Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS139648.roa
File: AS139648.roa (raw, json)
Hash identifier: p2Q5RqerjuY5QiDD8A2uq+fMrMGUXZsWBVxNfziDzFc=
Subject key identifier: F0:45:12:FD:C2:38:B4:3C:E6:60:9D:12:89:74:9F:B1:CD:B8:01:91
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 4D62ACD3F44E10C0074C5651E48CA0CA2A4FCCB3
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS139648.roa
Signing time: Fri 27 Jun 2025 00:54:11 +0000
ROA not before: Fri 27 Jun 2025 00:49:11 +0000
ROA not after: Fri 26 Jun 2026 00:54:11 +0000
asID: 139648
IP address blocks: 141.11.194.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:62:ac:d3:f4:4e:10:c0:07:4c:56:51:e4:8c:a0:ca:2a:4f:cc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 27 00:49:11 2025 GMT
Not After : Jun 26 00:54:11 2026 GMT
Subject: CN=F04512FDC238B43CE6609D1289749FB1CDB80191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:2b:d5:f7:92:c1:a9:e6:6c:6c:4a:b2:f1:
37:3b:cc:04:f4:99:6a:d9:0f:25:f2:41:8f:c3:38:
00:45:2c:38:d3:48:1f:8f:52:c5:04:2d:65:de:4e:
4e:bf:24:0c:80:36:7e:9a:29:98:0b:6a:a3:75:7b:
3c:74:46:6c:81:c1:fa:df:62:42:f5:6b:2b:e6:b3:
1b:0d:07:a8:dd:e3:23:2c:e9:80:94:9f:b1:62:81:
de:8d:8b:31:c7:9b:6a:09:b8:ff:32:65:c1:e4:15:
31:7b:6b:d1:22:e7:24:ef:77:26:60:82:9c:92:2d:
76:29:d1:a6:f1:9a:4a:91:0f:88:e7:ab:96:13:e3:
94:cd:49:1e:39:50:96:e2:45:84:ca:9b:26:46:9d:
9d:50:e9:36:fd:e5:61:17:13:9a:e4:0b:32:a6:13:
74:24:70:36:d6:ea:10:1a:fd:b8:31:43:ee:d7:4b:
5e:ac:0b:fe:25:9a:c9:e7:1a:78:40:e6:27:be:e0:
d3:d9:e0:31:01:ed:99:51:c9:92:46:b4:81:9c:88:
3a:89:d9:ac:02:3a:44:45:ce:de:c3:a3:e9:0c:19:
60:38:43:63:c3:e8:3c:02:fe:32:53:5e:11:ba:17:
66:a9:f1:98:52:80:a2:0c:88:4e:bd:32:ce:cb:35:
f8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:45:12:FD:C2:38:B4:3C:E6:60:9D:12:89:74:9F:B1:CD:B8:01:91
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS139648.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.194.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:55:12:ee:96:d5:3a:f0:df:38:28:88:6d:dc:8a:04:20:ff:
7c:fd:eb:64:42:40:95:3b:5f:5a:36:81:e5:74:d5:07:2e:1d:
3c:ef:06:7d:58:16:c0:37:6a:71:0a:07:4a:e5:f6:ea:02:21:
d1:df:f7:4c:1f:1d:be:85:62:ae:af:db:d3:63:87:e1:84:ee:
e2:14:30:a2:3a:ad:f7:d6:43:1d:3b:21:1b:f7:99:02:fd:82:
c9:9b:be:59:2d:2f:29:68:d3:16:50:6f:7c:95:77:1e:f7:e9:
45:85:cc:55:22:53:f1:30:ff:54:d5:75:5c:13:d2:c9:52:58:
a5:ab:d1:8d:c3:a0:c8:9f:25:a9:90:1c:38:b9:ca:ef:9e:29:
ca:43:5a:89:f3:e7:83:a0:a3:4d:40:7e:b8:08:80:6c:94:41:
f2:cd:36:b9:6e:7b:51:08:49:e7:66:3e:eb:6f:02:c0:24:af:
d9:b2:f2:08:24:e7:55:19:a4:32:cf:d3:a5:ad:95:43:8e:e5:
17:1d:cf:66:aa:1b:88:2a:ea:3e:67:cc:31:6a:11:d3:5e:c2:
16:06:f5:a9:90:13:da:59:7a:41:14:a4:59:c5:ad:67:f8:b5:
dc:a6:d7:2f:0c:b3:c8:97:78:2a:5a:28:7c:18:b8:97:12:73:
a2:32:96:da
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUTWKs0/ROEMAHTFZR5IygyipPzLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNTA2MjcwMDQ5MTFaFw0yNjA2MjYwMDU0MTFaMDMxMTAvBgNV
BAMTKEYwNDUxMkZEQzIzOEI0M0NFNjYwOUQxMjg5NzQ5RkIxQ0RCODAxOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3PivV95LBqeZsbEqy8Tc7zAT0
mWrZDyXyQY/DOABFLDjTSB+PUsUELWXeTk6/JAyANn6aKZgLaqN1ezx0RmyBwfrf
YkL1ayvmsxsNB6jd4yMs6YCUn7Figd6NizHHm2oJuP8yZcHkFTF7a9Ei5yTvdyZg
gpySLXYp0abxmkqRD4jnq5YT45TNSR45UJbiRYTKmyZGnZ1Q6Tb95WEXE5rkCzKm
E3QkcDbW6hAa/bgxQ+7XS16sC/4lmsnnGnhA5ie+4NPZ4DEB7ZlRyZJGtIGciDqJ
2awCOkRFzt7Do+kMGWA4Q2PD6DwC/jJTXhG6F2ap8ZhSgKIMiE69Ms7LNfgTAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU8EUS/cI4tDzmYJ0SiXSfsc24AZEwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMTM5NjQ4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjQvC
MA0GCSqGSIb3DQEBCwUAA4IBAQCeVRLultU68N84KIht3IoEIP98/etkQkCVO19a
NoHldNUHLh087wZ9WBbAN2pxCgdK5fbqAiHR3/dMHx2+hWKur9vTY4fhhO7iFDCi
Oq331kMdOyEb95kC/YLJm75ZLS8paNMWUG98lXce9+lFhcxVIlPxMP9U1XVcE9LJ
Ulilq9GNw6DInyWpkBw4ucrvninKQ1qJ8+eDoKNNQH64CIBslEHyzTa5bntRCEnn
Zj7rbwLAJK/ZsvIIJOdVGaQyz9OlrZVDjuUXHc9mqhuIKuo+Z8wxahHTXsIWBvWp
kBPaWXpBFKRZxa1n+LXcptcvDLPIl3gqWih8GLiXEnOiMpba
-----END CERTIFICATE-----
Generated at Sun Jun 29 00:47:48 2025 by rpki-client