Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS139331.roa
File: AS139331.roa (raw, json)
Hash identifier: Q66IDn+0tpR64Cg25uHcvNSP1ePFuLW1qfGtUbN/85E=
Subject key identifier: 26:B2:FA:F3:B7:49:DC:B1:30:1C:BF:F0:EE:00:32:8F:36:C1:D0:62
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7C923F589A63504E862EC3A5F3D2A64C0F4B5063
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS139331.roa
Signing time: Tue 27 Oct 2026 07:51:23 +0000
ROA not before: Tue 27 Oct 2026 07:46:23 +0000
ROA not after: Tue 26 Oct 2027 07:51:23 +0000
asID: 139331
IP address blocks: 2a13:9500:1f9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:92:3f:58:9a:63:50:4e:86:2e:c3:a5:f3:d2:a6:4c:0f:4b:50:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 27 07:46:23 2026 GMT
Not After : Oct 26 07:51:23 2027 GMT
Subject: CN=26B2FAF3B749DCB1301CBFF0EE00328F36C1D062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:65:b4:34:80:fa:18:fb:c2:44:d9:ae:b2:87:
01:b0:cb:15:e4:3b:27:69:d4:ed:a0:41:ae:e5:39:
fe:1b:74:ae:e4:97:1d:c3:63:5d:ad:ca:56:a8:3a:
48:96:ef:ff:51:01:c7:06:71:b5:1e:16:77:9c:8f:
3e:64:81:e1:ae:fd:f6:a0:86:27:f2:eb:eb:70:a1:
b4:f9:b0:47:95:d1:8a:44:8c:3a:55:ed:ac:d3:45:
66:27:98:55:51:6d:85:cc:bf:04:cd:c2:aa:d5:29:
6d:7e:ee:df:6a:10:39:be:6c:25:bb:75:72:ac:33:
7c:3d:0c:b2:9f:26:5d:95:e9:a7:d0:d7:0e:98:9f:
f5:37:96:1c:4a:d3:3d:fb:4a:15:85:89:9a:c5:fc:
8d:93:20:58:8a:2e:04:7e:49:1f:6f:2b:64:1f:f3:
fb:6f:a0:e6:58:2c:27:e8:8a:12:91:88:55:6a:ad:
f4:e8:13:1e:34:d5:ef:3a:87:f3:ba:70:a2:9f:be:
dc:49:a7:ba:ae:89:29:73:36:80:c3:0e:3a:79:6d:
dd:d6:b2:37:a9:14:a3:d0:50:05:e4:56:ee:c4:02:
c4:df:74:26:0a:58:30:14:34:48:3f:90:f6:27:82:
7d:06:d1:e6:cc:6d:6d:f9:fc:91:73:8c:2c:06:0c:
68:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B2:FA:F3:B7:49:DC:B1:30:1C:BF:F0:EE:00:32:8F:36:C1:D0:62
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS139331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1f9::/48
Signature Algorithm: sha256WithRSAEncryption
28:ce:23:63:e4:a5:e9:0f:ef:3c:94:a1:32:84:dd:7e:1d:51:
d6:22:f3:e1:4f:6e:0e:f1:48:05:80:9e:4f:af:cb:8c:cd:20:
63:0f:93:a1:a9:bc:9a:b2:fc:65:68:71:72:14:95:c9:74:d9:
95:99:11:74:76:3f:11:6f:d5:af:e5:ef:76:d0:e1:87:4f:80:
f8:1b:2c:c8:db:ce:1c:27:d7:3d:31:5a:84:b3:bc:8a:68:70:
84:0f:d7:6c:24:e2:78:69:b5:c0:41:87:37:ad:12:07:88:b8:
f5:99:16:d2:78:bb:cf:46:f1:13:5d:66:5a:46:67:7d:a1:2c:
b0:d3:dc:1a:2c:08:b6:e4:e9:8b:43:32:9a:78:31:7a:58:8c:
f6:0e:3e:96:96:ab:cf:57:ec:4c:21:d3:0f:02:5b:5b:ce:5f:
f3:43:19:fa:e7:9f:89:71:0c:59:ad:0e:68:2f:ad:86:70:01:
64:09:14:a0:40:52:22:0b:4f:7d:e5:8a:3b:8b:3f:1a:43:af:
fb:77:49:30:d1:0f:7c:1d:09:b1:d0:1c:f9:d1:8b:3b:a8:3e:
5d:c0:f0:0a:ba:9a:a7:ad:bb:d6:0e:8f:58:20:80:18:0b:e8:
d9:a1:71:c1:c6:76:df:8c:84:2f:20:42:fc:95:33:d2:85:00:
7c:1b:be:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:29:41 2026 by rpki-client