Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393942.roa
File: AS393942.roa (raw, json)
Hash identifier: XGLQ6dOlE+KV9jZfGC4cHX4JAJAQGDRx0qJVEZ/LvfU=
Subject key identifier: 75:04:AA:1C:4E:EA:A6:EE:EE:D2:50:F4:5D:21:F1:80:4D:12:9E:77
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 53ADE32D37791E0B903DBE66913B0D31832697A3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393942.roa
Signing time: Sun 06 Jul 2025 00:00:26 +0000
ROA not before: Sat 05 Jul 2025 23:55:26 +0000
ROA not after: Sun 05 Jul 2026 00:00:26 +0000
asID: 393942
IP address blocks: 145.223.67.0/24 maxlen: 24
155.117.17.0/24 maxlen: 24
155.117.217.0/24 maxlen: 24
167.148.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ad:e3:2d:37:79:1e:0b:90:3d:be:66:91:3b:0d:31:83:26:97:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 5 23:55:26 2025 GMT
Not After : Jul 5 00:00:26 2026 GMT
Subject: CN=7504AA1C4EEAA6EEEED250F45D21F1804D129E77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e1:9d:78:85:af:02:28:5c:b8:5d:ab:97:8c:
01:2d:dd:53:19:24:79:5c:41:f7:70:54:bd:23:f7:
ae:9d:45:d6:54:9b:aa:4d:60:ca:02:cf:36:6e:32:
ab:a1:f1:63:b9:f8:76:dc:52:d9:7a:b2:6f:88:b4:
aa:61:3b:c9:e1:e2:3e:9e:f4:4a:dc:31:e1:2a:e4:
ba:89:e1:79:e3:3c:ab:96:9f:18:c5:d7:6f:3e:59:
3c:4e:00:03:8c:84:2c:6c:51:b4:c3:98:1b:fe:88:
76:3c:59:94:d7:ed:94:a6:27:5e:7b:75:aa:01:32:
f1:3a:16:70:cb:1d:68:1f:1e:4e:d9:6d:a8:f5:ec:
9b:ae:d2:be:74:f4:dc:b5:ba:6d:e1:34:0b:9e:54:
05:e5:d2:3b:05:f5:f5:53:a7:a7:f9:59:c3:ee:7a:
81:c3:03:df:1d:8e:53:7e:d1:a3:b8:89:18:74:12:
a0:b4:77:f7:0e:84:c7:5d:93:02:3c:7a:28:db:d3:
ef:72:9c:e9:06:ab:68:77:e1:3f:03:03:d5:0f:9e:
6a:c3:35:b9:35:14:6d:c5:59:22:ff:4d:a1:f3:1a:
b5:84:ff:38:e0:69:5d:81:0a:17:ca:d8:11:f6:06:
12:7f:5a:79:06:ba:4c:b0:0d:a5:0d:81:d8:0e:be:
da:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:04:AA:1C:4E:EA:A6:EE:EE:D2:50:F4:5D:21:F1:80:4D:12:9E:77
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393942.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.223.67.0/24
155.117.17.0/24
155.117.217.0/24
167.148.163.0/24
Signature Algorithm: sha256WithRSAEncryption
69:1c:b5:35:24:02:2e:1d:45:0e:36:ee:ad:9e:8c:5b:2e:17:
5e:0c:61:32:e8:0d:43:d0:55:84:11:11:34:3c:93:c7:f8:fd:
fa:5d:7e:f3:09:e2:d8:42:3d:2b:ab:8f:80:cd:9a:61:87:77:
89:45:3a:38:af:5d:cb:a9:6f:21:93:31:20:de:33:56:0a:53:
ef:7b:c8:d6:a0:46:c0:f5:8c:a6:1b:9b:60:03:3d:6f:89:05:
23:5f:94:43:7a:00:aa:e0:18:f0:ab:1f:9e:8b:8e:72:2a:06:
97:d2:11:b8:8e:8b:83:26:6f:a1:11:32:5f:a6:28:fd:38:20:
f6:f5:a8:35:fd:08:cc:3e:84:c3:d9:a6:dd:e6:93:b6:0d:52:
9e:20:0e:0d:2c:3e:a4:ca:c8:f8:ab:46:c1:39:9b:45:9b:8a:
07:80:49:0f:62:1c:fb:9c:f9:e5:26:b5:c9:18:83:78:d8:97:
1a:d5:03:ba:e8:39:13:d6:0b:00:40:a6:19:8e:f6:18:95:2c:
35:ba:f0:f5:5c:9c:6d:b4:af:1b:f7:bc:1a:c3:52:37:cc:40:
a5:ea:ad:cb:05:20:76:68:79:0c:d1:81:11:c2:51:89:7f:59:
69:60:b8:9e:be:41:62:94:99:b6:cf:a7:65:e6:9c:a1:20:ad:
98:1d:47:34
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIUU63jLTd5HguQPb5mkTsNMYMml6MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA3MDUyMzU1MjZaFw0yNjA3MDUwMDAwMjZaMDMxMTAvBgNV
BAMTKDc1MDRBQTFDNEVFQUE2RUVFRUQyNTBGNDVEMjFGMTgwNEQxMjlFNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54Z14ha8CKFy4XauXjAEt3VMZ
JHlcQfdwVL0j966dRdZUm6pNYMoCzzZuMquh8WO5+HbcUtl6sm+ItKphO8nh4j6e
9ErcMeEq5LqJ4XnjPKuWnxjF128+WTxOAAOMhCxsUbTDmBv+iHY8WZTX7ZSmJ157
daoBMvE6FnDLHWgfHk7Zbaj17Juu0r509Ny1um3hNAueVAXl0jsF9fVTp6f5WcPu
eoHDA98djlN+0aO4iRh0EqC0d/cOhMddkwI8eijb0+9ynOkGq2h34T8DA9UPnmrD
Nbk1FG3FWSL/TaHzGrWE/zjgaV2BChfK2BH2BhJ/WnkGukywDaUNgdgOvtpRAgMB
AAGjggIcMIICGDAdBgNVHQ4EFgQUdQSqHE7qpu7u0lD0XSHxgE0SnncwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMzkzOTQyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAkd9D
AwQAm3URAwQAm3XZAwQAp5SjMA0GCSqGSIb3DQEBCwUAA4IBAQBpHLU1JAIuHUUO
Nu6tnoxbLhdeDGEy6A1D0FWEERE0PJPH+P36XX7zCeLYQj0rq4+AzZphh3eJRTo4
r13LqW8hkzEg3jNWClPve8jWoEbA9YymG5tgAz1viQUjX5RDegCq4Bjwqx+ei45y
KgaX0hG4jouDJm+hETJfpij9OCD29ag1/QjMPoTD2abd5pO2DVKeIA4NLD6kysj4
q0bBOZtFm4oHgEkPYhz7nPnlJrXJGIN42Jca1QO66DkT1gsAQKYZjvYYlSw1uvD1
XJxttK8b97waw1I3zECl6q3LBSB2aHkM0YERwlGJf1lpYLievkFilJm2z6dl5pyh
IK2YHUc0
-----END CERTIFICATE-----
Generated at Mon Jul 21 19:15:37 2025 by rpki-client