Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS139989.roa
File: AS139989.roa (raw, json)
Hash identifier: kR79j3nQgs4stCMUkrSO/SWdoteJWDX/rmT2UhbEG7I=
Subject key identifier: 47:82:D9:D5:E0:CF:C0:49:2F:AD:0E:9F:FB:21:27:33:E9:A2:96:EB
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 64FE124426E6893A1452C1790FEB7BD66D481852
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS139989.roa
Signing time: Sun 14 Sep 2025 04:56:34 +0000
ROA not before: Sun 14 Sep 2025 04:51:34 +0000
ROA not after: Sun 13 Sep 2026 04:56:34 +0000
asID: 139989
IP address blocks: 45.158.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:fe:12:44:26:e6:89:3a:14:52:c1:79:0f:eb:7b:d6:6d:48:18:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Sep 14 04:51:34 2025 GMT
Not After : Sep 13 04:56:34 2026 GMT
Subject: CN=4782D9D5E0CFC0492FAD0E9FFB212733E9A296EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:69:25:5a:85:eb:6f:10:cc:2f:14:fe:71:48:
b2:27:09:2a:61:55:ba:c0:74:11:11:b6:db:55:29:
8f:d4:46:da:ff:6b:29:5c:ec:27:66:fe:31:92:2d:
37:bc:86:ce:0f:95:83:49:95:bc:c9:bc:10:ab:1e:
4e:6d:a8:91:54:83:14:54:6f:8e:47:06:01:d6:f3:
2c:dd:b4:d9:6a:09:c5:8f:29:f9:06:13:96:ff:b6:
cf:39:d1:1f:62:e2:56:f4:5c:9e:3e:28:63:da:aa:
0f:d3:cf:72:1c:6e:bc:dd:c2:b0:80:72:de:b3:48:
db:4e:6e:c2:fc:79:96:ad:b5:18:a8:3a:da:a2:17:
d7:9f:c3:5a:8b:b5:43:e3:c2:4e:c4:d8:31:1f:ce:
64:4b:22:02:a7:40:bc:18:3a:74:0e:96:df:36:7c:
49:86:bb:30:73:13:21:ba:78:ae:4c:9e:5c:b8:79:
6f:7c:7f:f9:1f:ff:b3:73:f9:6d:64:70:c4:a8:ca:
ed:06:fa:ed:4c:b6:f1:69:00:25:1a:04:b3:e1:38:
26:53:05:6c:91:a5:fc:11:65:51:55:00:51:8b:83:
91:4f:9a:6a:27:90:1c:33:80:57:68:69:cd:29:21:
84:ae:29:48:14:46:87:1a:22:ef:a2:e3:32:b0:7f:
c8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:82:D9:D5:E0:CF:C0:49:2F:AD:0E:9F:FB:21:27:33:E9:A2:96:EB
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS139989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.10.0/24
Signature Algorithm: sha256WithRSAEncryption
06:d7:31:45:4c:67:58:c3:0c:fa:5a:df:18:f8:09:4f:70:83:
c8:c1:d0:7e:d3:ec:63:91:b2:5c:5d:3b:fe:a8:f6:f0:4a:b3:
20:9e:09:aa:5c:95:7d:ae:25:8e:d8:60:73:e9:e3:fb:cc:ce:
4a:fe:06:ce:21:f7:44:72:d0:83:6d:0f:f9:55:a1:17:4b:23:
8f:5f:9d:08:30:02:56:56:60:35:66:d4:20:e6:7f:0b:99:ad:
62:eb:41:13:0d:15:d9:94:e1:f7:4b:a2:5c:60:22:70:39:ba:
94:ed:48:96:57:90:3d:b7:62:09:7b:84:b1:93:b4:2a:4c:ae:
46:43:a4:e7:4c:fe:a4:11:6b:84:05:7f:6c:0b:43:ff:ad:4b:
59:0e:1b:9f:78:88:42:34:1e:d2:13:3f:b1:62:21:89:ab:53:
ad:c2:a1:55:2d:f1:ec:10:4b:17:f8:78:4e:6e:c6:d3:f0:aa:
d1:d7:8a:4f:79:54:98:37:90:16:d7:26:bb:ab:63:0b:6e:47:
8d:85:cd:94:24:0b:27:a8:54:47:1d:5e:e5:73:9b:a1:95:ca:
5c:e2:7e:19:ab:e1:17:e9:e9:0b:83:14:c0:7f:0d:bc:5e:f1:
0a:2c:9b:03:e6:10:de:5f:8a:3c:9f:4b:ca:55:e9:f2:6e:f1:
c0:15:78:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:18:56 2025 by rpki-client