Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS138077.roa
File: AS138077.roa (raw, json)
Hash identifier: hXHTd8lqdEU2OnVfLzGQvt7Gx6cUqS+6kqLG/IupkQE=
Subject key identifier: C5:0D:E7:F2:51:01:AD:62:D0:2E:90:A2:FB:1B:1D:81:36:75:57:7D
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 7ABE9C07FAEA851D0D3B6C4C941BA0A1BC42E338
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS138077.roa
Signing time: Fri 06 Nov 2026 10:04:43 +0000
ROA not before: Fri 06 Nov 2026 09:59:43 +0000
ROA not after: Fri 05 Nov 2027 10:04:43 +0000
asID: 138077
IP address blocks: 141.11.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 08:26:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:be:9c:07:fa:ea:85:1d:0d:3b:6c:4c:94:1b:a0:a1:bc:42:e3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 6 09:59:43 2026 GMT
Not After : Nov 5 10:04:43 2027 GMT
Subject: CN=C50DE7F25101AD62D02E90A2FB1B1D813675577D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:54:db:39:78:73:34:71:cd:2b:aa:05:e4:b6:
33:fa:8e:6a:8b:77:3c:a3:43:6d:72:e9:74:cd:ba:
de:8f:89:8e:6e:b6:d7:9e:61:16:4b:c4:91:46:9d:
67:40:42:2f:4f:36:6d:b7:c9:34:3e:90:62:6a:f7:
11:f1:92:4b:7a:8d:36:c6:b9:3d:48:93:96:58:b0:
54:3e:0d:ad:e6:14:50:9f:0d:b6:50:32:ef:70:36:
6b:f2:f1:ec:e8:fb:63:00:0d:1b:6c:a8:4e:5b:69:
74:6d:a4:35:04:37:ea:31:ec:b8:7f:0e:b4:92:e7:
ff:66:e6:c8:24:89:6d:0a:f6:e3:62:b0:c3:23:05:
a0:93:66:7c:e3:a4:a6:df:f1:03:61:af:b6:51:ef:
bf:c1:6b:9d:9e:00:aa:e5:61:d0:fd:f6:f6:4d:03:
03:58:24:a1:63:d8:a4:14:19:7d:f3:a7:63:b5:ba:
f3:f3:2b:9e:25:2e:a3:d6:e9:63:e2:9b:35:44:d2:
73:dc:79:c7:1a:c9:6f:76:4a:e6:fb:cf:01:29:31:
17:b8:18:0c:40:29:cb:0a:f8:59:0b:c1:93:31:51:
a8:6f:c9:a8:f4:3d:f3:d0:37:9b:01:65:e3:a0:55:
30:f0:06:41:29:1f:73:29:56:03:cc:18:28:bb:04:
dd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0D:E7:F2:51:01:AD:62:D0:2E:90:A2:FB:1B:1D:81:36:75:57:7D
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS138077.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.89.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:f4:e9:60:5c:78:09:c0:f9:8a:6a:88:de:95:a0:f0:ed:02:
ae:34:8c:b6:e4:5a:60:f8:63:44:af:f4:40:5c:61:d6:2d:e8:
28:95:18:25:46:6e:cb:fc:79:a0:04:47:20:51:74:9d:e1:84:
39:ae:64:8e:ea:0f:47:4f:08:f6:85:e9:d9:f1:9f:55:dd:9a:
c3:13:f9:f9:df:94:50:eb:89:23:f6:81:00:8a:69:fe:7c:2a:
36:ea:22:a3:4e:b8:8c:a2:32:cd:de:58:49:fa:fb:3f:0f:5e:
ee:35:4f:e7:77:83:9f:bd:47:30:2a:22:e5:50:3d:2f:83:0d:
12:a9:03:1c:d5:c5:8a:b5:ee:29:bd:19:eb:a5:44:27:2a:f7:
57:86:29:eb:2e:b7:51:70:14:a3:0e:49:91:15:6e:69:b5:ff:
44:31:27:5f:4c:72:a8:30:3f:04:c9:df:9b:e8:31:16:de:83:
94:7c:e9:df:26:68:a8:33:f3:98:ba:56:24:2f:db:ac:17:2f:
07:11:90:7f:68:e6:03:02:ee:1e:09:6e:04:9a:b3:42:e1:ba:
c8:7a:b3:7e:1d:c0:32:7c:14:a6:a6:54:d0:5c:76:e0:97:7e:
c0:00:64:34:d1:4e:06:be:e0:12:23:6a:fa:3d:74:89:5b:1a:
bb:45:90:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:29:55 2026 by rpki-client