Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS15830.roa
File: AS15830.roa (raw, json)
Hash identifier: bSlOuE/llcssruaxMAQyPlNpPqt5JBWYlaavjsa1zPc=
Subject key identifier: C3:26:1A:DB:67:31:CE:4A:61:82:1C:9C:E2:DF:6C:16:A7:82:63:22
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 64EDB76FB980523CEAA34A52AD1284DDA1484670
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS15830.roa
Signing time: Wed 02 Jul 2025 10:43:08 +0000
ROA not before: Wed 02 Jul 2025 10:38:08 +0000
ROA not after: Wed 01 Jul 2026 10:43:08 +0000
asID: 15830
IP address blocks: 45.95.36.0/24 maxlen: 24
85.209.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:ed:b7:6f:b9:80:52:3c:ea:a3:4a:52:ad:12:84:dd:a1:48:46:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 2 10:38:08 2025 GMT
Not After : Jul 1 10:43:08 2026 GMT
Subject: CN=C3261ADB6731CE4A61821C9CE2DF6C16A7826322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:07:2f:fe:9e:37:4a:ce:72:6f:a1:67:75:c7:
d3:c0:54:07:e1:0f:16:3c:fa:4f:a7:30:12:1a:ec:
49:1c:1a:b7:af:7d:91:f2:24:3e:f6:70:1f:45:dc:
c0:1e:94:bf:a0:bd:34:f0:16:97:1e:fa:92:0f:7d:
19:ad:d8:3f:4e:9e:3a:29:00:19:3d:dc:85:6f:02:
86:30:d3:f9:9b:7d:8d:65:73:e6:6e:d7:99:26:01:
0c:f6:f0:45:c3:94:2e:76:73:31:69:36:4b:71:b5:
d3:39:80:4b:f8:ce:7b:6f:9a:7e:c1:0c:20:54:f1:
57:5a:23:a8:4c:f0:7e:48:10:10:5b:f3:20:71:4c:
83:98:c0:f7:1a:a4:cf:9f:aa:ec:a1:01:e4:e2:1f:
3f:d7:f9:2d:20:0d:6d:38:40:a5:61:cc:0f:7b:36:
61:f5:86:a6:bf:f0:62:d1:7c:6c:9c:8c:26:be:db:
91:f7:70:59:78:78:72:db:59:33:89:08:5f:e2:02:
8e:16:9d:16:b3:f8:68:8c:ce:62:f9:1c:dd:fe:07:
c4:8a:e3:b8:30:2a:b8:66:06:07:80:5b:03:73:64:
e1:45:7f:26:36:37:86:d2:4c:18:fa:8d:cb:84:9f:
e9:07:93:82:93:cf:f0:bd:3e:18:db:82:86:41:0c:
f7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:26:1A:DB:67:31:CE:4A:61:82:1C:9C:E2:DF:6C:16:A7:82:63:22
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS15830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.36.0/24
85.209.178.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:36:73:8f:ab:c2:4e:dc:1b:5b:e0:a3:a2:d8:c1:45:5f:fc:
fe:fd:a0:aa:bb:9c:ba:d7:b0:c0:50:4d:9c:17:a5:47:14:cb:
42:89:17:91:5f:db:1f:b4:63:c2:8e:ad:2d:83:28:0b:00:a0:
5c:b0:54:39:60:41:2e:45:c4:90:88:3f:6a:d5:16:de:de:7a:
61:ca:75:a6:17:44:0d:9a:9d:6f:53:69:41:61:79:e1:36:9d:
fb:cd:5f:09:11:14:7a:50:70:39:ad:0d:c9:cc:3f:96:33:50:
b6:68:23:0d:01:20:9f:85:72:6e:c0:a0:7e:ee:ba:43:fd:a1:
c2:94:c0:a2:37:42:53:8f:ed:5c:6b:63:27:dd:cf:08:2d:27:
f6:0a:29:84:5c:f8:85:f3:3c:58:97:f6:69:df:27:fb:90:78:
bd:08:ea:b3:ab:8e:8d:9a:8c:b4:1e:70:e9:f4:e8:9a:85:49:
ad:11:13:4a:9a:61:fb:99:81:4c:a8:a9:4f:1c:8b:22:06:9e:
c4:f8:ca:a6:8e:1d:90:23:4d:04:9c:fe:9b:42:90:ac:71:bd:
ef:6f:da:a2:4d:01:fc:de:6d:b2:7e:89:e3:e1:fe:13:d1:92:
46:66:f0:4b:d5:78:dd:e2:22:2d:89:df:4c:f8:e9:bc:58:61:
f7:7f:a9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:08:40 2025 by rpki-client