Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS139648.roa
File: AS139648.roa (raw, json)
Hash identifier: bseBsL5kVpxHN/K5GhonzDdpyydRhjnnOOHoLn6AzCc=
Subject key identifier: B4:77:25:25:2F:7D:B8:2C:7C:22:89:C6:3B:D2:CA:C9:59:11:B8:30
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4FFE79DB1D477990C167A28503936AC3863C8262
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS139648.roa
Signing time: Tue 12 May 2026 13:47:13 +0000
ROA not before: Tue 12 May 2026 13:42:13 +0000
ROA not after: Tue 11 May 2027 13:47:13 +0000
asID: 139648
IP address blocks: 2a13:9500:8d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:fe:79:db:1d:47:79:90:c1:67:a2:85:03:93:6a:c3:86:3c:82:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 12 13:42:13 2026 GMT
Not After : May 11 13:47:13 2027 GMT
Subject: CN=B47725252F7DB82C7C2289C63BD2CAC95911B830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:02:89:eb:42:56:6a:1a:54:ba:30:2f:ff:
62:97:60:c2:c3:dc:c1:1a:7e:e7:55:1e:4d:20:d9:
f1:fa:6e:92:6c:74:f0:d8:56:45:3c:c4:7f:01:6b:
40:26:7b:a6:bb:bf:34:53:b4:5b:24:5e:f9:c8:6e:
5f:60:7e:a8:16:1b:56:aa:ff:0e:8c:35:86:51:8a:
f9:23:ea:5f:67:e5:6b:72:96:f6:c2:98:c4:d6:cf:
27:41:97:c1:bb:c9:35:0a:c6:17:e5:cd:3e:eb:03:
0c:ef:cf:bd:c7:15:14:8f:3b:25:05:ea:f5:cd:5a:
94:65:8f:ac:02:cd:78:77:13:b2:bf:1b:0d:33:0a:
ad:56:b6:8e:b2:b2:33:a0:15:aa:dc:5f:85:46:9a:
31:12:68:e3:11:08:b6:28:05:64:a3:69:db:35:c2:
ef:a3:38:ce:7c:74:4e:9a:8b:04:99:01:b6:58:f5:
7d:f5:5c:3d:0c:a0:a7:ef:8b:57:19:63:5e:9d:16:
bb:5c:78:0d:8a:1e:ba:f8:c1:13:22:56:63:b3:5e:
da:99:d7:bb:0c:c2:ac:da:58:a5:ad:5a:e2:70:3d:
ee:ba:72:c2:9f:f1:f9:06:51:8f:98:1d:b6:1e:c4:
87:d8:9d:44:ac:a3:8c:75:ca:1d:e5:a1:19:d9:d5:
03:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:77:25:25:2F:7D:B8:2C:7C:22:89:C6:3B:D2:CA:C9:59:11:B8:30
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS139648.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:8d::/48
Signature Algorithm: sha256WithRSAEncryption
50:d6:83:5d:16:fd:c3:fa:4d:d3:e9:ed:f3:20:19:ec:43:51:
97:ef:9f:05:9a:c3:6f:74:05:a9:3a:e5:a9:e6:59:63:0e:b6:
46:00:dc:bf:02:cf:36:00:a5:a5:a5:c8:62:40:5d:4a:be:cc:
4e:82:9b:fb:d7:1b:5d:1f:9c:fc:27:95:53:f8:bf:b8:e7:0b:
96:43:4f:19:9e:d7:db:61:f8:f6:b0:82:4c:2f:06:0e:34:76:
b8:5c:0b:28:7f:8b:7a:3a:9b:06:8a:4f:7f:95:9a:f6:c7:43:
ed:49:65:2b:26:a6:40:7b:21:46:fc:d7:ca:5f:e9:67:40:b6:
86:73:11:88:33:85:15:b4:19:f9:59:8a:51:ba:53:40:26:b1:
bb:1c:7e:56:66:6b:6c:f6:d0:48:0d:7d:b1:25:7e:4e:4d:6b:
60:f6:2a:f2:3b:0c:f8:a3:e2:a7:fd:53:b4:2b:26:eb:8f:03:
78:83:73:29:bc:73:8c:02:98:1c:47:81:92:b6:e5:72:a1:68:
85:8d:1d:83:64:a8:fd:2d:25:4b:9f:bf:97:dc:39:c0:c8:e7:
7b:d4:6a:e6:be:91:89:4f:5b:40:d3:67:09:38:8c:a4:45:ff:
0f:f8:56:78:72:75:af:5a:ac:46:4c:42:9c:c2:9e:0f:5a:32:
28:c0:aa:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:10:13 2026 by rpki-client