Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS139989.roa
File: AS139989.roa (raw, json)
Hash identifier: pFavnVcUBBXaHVNbYmp26Y/IzcB0DGlM1qLRLUFlTKw=
Subject key identifier: 91:6C:84:7D:77:61:65:B0:D9:63:33:E7:71:F4:84:29:92:D1:BD:B5
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 3465701256EF37FA6C08312A9A09F78307A88769
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS139989.roa
Signing time: Fri 06 Nov 2026 11:49:40 +0000
ROA not before: Fri 06 Nov 2026 11:44:40 +0000
ROA not after: Fri 05 Nov 2027 11:49:40 +0000
asID: 139989
IP address blocks: 141.11.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:65:70:12:56:ef:37:fa:6c:08:31:2a:9a:09:f7:83:07:a8:87:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 6 11:44:40 2026 GMT
Not After : Nov 5 11:49:40 2027 GMT
Subject: CN=916C847D776165B0D96333E771F4842992D1BDB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a3:10:e8:2e:d3:7c:06:32:92:e8:a0:1c:a3:
30:7d:b5:23:62:74:de:06:f5:c7:26:a2:00:76:52:
de:22:99:e7:d7:99:9c:58:0d:4b:2d:c4:78:45:55:
1b:34:11:89:10:98:72:e7:b0:6a:e1:43:20:4f:35:
5a:8d:c0:be:bd:ca:d0:2e:cd:5d:27:3b:16:92:4d:
d0:39:09:0c:dc:36:9b:ae:e3:d8:a7:43:eb:32:1b:
84:e0:3a:82:c3:ca:ba:b6:23:86:ff:6a:39:02:5d:
cd:44:59:6a:e8:a6:dd:0c:17:bc:5d:c3:7b:9e:35:
3a:0b:63:f0:d7:fa:04:4e:cf:84:13:3e:0c:94:3f:
f0:92:57:2e:e3:33:ef:50:9e:28:1b:a3:65:81:5e:
b5:90:55:65:f0:80:5a:0e:70:67:81:6d:ad:df:a2:
5c:16:95:09:2c:17:23:30:d6:4b:1c:28:c4:79:2a:
ca:98:22:e8:ef:22:3b:fb:c0:f0:7c:29:45:47:b4:
55:d8:26:fa:8e:ac:e8:0d:30:09:7c:3b:ff:3d:5c:
47:01:ee:63:90:09:83:7c:80:a3:38:cd:a5:77:12:
2a:63:3d:d4:00:49:c9:58:8a:1d:15:6a:8a:1f:1c:
cb:e1:8d:08:68:88:35:45:9d:c3:cb:6b:9c:b6:cf:
41:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6C:84:7D:77:61:65:B0:D9:63:33:E7:71:F4:84:29:92:D1:BD:B5
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS139989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.241.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:ca:82:56:32:e0:e9:72:9c:31:ec:69:86:22:59:c5:a5:50:
aa:a0:8e:93:48:bf:ea:5a:2f:03:81:75:31:2f:72:76:f9:c1:
5f:58:cd:e9:9b:82:08:92:64:44:f2:b5:22:72:b9:dc:80:d6:
68:8c:c6:44:88:27:50:ab:43:e5:96:a2:b5:3c:63:9a:12:cb:
03:bc:cf:5b:43:b5:7c:c6:a3:8a:dd:b4:4c:7f:12:69:b7:6c:
ae:72:09:20:52:f1:85:bd:37:da:3a:fc:91:32:67:15:8f:20:
eb:04:cb:56:f5:bb:dc:bd:ae:58:03:28:86:72:b3:b8:8c:4f:
a5:b0:4b:21:9a:3a:33:d0:a0:ee:4f:8e:8c:0b:c6:79:27:1a:
89:a1:4b:99:51:87:b4:ca:9e:19:1c:16:59:ae:66:a0:97:82:
38:0d:d7:68:e2:0e:ce:1f:d6:13:67:cf:c2:d5:e9:a5:6d:c1:
2d:d3:b9:b2:ae:10:86:f6:d6:82:98:78:b6:ad:76:98:45:72:
3e:0e:5c:63:ec:42:cf:5f:03:ac:07:de:6b:e6:55:6d:a8:36:
3b:26:25:f0:bd:56:e9:66:43:f7:14:62:22:75:01:77:1d:18:
ef:5b:aa:ff:ea:76:3a:6b:99:c5:71:74:63:74:b8:21:f3:d6:
5a:02:45:57
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUNGVwElbvN/psCDEqmgn3gweoh2kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjExMDYxMTQ0NDBaFw0yNzExMDUxMTQ5NDBaMDMxMTAvBgNV
BAMTKDkxNkM4NDdENzc2MTY1QjBEOTYzMzNFNzcxRjQ4NDI5OTJEMUJEQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNoxDoLtN8BjKS6KAcozB9tSNi
dN4G9ccmogB2Ut4imefXmZxYDUstxHhFVRs0EYkQmHLnsGrhQyBPNVqNwL69ytAu
zV0nOxaSTdA5CQzcNpuu49inQ+syG4TgOoLDyrq2I4b/ajkCXc1EWWropt0MF7xd
w3ueNToLY/DX+gROz4QTPgyUP/CSVy7jM+9Qnigbo2WBXrWQVWXwgFoOcGeBba3f
olwWlQksFyMw1kscKMR5KsqYIujvIjv7wPB8KUVHtFXYJvqOrOgNMAl8O/89XEcB
7mOQCYN8gKM4zaV3EipjPdQASclYih0VaoofHMvhjQhoiDVFncPLa5y2z0G3AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUkWyEfXdhZbDZYzPncfSEKZLRvbUwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMTM5OTg5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQvx
MA0GCSqGSIb3DQEBCwUAA4IBAQBvyoJWMuDpcpwx7GmGIlnFpVCqoI6TSL/qWi8D
gXUxL3J2+cFfWM3pm4IIkmRE8rUicrncgNZojMZEiCdQq0PllqK1PGOaEssDvM9b
Q7V8xqOK3bRMfxJpt2yucgkgUvGFvTfaOvyRMmcVjyDrBMtW9bvcva5YAyiGcrO4
jE+lsEshmjoz0KDuT46MC8Z5JxqJoUuZUYe0yp4ZHBZZrmagl4I4Dddo4g7OH9YT
Z8/C1emlbcEt07myrhCG9taCmHi2rXaYRXI+Dlxj7ELPXwOsB95r5lVtqDY7JiXw
vVbpZkP3FGIidQF3HRjvW6r/6nY6a5nFcXRjdLgh89ZaAkVX
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:40:45 2026 by rpki-client