Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS138195.roa
File: AS138195.roa (raw, json)
Hash identifier: /I52UJbkb0nDoYwITGGSSPXY1rgJ+kctnz8wQdL2aAA=
Subject key identifier: 68:80:CF:AC:E3:C5:A0:66:57:BB:9B:D1:C9:8E:32:88:D5:45:FD:A1
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 38D5006C72984921F82DCD4461707CEDF76C0CBA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS138195.roa
Signing time: Sat 09 May 2026 02:59:01 +0000
ROA not before: Sat 09 May 2026 02:54:01 +0000
ROA not after: Sat 08 May 2027 02:59:01 +0000
asID: 138195
IP address blocks: 178.83.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:d5:00:6c:72:98:49:21:f8:2d:cd:44:61:70:7c:ed:f7:6c:0c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 9 02:54:01 2026 GMT
Not After : May 8 02:59:01 2027 GMT
Subject: CN=6880CFACE3C5A06657BB9BD1C98E3288D545FDA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ad:14:a6:60:78:43:41:2b:45:7e:15:9c:d4:
26:61:dc:33:8d:07:6b:52:cb:35:ca:37:65:76:62:
1c:43:05:37:60:6a:7c:32:58:45:d4:d2:c0:d6:99:
b7:07:a1:ad:4a:5e:0a:9c:af:6b:68:f4:c2:39:fe:
dc:0f:bf:f0:bf:a5:ea:76:6a:cb:f0:54:01:21:40:
58:fb:f4:68:00:2b:19:73:1d:18:56:56:0c:25:8b:
8d:a1:1b:69:bb:17:ff:2b:f1:3d:cd:7d:ab:d4:b4:
5e:ac:63:57:0d:95:8e:15:5b:5b:a0:0f:d6:2a:8a:
c3:3b:79:13:af:89:74:26:40:d8:be:b7:d4:e6:43:
72:e4:fe:12:bc:18:68:50:99:b8:df:08:59:37:cd:
ad:57:f2:bf:5d:71:ef:cf:16:fe:61:9b:7e:b6:41:
61:59:ae:b0:b8:8f:4b:0b:36:a0:58:11:f6:b4:9b:
6c:f7:3a:d5:a2:00:d7:39:f7:5c:5a:2c:64:d1:bb:
68:ba:1c:53:b9:85:12:00:cd:d0:05:da:fc:0f:b2:
be:6a:f7:09:ff:fb:df:92:46:e5:a1:a8:7b:df:ac:
42:f7:dd:b4:cb:5f:9f:50:f0:a5:34:57:9f:40:83:
e5:27:f5:91:4d:76:48:32:23:74:5b:5a:e0:71:76:
f4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:80:CF:AC:E3:C5:A0:66:57:BB:9B:D1:C9:8E:32:88:D5:45:FD:A1
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS138195.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.48.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:bc:b5:cd:ef:4c:6f:30:9c:fe:42:61:b9:3b:8b:02:c6:a6:
b3:87:1d:6d:58:e1:9d:a7:bc:a2:17:0f:0c:41:64:00:23:07:
ee:b0:92:8d:1a:01:ab:c5:17:86:1a:70:5d:3a:dd:ae:a7:ea:
56:9c:0c:93:ba:bf:a7:a7:2c:55:3d:96:fc:91:d1:12:bd:ce:
c2:95:8e:74:7b:54:fb:de:5b:48:21:98:e5:16:18:22:11:6b:
1e:c5:c2:d5:35:0d:e2:2d:82:35:d6:a0:37:dd:1f:82:1f:82:
80:33:24:71:4f:4f:62:7a:93:06:d0:0f:f3:f4:80:ba:bc:18:
4d:d8:73:19:d3:e2:fd:55:b5:5f:59:08:5b:ad:e3:19:43:e4:
8a:78:cd:ec:df:ac:40:7e:8b:86:eb:17:85:96:6a:87:46:27:
c1:fc:c6:dd:9a:c9:d3:c6:56:22:50:55:da:54:5a:3b:71:a3:
34:b9:e8:ec:22:7e:1f:b4:dc:1e:f1:46:35:20:13:31:ca:03:
ae:8e:88:df:8f:58:45:7a:15:c5:0e:2f:e5:a7:74:6e:2a:b4:
48:7e:53:9a:0f:ef:ad:ac:b4:c8:e2:d0:7d:4b:d8:b0:a3:b0:
45:f1:6b:b0:e4:16:d8:19:8d:e0:ac:1c:5e:17:ce:dc:03:1b:
6f:5e:f5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:10:10 2026 by rpki-client