Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS55201.roa
File: AS55201.roa (raw, json)
Hash identifier: Uhv6JtD+9ByduuxEtqe7HACd8jjDop8Jcic43yD1w0U=
Subject key identifier: 3C:94:B7:09:E7:B6:A8:E5:62:0E:93:C7:B1:80:AF:C8:E1:DF:2B:7E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4B948429E361757E0020D1E00943B7928C4F183F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS55201.roa
Signing time: Wed 04 Jun 2025 17:47:36 +0000
ROA not before: Wed 04 Jun 2025 17:42:36 +0000
ROA not after: Wed 03 Jun 2026 17:47:36 +0000
asID: 55201
IP address blocks: 96.62.0.0/19 maxlen: 24
96.62.37.0/24 maxlen: 24
96.62.45.0/24 maxlen: 24
96.62.47.0/24 maxlen: 24
96.62.48.0/23 maxlen: 24
96.62.50.0/23 maxlen: 24
96.62.52.0/23 maxlen: 24
96.62.54.0/24 maxlen: 24
96.62.55.0/24 maxlen: 24
96.62.56.0/24 maxlen: 24
96.62.57.0/24 maxlen: 24
96.62.58.0/24 maxlen: 24
96.62.60.0/23 maxlen: 24
96.62.62.0/23 maxlen: 24
96.62.79.0/24 maxlen: 24
96.62.80.0/23 maxlen: 24
96.62.82.0/23 maxlen: 24
96.62.85.0/24 maxlen: 24
96.62.86.0/23 maxlen: 24
96.62.88.0/24 maxlen: 24
96.62.90.0/23 maxlen: 24
96.62.92.0/23 maxlen: 24
96.62.94.0/23 maxlen: 24
96.62.98.0/23 maxlen: 24
96.62.135.0/24 maxlen: 24
96.62.149.0/24 maxlen: 24
96.62.150.0/24 maxlen: 24
96.62.151.0/24 maxlen: 24
148.135.216.0/23 maxlen: 24
148.135.218.0/23 maxlen: 24
148.135.224.0/23 maxlen: 24
148.135.226.0/23 maxlen: 24
148.135.232.0/23 maxlen: 24
148.135.234.0/23 maxlen: 24
148.135.240.0/23 maxlen: 24
148.135.242.0/23 maxlen: 24
148.135.248.0/23 maxlen: 24
148.135.250.0/23 maxlen: 24
150.241.146.0/23 maxlen: 24
150.241.148.0/23 maxlen: 24
150.241.150.0/23 maxlen: 24
150.241.152.0/23 maxlen: 24
150.241.154.0/23 maxlen: 24
150.241.156.0/23 maxlen: 24
150.241.158.0/23 maxlen: 24
150.241.160.0/23 maxlen: 24
150.241.162.0/23 maxlen: 24
150.241.164.0/23 maxlen: 24
150.241.166.0/23 maxlen: 24
150.241.168.0/23 maxlen: 24
150.241.170.0/23 maxlen: 24
150.241.172.0/23 maxlen: 24
150.241.176.0/23 maxlen: 24
150.241.178.0/23 maxlen: 24
150.241.180.0/23 maxlen: 24
150.241.182.0/23 maxlen: 24
150.241.184.0/23 maxlen: 24
150.241.186.0/23 maxlen: 24
150.241.188.0/23 maxlen: 24
150.241.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:94:84:29:e3:61:75:7e:00:20:d1:e0:09:43:b7:92:8c:4f:18:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 4 17:42:36 2025 GMT
Not After : Jun 3 17:47:36 2026 GMT
