d:80:cb:19:54:49:32:
b1:71:7b:40:31:38:72:6f:9d:f4:52:5d:bc:e7:0a:
fc:d7:39:11:b4:20:37:81:10:9e:ad:21:9c:ec:5b:
44:f4:47:8d:73:0e:35:30:31:8c:23:d4:f2:d3:3a:
33:8b:db:84:48:8b:9f:84:68:0a:c9:84:b9:32:39:
ca:b5:df:fd:6b:10:42:df:37:89:bf:0f:9a:26:6d:
21:7c:72:b8:af:0a:19:4b:a0:65:8e:57:82:d3:80:
1e:fe:42:63:f6:a7:51:13:c4:e6:b5:3e:11:14:4b:
7d:09:43:62:9e:d0:9d:2d:0a:41:ee:7f:7f:c6:8e:
52:eb:40:45:b2:48:08:1f:39:7a:f8:b0:a9:59:1f:
53:8b:47:03:ae:05:77:0d:2d:4d:26:2e:4d:6e:38:
42:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:22:46:A7:12:E1:5E:D1:D1:73:AA:C6:17:81:AB:B1:07:EB:82:5A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS138997.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.173.0/24
181.214.33.0/24
181.214.75.0/24
181.214.185.0/24
181.214.250.0/24
181.215.127.0/24
181.215.136.0/24
181.215.148.0/24
181.215.154.0/24
181.215.190.0/24
181.215.239.0/24
185.173.27.0/24
194.53.142.0/24
Signature Algorithm: sha256WithRSAEncryption
97:dd:ac:af:80:5a:4f:7a:1d:b1:83:25:00:82:46:85:68:81:
cd:9a:ca:b0:cc:d6:43:b5:a6:01:7e:71:dc:3c:ae:dd:51:bc:
ec:7c:89:5e:61:b2:ec:6f:8a:06:0e:5c:3f:01:9c:0d:0f:41:
82:5e:39:fd:3c:af:26:21:d7:a3:1d:40:0a:c9:bb:d4:a3:e9:
48:8d:59:d5:4b:46:fd:60:5f:2c:c3:96:5a:f7:64:59:c8:ee:
78:65:f4:86:c7:76:57:d1:20:04:d1:dd:1b:5e:e6:3a:ad:9f:
fb:cd:ca:4e:52:88:19:93:f2:b9:13:86:60:c5:fa:1d:dd:95:
2f:01:7e:50:f2:1d:bc:9c:3b:30:a8:2e:f5:1e:81:d2:59:a6:
e3:e2:f8:f0:2e:bb:8b:ab:19:35:93:79:b0:ac:f9:77:f8:68:
1e:ce:78:f1:48:65:b1:e4:10:75:19:ac:b9:2a:ca:ae:ba:49:
5e:81:c3:a7:b6:1a:96:1a:f4:f5:42:fa:da:9d:35:18:0e:4a:
49:56:f8:45:47:8f:21:8e:ac:93:22:4a:6f:46:5e:54:e8:55:
b2:cc:03:6b:fc:7d:f1:ee:0d:aa:54:9f:f2:ea:08:d0:45:e3:
0e:ef:7e:12:f2:7e:36:54:28:71:0c:80:4a:b3:b5:f4:fc:70:
96:d8:84:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:04:23 2025 by rpki-client