Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS53808.roa
File: AS53808.roa (raw, json)
Hash identifier: fw/SIuRl+2vyc1siF4uBCLs7AF9TTlQlhH+sNU1xr2w=
Subject key identifier: 94:0C:30:B7:45:DB:17:D5:4D:4B:56:70:61:1D:99:8C:50:42:9C:28
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6BC44687CB35AEC2AB68D25BEBBF65F40FA812A4
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS53808.roa
Signing time: Sun 14 Jun 2026 13:54:08 +0000
ROA not before: Sun 14 Jun 2026 13:49:08 +0000
ROA not after: Sun 13 Jun 2027 13:54:08 +0000
asID: 53808
IP address blocks: 147.79.1.0/24 maxlen: 24
168.222.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:c4:46:87:cb:35:ae:c2:ab:68:d2:5b:eb:bf:65:f4:0f:a8:12:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 14 13:49:08 2026 GMT
Not After : Jun 13 13:54:08 2027 GMT
Subject: CN=940C30B745DB17D54D4B5670611D998C50429C28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5c:43:ef:8e:aa:2c:9a:36:94:0a:d5:f4:53:
1d:79:92:4e:5c:67:ad:4b:6f:07:bd:0b:0a:80:71:
50:3d:cd:77:f4:fa:39:20:da:91:c9:6d:1f:c2:b7:
2b:a7:00:2d:17:2f:d6:29:4e:64:f3:6f:bf:f2:15:
e7:d8:9b:55:0d:ea:a3:02:1d:88:45:af:c3:71:ee:
d6:99:ea:11:d6:f5:71:86:bc:11:72:c1:7e:ec:74:
08:1d:71:e1:7d:15:91:ff:10:d3:24:a0:d5:4b:ec:
6d:82:e2:73:1b:5c:af:6f:7f:5f:f4:a6:a1:48:99:
89:6e:b2:63:c9:1a:01:57:c3:a3:26:24:ee:83:57:
6a:86:2e:e2:86:e2:87:37:54:06:0e:9f:b9:11:52:
e0:e1:66:7a:d1:2d:5c:c3:b0:c5:c7:57:63:24:dd:
39:72:51:12:3d:23:f1:a8:2e:4b:e4:22:89:d7:e2:
91:f2:12:27:b7:f5:24:d7:23:7a:f1:1b:4a:59:51:
37:7a:c8:52:ad:ba:2b:4f:ee:3b:55:c7:23:ea:d0:
38:5e:cb:d7:70:f8:cf:de:11:a4:11:ce:a9:8a:77:
22:8a:82:2b:2a:8e:d5:2d:2d:be:ef:be:58:6f:19:
0a:d7:54:6a:01:96:a0:65:93:47:16:91:41:95:78:
7b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0C:30:B7:45:DB:17:D5:4D:4B:56:70:61:1D:99:8C:50:42:9C:28
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS53808.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.1.0/24
168.222.25.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:d9:85:37:b2:c2:bf:59:12:3a:97:ba:e6:3d:2c:ff:e9:66:
6a:ed:3d:30:ba:f5:68:3c:e1:c6:d5:84:9d:db:25:15:a2:32:
75:0b:10:f7:0c:c2:bb:9f:12:62:93:c3:2d:7f:a4:c2:1a:a5:
35:03:58:a8:31:80:e5:67:0f:46:cd:dc:fe:4e:e5:ef:0a:a7:
f1:38:03:46:ca:37:23:46:31:67:64:22:63:03:a4:42:85:98:
2b:1f:6f:77:e2:f2:37:92:fd:28:45:07:0b:9f:64:68:f3:67:
38:77:af:c2:6b:5d:6d:d2:57:d0:15:78:6d:32:a5:0a:df:b0:
f9:46:42:d9:99:a0:4b:16:a5:33:09:d7:60:c5:9f:93:fc:e4:
49:8d:8f:76:c5:02:4b:b0:fd:27:4d:ca:2f:49:61:33:2b:11:
99:ab:aa:b5:31:fd:87:66:5c:db:0f:bc:dd:70:cd:be:ae:d1:
78:d8:5a:25:d6:09:eb:29:fc:bb:6d:39:3d:00:e8:1e:b7:81:
1d:c3:8e:71:25:ef:04:61:a1:d8:4b:78:79:31:99:f7:d9:4f:
e6:f6:f4:87:75:15:28:fa:ad:4b:ab:0e:5e:78:a7:4d:c1:9b:
33:3b:89:1a:af:0a:b0:dc:2f:f5:93:e6:66:99:34:f9:fd:ee:
c8:f8:70:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:35:30 2026 by rpki-client