Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS39600.roa
File: AS39600.roa (raw, json)
Hash identifier: 156sQfiVYb3Sm3R+kGUgwV9P26sJR0sC/n07/CVKIkQ=
Subject key identifier: 8C:D8:76:9F:DB:6B:53:2E:78:10:B0:A2:06:EE:8F:A0:46:F7:D6:69
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 03FF477099F26B6B1216F454C0DFE4C307B69E83
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS39600.roa
Signing time: Sun 18 May 2025 16:54:08 +0000
ROA not before: Sun 18 May 2025 16:49:08 +0000
ROA not after: Sun 17 May 2026 16:54:08 +0000
asID: 39600
IP address blocks: 146.103.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:ff:47:70:99:f2:6b:6b:12:16:f4:54:c0:df:e4:c3:07:b6:9e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 18 16:49:08 2025 GMT
Not After : May 17 16:54:08 2026 GMT
Subject: CN=8CD8769FDB6B532E7810B0A206EE8FA046F7D669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b2:cb:f5:52:6f:0b:4f:32:cc:0d:fe:78:fa:
9a:c4:d0:ed:eb:e8:ad:37:e4:f8:63:02:44:f2:67:
63:92:52:ba:9c:d1:ee:9d:9d:4f:08:08:59:5f:95:
ab:52:ca:5d:69:ac:49:14:2f:04:df:79:5a:ff:dd:
6d:24:24:de:84:63:ef:c7:af:f7:e2:a8:c2:2f:38:
c2:0c:ef:3f:04:7d:df:04:2d:a8:ed:9d:5b:40:05:
98:8e:f1:f2:e1:d3:c3:1b:d9:21:36:29:76:cf:b6:
0e:5e:d0:59:3e:f7:01:a3:1f:18:b0:c1:96:9a:31:
94:20:5b:41:48:b1:8e:25:64:27:ab:99:92:3d:93:
5e:6e:5a:03:92:63:47:b4:c2:c8:7c:fd:8a:70:21:
0e:ad:5e:f8:f7:a5:34:d3:ac:12:7b:3c:50:95:7c:
1b:2c:31:dc:f4:ae:3c:58:a5:d0:b0:e4:51:99:e4:
26:3f:13:04:a1:1b:d8:23:ed:85:a1:3f:d8:ec:c2:
45:ed:70:57:71:c9:48:02:db:1c:f3:f6:04:94:e8:
2e:07:ba:fb:99:a0:7e:0f:10:c1:7b:30:17:fb:59:
47:da:00:73:97:d6:3e:f1:a1:87:6c:ca:0d:75:7f:
cc:ff:00:76:88:01:8a:86:94:be:d8:90:9e:b3:35:
fc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D8:76:9F:DB:6B:53:2E:78:10:B0:A2:06:EE:8F:A0:46:F7:D6:69
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS39600.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.57.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:77:39:72:d6:10:8b:61:0c:ba:ce:97:92:fe:c4:c5:37:82:
e5:06:65:d0:f3:d8:1e:3f:57:1b:64:a5:17:bb:3f:fe:85:1b:
f8:9b:10:9b:74:b6:65:f3:05:5f:cd:89:f1:05:b4:48:c8:8c:
d1:e6:40:8a:02:2d:78:d9:bf:fa:69:e8:49:26:f9:ca:98:83:
19:ee:95:4d:22:ce:70:f3:cb:87:02:fe:92:d1:2e:6d:1b:82:
cd:71:21:5c:9d:1d:e6:23:6e:52:9d:fe:af:04:8d:cb:4c:74:
7c:38:cc:ec:d8:a8:62:be:8e:fe:95:90:e8:15:e1:cf:95:01:
d5:81:8d:62:10:3c:e7:8f:82:6e:30:83:6c:c9:41:73:b8:59:
a2:8f:21:f3:8b:e1:c6:7c:d0:73:92:74:e5:65:47:d5:b8:77:
81:dc:8c:d2:ca:00:4b:ae:ee:14:8e:b3:a8:84:a9:63:c1:2e:
00:05:d0:41:03:71:72:8b:35:6a:c7:ea:25:90:ad:75:6c:db:
21:62:e8:48:64:56:90:89:2a:7e:28:74:e8:b3:01:be:4e:b3:
03:15:aa:16:00:c4:56:89:78:a7:d7:97:0c:11:69:77:74:8d:
fe:14:62:f9:bb:f8:f5:50:46:59:b4:48:af:53:c9:d4:df:bd:
75:06:fe:50
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUA/9HcJnya2sSFvRUwN/kwwe2noMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA1MTgxNjQ5MDhaFw0yNjA1MTcxNjU0MDhaMDMxMTAvBgNV
BAMTKDhDRDg3NjlGREI2QjUzMkU3ODEwQjBBMjA2RUU4RkEwNDZGN0Q2NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtssv1Um8LTzLMDf54+prE0O3r
6K035PhjAkTyZ2OSUrqc0e6dnU8ICFlflatSyl1prEkULwTfeVr/3W0kJN6EY+/H
r/fiqMIvOMIM7z8Efd8ELajtnVtABZiO8fLh08Mb2SE2KXbPtg5e0Fk+9wGjHxiw
wZaaMZQgW0FIsY4lZCermZI9k15uWgOSY0e0wsh8/YpwIQ6tXvj3pTTTrBJ7PFCV
fBssMdz0rjxYpdCw5FGZ5CY/EwShG9gj7YWhP9jswkXtcFdxyUgC2xzz9gSU6C4H
uvuZoH4PEMF7MBf7WUfaAHOX1j7xoYdsyg11f8z/AHaIAYqGlL7YkJ6zNfx7AgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUjNh2n9trUy54ELCiBu6PoEb31mkwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMzk2MDAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACSZzkw
DQYJKoZIhvcNAQELBQADggEBAKp3OXLWEIthDLrOl5L+xMU3guUGZdDz2B4/Vxtk
pRe7P/6FG/ibEJt0tmXzBV/NifEFtEjIjNHmQIoCLXjZv/pp6Ekm+cqYgxnulU0i
znDzy4cC/pLRLm0bgs1xIVydHeYjblKd/q8EjctMdHw4zOzYqGK+jv6VkOgV4c+V
AdWBjWIQPOePgm4wg2zJQXO4WaKPIfOL4cZ80HOSdOVlR9W4d4HcjNLKAEuu7hSO
s6iEqWPBLgAF0EEDcXKLNWrH6iWQrXVs2yFi6EhkVpCJKn4odOizAb5OswMVqhYA
xFaJeKfXlwwRaXd0jf4UYvm7+PVQRlm0SK9TydTfvXUG/lA=
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:01:22 2025 by rpki-client