Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS56913.roa
File: AS56913.roa (raw, json)
Hash identifier: WSXTiqV8+vrYXghD8E9Ra42XpyNogb6/wxpWEjmlZbc=
Subject key identifier: 5A:5E:54:2D:11:8D:CF:FE:FA:C4:CC:96:D2:67:93:AF:16:9F:3C:4C
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 247FDA2879BFC884A1AEC7829B6EAA6022CFFA42
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS56913.roa
Signing time: Mon 01 Sep 2025 08:31:14 +0000
ROA not before: Mon 01 Sep 2025 08:26:14 +0000
ROA not after: Mon 31 Aug 2026 08:31:14 +0000
asID: 56913
IP address blocks: 143.20.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:7f:da:28:79:bf:c8:84:a1:ae:c7:82:9b:6e:aa:60:22:cf:fa:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 1 08:26:14 2025 GMT
Not After : Aug 31 08:31:14 2026 GMT
Subject: CN=5A5E542D118DCFFEFAC4CC96D26793AF169F3C4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:40:e6:40:d9:ad:75:e9:c0:78:9a:fb:ef:f2:
bf:38:09:3d:96:36:f4:9c:bf:c7:24:e1:5b:d9:65:
4e:2b:e4:aa:af:34:50:de:62:29:3d:41:3b:ee:05:
05:f5:13:63:f6:48:27:fc:1d:f9:f9:84:a1:5f:2c:
14:24:1a:77:16:af:e6:a5:e0:bf:66:6c:0a:1f:df:
85:51:22:4c:48:c2:6e:a3:d0:94:7f:df:14:38:d2:
eb:f8:e6:69:43:63:e0:26:85:55:51:15:48:13:95:
06:b7:6c:89:25:9d:79:5e:bc:58:26:ef:e6:e4:9d:
b7:36:e9:9f:b3:d1:2e:a0:03:8a:5b:32:f4:2c:3e:
9a:d3:44:0c:b2:31:ec:e1:9a:a5:df:91:bc:5f:63:
e8:77:7b:f1:c9:53:22:83:ce:80:29:9d:fb:7b:b4:
1b:c3:49:26:28:d0:3d:3b:b6:23:89:7f:95:bc:26:
14:a5:83:8a:07:52:0c:ab:e2:c4:ea:1c:95:15:39:
56:f1:f9:be:de:9a:10:ca:c2:27:80:3e:7e:11:fc:
44:68:b2:7c:11:d4:a7:da:0e:fb:43:8c:e7:11:e2:
9b:19:3d:9c:8d:a3:7e:98:d9:64:32:fa:ad:01:04:
a2:e6:35:7d:57:e0:ab:c6:94:f7:d2:5a:c2:d7:d7:
56:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5E:54:2D:11:8D:CF:FE:FA:C4:CC:96:D2:67:93:AF:16:9F:3C:4C
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS56913.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.121.0/24
Signature Algorithm: sha256WithRSAEncryption
00:5e:17:7a:a4:1b:99:e6:dd:5f:ab:7c:2c:89:ff:b8:52:9f:
e9:5e:97:5c:87:58:fd:f7:38:8d:51:9f:d8:ee:88:d6:5d:a2:
e0:58:a6:20:5e:a4:1e:24:9d:05:24:02:05:3b:5c:1f:06:69:
59:3f:99:7d:36:6f:c1:00:09:b0:de:af:7c:d5:98:10:b3:96:
1d:46:5f:82:da:d5:e3:eb:aa:9c:a9:c4:f2:08:ee:12:98:4d:
d5:a2:46:65:ad:21:80:16:b6:95:91:05:1f:17:87:3c:3d:2c:
db:97:58:27:fd:c0:90:01:54:39:61:c0:93:fb:84:51:b7:c6:
d8:5c:62:13:1a:9f:28:5e:54:52:66:97:70:6b:80:01:b1:8c:
0b:60:67:47:96:20:33:49:7d:d1:78:94:14:c1:44:9a:b2:ec:
70:54:8f:33:ae:00:4a:27:fe:1a:d8:da:46:c1:aa:f7:6c:af:
4d:42:57:c4:12:18:20:2c:42:f1:1e:3c:fa:e2:d6:99:d8:36:
1b:38:2f:d5:4b:e5:19:7c:fb:37:3d:fc:40:5d:67:cf:70:eb:
eb:11:50:4b:02:e8:96:39:53:1e:e6:22:95:bc:06:33:6e:f0:
9b:9f:1e:6c:18:48:c0:09:d7:7b:59:3f:47:bc:a7:5f:f7:c8:
27:94:e9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 19:42:24 2025 by rpki-client