Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS53808.roa
File: AS53808.roa (raw, json)
Hash identifier: zfrdskpoXhtGQqeNOWTcTCGqsaqAAGoSE+JahVYFIog=
Subject key identifier: 96:79:6B:A0:B8:77:7F:16:BE:41:03:B1:D3:28:CA:CF:CE:54:F0:C3
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5B7F7CD76BCABB605B42413A161F66254F2FF7F7
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS53808.roa
Signing time: Mon 18 May 2026 17:00:42 +0000
ROA not before: Mon 18 May 2026 16:55:42 +0000
ROA not after: Mon 17 May 2027 17:00:42 +0000
asID: 53808
IP address blocks: 168.222.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:7f:7c:d7:6b:ca:bb:60:5b:42:41:3a:16:1f:66:25:4f:2f:f7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 18 16:55:42 2026 GMT
Not After : May 17 17:00:42 2027 GMT
Subject: CN=96796BA0B8777F16BE4103B1D328CACFCE54F0C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:db:e1:c1:d2:fc:01:20:6f:b5:7a:62:13:c0:
f6:60:88:04:9c:b4:20:f4:e1:b0:eb:f3:13:b6:61:
c7:0e:7f:a6:b0:be:c6:d8:51:2a:34:a8:b9:5d:08:
a3:21:9b:fc:28:f1:c5:b6:fe:da:10:83:c1:f4:cb:
d3:4f:79:94:e2:61:bb:97:9b:10:65:9d:e8:be:a3:
f5:59:98:e4:9f:e6:94:ea:fb:66:25:63:fa:49:b0:
64:23:16:f7:e1:53:e7:c3:10:78:6f:f7:e1:34:c9:
c9:8f:01:3c:34:62:c6:1e:13:c7:19:fc:98:9b:21:
4b:a0:5a:b7:b6:a6:e4:17:13:f3:e2:fb:0c:76:61:
2e:31:bf:ed:54:4a:60:55:c4:bd:72:bf:5b:1e:ad:
34:83:c0:c9:ea:ec:c6:9f:de:cc:b4:93:f1:ac:20:
a0:d6:69:28:65:21:fe:93:4f:a6:0e:1d:2d:38:02:
2b:05:2b:57:ae:c9:cd:9c:56:03:01:9e:14:1e:7b:
88:a9:18:53:65:60:41:ba:d1:83:63:16:e0:db:aa:
28:65:cb:e3:a1:6a:ea:0b:90:50:9e:63:7b:16:89:
27:a2:bd:f1:50:19:5b:8b:3f:cf:11:77:d3:bb:e2:
60:55:ca:65:06:6e:e1:3c:f8:1e:fe:c4:66:b6:b3:
90:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:79:6B:A0:B8:77:7F:16:BE:41:03:B1:D3:28:CA:CF:CE:54:F0:C3
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS53808.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.25.0/24
Signature Algorithm: sha256WithRSAEncryption
71:ae:50:51:24:f9:07:cb:df:75:65:2b:80:a3:66:7a:82:b7:
ce:e0:8f:5c:a6:74:c3:ee:ba:8d:60:33:36:ae:1b:0f:35:a1:
06:c0:43:66:c5:61:7d:78:b4:15:24:41:fa:94:d4:af:f1:07:
07:95:9c:2e:ad:49:18:73:b4:45:54:b5:bb:0b:db:41:00:ef:
88:7b:08:12:85:c0:fc:36:57:0c:3f:6c:76:21:f3:41:61:74:
96:9c:32:25:5e:a7:f7:19:d6:b0:d1:f7:e8:bc:c5:4e:e7:7b:
65:ca:44:65:f3:7f:66:cb:48:38:c5:cc:2d:b2:a5:c8:8e:c0:
bc:dc:c3:aa:19:39:9c:08:bb:ee:64:86:36:36:7d:b9:3e:d8:
22:38:5b:bc:fc:7b:6f:eb:7a:75:58:f5:90:08:0e:2d:ac:a2:
00:75:24:d8:7c:9f:7c:79:80:57:5d:e8:ba:30:ac:3e:a0:a9:
dc:78:52:fc:cc:80:9d:16:53:a8:b9:1a:a2:15:21:ff:2d:87:
f6:9a:44:96:36:c3:48:db:f5:a9:e0:0a:0f:a3:58:6a:c2:90:
8b:10:0f:6e:de:97:5e:c2:60:33:63:8d:98:5b:95:c4:78:4a:
95:cf:b2:55:02:4e:fb:74:11:c6:3f:7c:8f:20:af:f9:b6:50:
ec:79:f1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 23:28:27 2026 by rpki-client