Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14935.roa
File: AS14935.roa (raw, json)
Hash identifier: FzSBexgtmMv2oNem8vWYvaFczpN5DYAzw3SfnQgh7sc=
Subject key identifier: EF:0C:F5:94:A3:00:DA:0C:40:A1:5F:1B:08:82:D5:49:BB:E5:FB:44
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 69AC7A7F2E7253BA07B0C51AF19DBC46755CA08E
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14935.roa
Signing time: Wed 16 Jul 2025 14:54:13 +0000
ROA not before: Wed 16 Jul 2025 14:49:13 +0000
ROA not after: Wed 15 Jul 2026 14:54:13 +0000
asID: 14935
IP address blocks: 191.96.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ac:7a:7f:2e:72:53:ba:07:b0:c5:1a:f1:9d:bc:46:75:5c:a0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 16 14:49:13 2025 GMT
Not After : Jul 15 14:54:13 2026 GMT
Subject: CN=EF0CF594A300DA0C40A15F1B0882D549BBE5FB44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5d:4a:83:d5:3c:25:ec:18:07:6d:0d:aa:4e:
a1:e8:42:e5:fc:bc:2c:c7:69:1c:c6:da:ee:ae:11:
28:c6:b2:7d:7a:e8:ef:a8:a4:e8:15:c8:13:ce:40:
23:6d:15:1c:70:b0:9d:88:52:7d:95:cf:06:8c:22:
1d:6c:2e:50:72:7c:a0:39:0b:52:05:29:12:00:38:
27:f7:b9:c0:72:9f:6f:67:92:93:8e:79:49:59:24:
96:1d:07:4d:7b:4e:ec:b0:c7:29:f1:10:57:03:4b:
e9:91:36:96:f5:98:78:67:a1:4c:c5:17:5d:2b:ce:
f2:7b:72:5a:54:f2:82:65:0f:45:df:cf:03:de:e7:
83:23:b3:c9:b2:e4:fe:8d:e1:7d:e4:c2:54:bc:9c:
5a:a6:22:d0:57:77:d1:17:eb:5c:20:1b:af:74:d3:
c3:c2:c9:e2:49:2c:79:27:70:5d:88:ef:fe:62:c5:
3e:61:3f:74:31:9f:a6:d7:d7:a8:1c:c2:ef:9a:6e:
0b:3e:e8:63:49:94:3f:7d:86:66:7e:f3:4c:fa:40:
0a:7e:7a:e0:0c:a4:82:da:de:7b:6e:bb:d1:63:70:
92:73:2f:b5:43:07:1b:a6:7c:a2:25:c6:ad:84:60:
da:30:ef:40:7b:60:d2:ff:a7:15:9a:f1:50:29:20:
66:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0C:F5:94:A3:00:DA:0C:40:A1:5F:1B:08:82:D5:49:BB:E5:FB:44
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.30.0/24
Signature Algorithm: sha256WithRSAEncryption
42:00:66:06:b9:60:43:dc:42:98:b6:15:a2:ca:bf:49:ce:f2:
d8:3b:e5:ec:a3:9c:ff:a9:db:f1:d6:ee:f3:47:8e:b9:05:79:
f5:d3:9e:b2:a3:f1:d3:8a:e5:1b:8f:71:70:66:c7:db:aa:c4:
dd:be:b3:32:00:35:7c:6f:09:5f:39:40:c1:94:75:de:f0:07:
fa:aa:d8:6b:da:ab:50:5b:c0:75:c2:78:fe:81:ba:91:94:40:
b3:86:18:92:3f:96:50:6b:d3:8e:1c:27:ab:a6:c4:1c:66:db:
07:2b:f4:5e:6c:b4:ff:bc:1e:27:f2:89:2d:e4:c1:aa:e7:a4:
32:64:83:38:65:29:c0:63:f0:d6:b9:dc:3d:b7:a1:5c:89:e9:
7a:38:72:fa:5f:78:3b:95:dd:7f:19:8c:b4:a1:b1:14:1b:e5:
17:98:e0:ae:3a:dc:18:2a:ce:5c:72:5f:55:98:d5:c7:23:22:
fc:1a:23:16:e3:f3:39:79:b8:cf:4d:a3:27:d0:bf:c4:39:8f:
6c:e5:88:29:81:96:1b:d1:29:e8:16:c7:9c:40:03:93:bc:8f:
ef:45:ae:df:91:30:ce:76:64:1f:75:79:12:22:6f:f7:d2:de:
3e:bf:a8:9e:9b:fc:fc:e6:e3:7a:a8:6b:6f:ce:99:18:2c:70:
33:19:1e:9d
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUaax6fy5yU7oHsMUa8Z28RnVcoI4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNTA3MTYxNDQ5MTNaFw0yNjA3MTUxNDU0MTNaMDMxMTAvBgNV
BAMTKEVGMENGNTk0QTMwMERBMEM0MEExNUYxQjA4ODJENTQ5QkJFNUZCNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTXUqD1Twl7BgHbQ2qTqHoQuX8
vCzHaRzG2u6uESjGsn166O+opOgVyBPOQCNtFRxwsJ2IUn2VzwaMIh1sLlByfKA5
C1IFKRIAOCf3ucByn29nkpOOeUlZJJYdB017TuywxynxEFcDS+mRNpb1mHhnoUzF
F10rzvJ7clpU8oJlD0XfzwPe54Mjs8my5P6N4X3kwlS8nFqmItBXd9EX61wgG690
08PCyeJJLHkncF2I7/5ixT5hP3Qxn6bX16gcwu+abgs+6GNJlD99hmZ+80z6QAp+
euAMpILa3ntuu9FjcJJzL7VDBxumfKIlxq2EYNow70B7YNL/pxWa8VApIGbbAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQU7wz1lKMA2gxAoV8bCILVSbvl+0QwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTQ5MzUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC/YB4w
DQYJKoZIhvcNAQELBQADggEBAEIAZga5YEPcQpi2FaLKv0nO8tg75eyjnP+p2/HW
7vNHjrkFefXTnrKj8dOK5RuPcXBmx9uqxN2+szIANXxvCV85QMGUdd7wB/qq2Gva
q1BbwHXCeP6BupGUQLOGGJI/llBr044cJ6umxBxm2wcr9F5stP+8HifyiS3kwarn
pDJkgzhlKcBj8Na53D23oVyJ6Xo4cvpfeDuV3X8ZjLShsRQb5ReY4K463Bgqzlxy
X1WY1ccjIvwaIxbj8zl5uM9NoyfQv8Q5j2zliCmBlhvRKegWx5xAA5O8j+9Frt+R
MM52ZB91eRIib/fS3j6/qJ6b/Pzm43qoa2/OmRgscDMZHp0=
-----END CERTIFICATE-----
Generated at Mon Jul 21 03:08:39 2025 by rpki-client