Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS984.roa
File: AS984.roa (raw, json)
Hash identifier: QG+vO3eIVnFVeSdGGuecccx/sa9flvva6qr8UCo7GNI=
Subject key identifier: EE:CD:2D:D5:28:42:3C:13:4D:1C:4C:E8:69:A3:56:52:A0:C3:E1:65
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 542058F148626F38BDB290CDE098E8F312009017
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS984.roa
Signing time: Wed 08 Oct 2025 12:27:01 +0000
ROA not before: Wed 08 Oct 2025 12:22:01 +0000
ROA not after: Wed 07 Oct 2026 12:27:01 +0000
asID: 984
IP address blocks: 46.236.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:20:58:f1:48:62:6f:38:bd:b2:90:cd:e0:98:e8:f3:12:00:90:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Oct 8 12:22:01 2025 GMT
Not After : Oct 7 12:27:01 2026 GMT
Subject: CN=EECD2DD528423C134D1C4CE869A35652A0C3E165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:59:2f:38:0e:7f:68:ad:f7:d9:86:de:1d:e6:
9f:57:59:11:c1:39:c7:5a:45:46:04:da:d7:df:b4:
fe:e7:db:1b:fb:c7:6f:bb:6a:f8:87:91:72:fe:b3:
e1:d6:4a:d3:bd:c6:d9:e4:50:43:d2:2c:bf:6e:5e:
34:b5:3a:64:05:97:b5:51:4f:e9:58:18:59:4c:0d:
05:b0:e0:79:8e:d4:a2:2d:31:d0:dc:b4:49:ee:9b:
40:fa:c2:e9:09:21:a5:2d:54:4f:14:b2:9b:7b:db:
a1:f9:3f:c3:66:2c:a3:93:e2:88:e6:2e:69:45:bd:
85:1c:55:98:1f:e3:63:7c:b4:f8:9f:fc:07:38:a8:
0b:62:5e:09:2b:a5:d8:e2:42:08:7c:74:a2:24:57:
67:cc:0c:66:dd:c5:2b:b6:d4:89:13:e6:b6:b6:d9:
fb:9b:67:ce:65:b1:9f:4f:a7:00:f5:eb:bd:7b:c6:
ff:23:71:ff:c1:8c:60:9f:f5:c5:9d:af:d9:6d:fa:
0f:1b:08:b5:e5:c7:ee:5e:32:c9:8a:90:f2:27:ea:
f1:44:4e:ab:4d:d0:bd:c6:60:cc:2a:35:ac:0d:70:
35:3a:c8:85:22:c6:09:18:34:7d:17:29:63:dd:6e:
57:7b:55:22:88:c2:fb:2c:ce:2c:e0:53:c3:2f:1f:
fe:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CD:2D:D5:28:42:3C:13:4D:1C:4C:E8:69:A3:56:52:A0:C3:E1:65
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS984.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.252.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:6c:b5:38:7c:3c:3a:7c:9a:c1:46:e9:f4:3b:4f:fa:69:69:
2c:ae:b6:42:8a:8e:86:08:ca:e9:f5:63:6a:d3:69:f7:1c:f8:
f6:e7:31:6d:64:b2:c3:d3:fe:f4:0b:a6:58:94:20:92:fa:35:
9e:ed:75:1b:53:34:16:86:d5:49:da:5c:e1:0c:78:d9:53:ca:
bf:5a:a9:b5:5a:89:c2:bc:d1:09:c6:c0:41:47:74:02:38:39:
e8:71:73:8d:1e:b0:fa:fd:57:63:07:85:9c:16:3c:35:86:db:
f4:94:16:75:c7:9c:f2:2c:2e:f9:7f:a0:55:76:d1:51:70:15:
36:d8:0d:b1:4b:29:49:8f:73:cb:51:35:96:3b:0a:9f:b3:d6:
42:d0:c7:45:e0:9f:b6:14:ec:41:33:b4:da:84:a9:e6:d3:23:
86:3c:40:80:b1:04:1c:7b:24:5d:e3:7b:02:93:5c:9b:97:e5:
94:d3:6d:37:60:b5:a0:83:ad:4d:1b:56:8d:1f:d1:e0:08:6a:
11:97:7a:49:37:b0:0f:ca:81:55:1e:59:14:ac:1d:a7:47:28:
9a:d1:bc:62:0c:13:4b:e8:f8:81:3c:13:90:1f:ab:ab:42:10:
f5:dc:fd:06:e8:55:14:8d:4b:a0:c1:96:a8:21:2b:5b:97:83:
1c:92:4b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:05:05 2025 by rpki-client