Subject: CN=3C94B709E7B6A8E5620E93C7B180AFC8E1DF2B7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:04:c8:28:d6:0d:5d:e5:e8:a2:6d:a4:35:e6:
50:1c:a8:1b:8a:e4:8f:f1:b9:bc:8a:1c:64:00:b5:
74:f0:dc:bf:2f:14:9c:cc:93:e9:70:50:64:da:50:
54:a5:ad:36:42:91:2c:a4:c4:69:99:80:21:25:4e:
0c:76:d4:ee:88:14:b0:cd:0a:4c:c2:86:21:e6:78:
74:f5:c5:5d:c5:f0:6c:32:d8:23:6e:01:50:b7:23:
98:f3:31:5c:eb:9b:4f:b9:d6:56:2d:bf:26:8a:db:
5b:6c:98:6f:04:4b:2a:1d:30:5d:19:3a:58:19:26:
cc:38:bd:49:df:4a:5c:ec:57:48:cc:41:ad:51:8e:
37:d9:98:f6:17:d5:e9:e4:da:ca:f6:ea:b4:1f:5b:
ff:61:40:7c:3f:b0:d6:f3:3d:fa:84:ad:9b:e3:54:
01:eb:ad:66:27:6b:49:03:f1:1a:ae:58:64:44:64:
ad:43:4e:e6:9d:51:5d:9e:76:2c:36:c4:a6:36:49:
cf:f8:5e:19:9e:4b:9f:c6:00:68:f8:72:c0:cb:b2:
d4:36:20:ad:ff:77:34:63:8e:44:ae:2c:a5:96:d1:
aa:ab:44:4a:25:ec:25:c3:e5:f9:ff:94:c5:40:03:
7b:f8:41:ca:f7:4d:07:24:07:64:a1:a9:e8:0a:da:
b3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:94:B7:09:E7:B6:A8:E5:62:0E:93:C7:B1:80:AF:C8:E1:DF:2B:7E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS55201.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.0.0/19
96.62.37.0/24
96.62.45.0/24
96.62.47.0-96.62.58.255
96.62.60.0/22
96.62.79.0-96.62.83.255
96.62.85.0-96.62.88.255
96.62.90.0-96.62.95.255
96.62.98.0/23
96.62.135.0/24
96.62.149.0-96.62.151.255
148.135.216.0/22
148.135.224.0/22
148.135.232.0/22
148.135.240.0/22
148.135.248.0/22
150.241.146.0-150.241.173.255
150.241.176.0/20
Signature Algorithm: sha256WithRSAEncryption
43:c1:9a:8a:13:c7:66:a8:df:1e:35:3e:bd:50:0c:fb:55:89:
3d:a7:16:54:ed:ea:8e:99:00:d1:9d:7f:7c:5e:1d:ff:f2:80:
c8:11:49:aa:3c:cb:46:f0:fa:5f:3e:98:6c:4b:a4:78:de:d7:
b0:fe:ca:fb:e3:03:65:76:a5:70:c6:1d:40:aa:d5:9c:ed:ef:
7d:a4:85:f9:a5:5f:8f:cd:17:65:0b:02:af:40:95:5c:88:4b:
04:45:54:58:40:71:65:c7:70:a2:c9:1a:a8:6d:a5:dd:02:c5:
fd:9c:01:e8:df:14:31:de:76:91:00:16:27:4a:73:cd:6d:2e:
1a:da:50:f6:87:14:9b:c6:85:bf:98:53:ef:7f:a2:de:39:32:
38:ab:ed:94:20:55:d5:7e:1b:1f:ba:e7:92:7e:f6:ee:ac:c0:
d6:fb:ab:f1:91:61:c5:d2:3c:ae:c7:7b:33:3e:b4:bf:68:45:
68:54:80:ff:05:b2:01:0a:10:76:3b:9e:2e:c7:31:b4:e2:d6:
6a:68:2f:7e:e2:c9:c3:21:c2:d4:f3:9c:09:e5:1b:45:c1:24:
a1:4d:67:69:ee:75:02:1c:78:85:0a:24:5c:af:05:f6:4a:89:
40:fb:f9:0a:ec:e6:c3:5b:1f:4a:2b:18:61:98:a4:03:bf:d7:
c9:d8:26:50
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 6 13:16:14 2025 by rpki-client