Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS35916.roa
File: AS35916.roa (raw, json)
Hash identifier: dKAul8pULmUMWslPKjQsQIqRolgoay2TtGKk17EkxBY=
Subject key identifier: 42:D9:43:D9:F6:91:1C:09:05:D5:9A:AA:AD:DC:4B:32:E3:3E:4C:64
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7BD3318900818BE6E1BC3CA24BE809E672178DD4
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS35916.roa
Signing time: Wed 09 Jul 2025 00:00:10 +0000
ROA not before: Tue 08 Jul 2025 23:55:10 +0000
ROA not after: Wed 08 Jul 2026 00:00:10 +0000
asID: 35916
IP address blocks: 148.135.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:d3:31:89:00:81:8b:e6:e1:bc:3c:a2:4b:e8:09:e6:72:17:8d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 8 23:55:10 2025 GMT
Not After : Jul 8 00:00:10 2026 GMT
Subject: CN=42D943D9F6911C0905D59AAAADDC4B32E33E4C64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1e:ba:ac:dc:40:88:35:c1:fc:fa:e8:34:1d:
1e:b0:54:77:4f:d0:1c:5c:ed:e2:51:69:7a:4f:b1:
33:1e:b4:8a:84:fb:83:48:57:07:b3:27:ef:8e:65:
97:0c:6a:14:0d:f3:33:9c:94:cc:07:50:15:32:f4:
74:40:af:22:8c:35:8f:e0:bd:5a:d1:54:17:a1:ee:
9d:a8:92:1b:fa:ed:f0:a4:56:93:cd:ed:37:37:f0:
25:fd:42:90:fa:4a:79:c7:91:25:c4:6c:d4:c5:2e:
20:34:10:f3:a0:3d:5c:5e:84:c5:16:d8:9f:2b:48:
3c:67:c4:a9:0e:26:7f:1a:1f:84:d1:5b:ec:7d:91:
f9:e4:0a:dd:cb:37:48:e3:2d:df:ac:5c:13:26:10:
0e:66:8e:ac:3f:41:73:55:42:8e:f0:d8:4d:8e:36:
c5:47:8b:04:65:2f:33:c2:55:a6:df:f8:e1:e2:64:
21:37:89:99:fa:ed:9c:4d:29:f3:9e:8a:15:a3:cd:
53:cf:0a:73:b6:80:1b:98:1a:2b:4b:65:15:9e:df:
92:13:33:b5:06:85:78:10:97:ad:a5:d8:0d:94:bf:
1a:95:5e:ab:3c:7b:60:a1:9a:db:17:44:1f:d8:48:
07:75:d2:d6:c1:d6:be:87:76:10:25:90:06:29:ad:
e8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D9:43:D9:F6:91:1C:09:05:D5:9A:AA:AD:DC:4B:32:E3:3E:4C:64
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS35916.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.0.0/17
Signature Algorithm: sha256WithRSAEncryption
6c:ba:0a:36:25:50:4c:5f:28:e7:b2:d9:aa:66:32:fe:2f:74:
ef:72:24:4a:ed:40:01:1c:ce:83:37:17:06:9c:05:9f:34:a5:
35:58:52:73:e8:07:34:53:a9:76:00:f7:c0:af:c9:67:21:dc:
f5:fa:5f:d4:27:ca:a9:4d:67:88:4f:9d:47:63:a1:b4:02:c0:
c1:25:86:6f:93:b5:42:97:e0:6c:32:c0:fb:52:b4:37:ce:00:
a6:91:2b:8a:34:e4:c0:c9:e6:5f:a9:73:54:94:62:fd:e8:b1:
65:11:cf:e9:fc:91:5c:1f:df:5f:a3:41:d4:9e:8a:94:ac:ff:
4b:bf:db:45:d6:f2:17:ad:a3:60:9e:73:5a:e7:00:fb:c9:5c:
82:3d:92:9d:28:99:3f:59:c8:a9:bd:57:f4:37:f1:78:c6:14:
c2:28:61:7f:06:fe:0c:86:70:1e:07:5b:4e:31:f3:f9:01:c7:
ab:68:94:47:ff:8a:d3:b3:65:97:d2:bd:95:1d:b2:4b:cd:da:
42:5c:4f:8a:66:05:57:5c:6e:af:06:24:3c:d1:0f:1c:ae:c7:
fb:0b:39:ba:eb:4e:4e:e1:50:11:29:f7:d0:54:12:05:f8:03:
c8:4f:97:d3:80:26:43:4e:b7:5e:b8:d0:46:70:f1:de:a2:6a:
eb:ab:36:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 18:57:49 2025 by rpki-client