Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS138997.roa
File: AS138997.roa (raw, json)
Hash identifier: KWVypmA7iwXg+rTJTNGAAtI8RTYVh0wwcdvMKOto6zY=
Subject key identifier: D3:A5:BB:96:A0:FF:1B:87:7F:0B:F5:35:1F:CF:16:88:B2:18:A0:35
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2F77DF3F6474A6EAE01C61DFF25EBE761F134657
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS138997.roa
Signing time: Wed 17 Jun 2026 07:33:03 +0000
ROA not before: Wed 17 Jun 2026 07:28:03 +0000
ROA not after: Wed 16 Jun 2027 07:33:03 +0000
asID: 138997
IP address blocks: 82.22.60.0/24 maxlen: 24
2a13:9500:ad::/48 maxlen: 48
2a13:9500:11d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:77:df:3f:64:74:a6:ea:e0:1c:61:df:f2:5e:be:76:1f:13:46:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 17 07:28:03 2026 GMT
Not After : Jun 16 07:33:03 2027 GMT
Subject: CN=D3A5BB96A0FF1B877F0BF5351FCF1688B218A035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:00:e9:bf:4c:e5:4f:5a:ca:77:2c:00:a9:
49:96:27:d3:00:83:b0:f6:d2:19:01:82:85:cb:30:
44:68:01:f4:8a:5e:9d:52:98:b8:92:d5:1a:54:f9:
01:f5:cf:dc:5d:97:34:b5:84:7c:77:85:5c:f0:2a:
1a:cb:68:bc:f4:2b:e7:de:b7:27:14:d2:b5:f3:0e:
e1:e5:da:1b:9b:fc:b6:4e:1c:78:68:e0:ac:2b:5e:
31:1a:e7:21:2f:b5:2a:4b:34:56:11:a8:53:09:b4:
7c:56:a2:46:ba:3b:dc:f8:cf:46:b6:e5:d1:2b:e0:
3c:85:23:83:84:41:20:c8:24:9b:67:76:3e:8f:7c:
d9:ef:96:98:a1:8f:ad:65:37:e8:e5:0e:36:d5:3a:
5e:99:4d:72:13:56:59:bd:1c:81:ff:f9:1d:73:04:
3e:6c:4b:df:aa:26:85:cf:ee:f6:77:5a:12:02:eb:
13:fb:44:31:6c:2a:31:e0:44:75:c1:70:d9:1b:42:
df:7d:c5:78:3b:b9:f3:75:6f:73:cf:25:78:61:94:
a8:5f:85:a1:96:06:d8:b1:5d:6f:20:85:e8:b7:94:
7b:09:fb:dc:2c:17:62:df:f4:01:7a:df:95:03:b4:
69:3a:0f:da:d0:1b:f2:b3:ed:35:93:ea:74:b6:db:
67:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A5:BB:96:A0:FF:1B:87:7F:0B:F5:35:1F:CF:16:88:B2:18:A0:35
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS138997.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.60.0/24
IPv6:
2a13:9500:ad::/48
2a13:9500:11d::/48
Signature Algorithm: sha256WithRSAEncryption
03:45:dc:d2:22:fe:57:38:f6:2c:b0:74:24:65:13:3b:74:2e:
f8:cf:19:3c:91:2f:57:69:ff:dc:70:01:52:31:fd:0b:98:5f:
b1:a7:4b:0f:ec:15:74:72:3d:0f:3a:02:3d:96:3a:74:56:ec:
b0:f5:1c:fd:a3:a0:0c:cd:b4:f6:45:fd:ad:74:ef:a6:56:dc:
d4:98:68:cb:62:23:fe:53:7d:41:4e:58:13:dc:97:a1:4c:10:
31:bc:25:ea:68:d2:57:05:c0:20:e5:82:15:18:46:f7:e7:ef:
01:40:50:34:47:15:83:ca:b9:5b:1b:3e:d0:c0:44:b4:c0:de:
4c:fd:ae:f1:7e:de:c3:07:a1:88:b0:f2:70:74:58:1b:6c:02:
cb:f8:44:b3:10:e3:80:a6:64:59:eb:26:f8:a9:82:81:46:d0:
55:85:2f:c0:e5:62:9f:2c:4d:e9:57:3c:f8:aa:7e:82:98:7e:
29:95:06:43:a1:a5:7a:9f:13:a8:87:99:21:73:9e:42:4e:c4:
22:ac:c6:f4:fa:a2:ab:9c:a4:8b:89:26:06:58:bc:b8:b5:dd:
82:1f:9b:3b:f6:f5:30:e8:83:0d:3b:b1:2a:bb:a0:15:4f:52:
62:fd:81:e5:0c:81:12:50:db:31:43:a4:5d:38:1e:ed:a8:7c:
44:85:09:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:21:32 2026 by rpki-client