Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS19577.roa
File: AS19577.roa (raw, json)
Hash identifier: 9j5nZzhHyM20kXhUBhcvSPcIoFxJLb344pTHasTRXKg=
Subject key identifier: 15:2C:97:4D:5F:CC:C9:A2:7E:FA:F7:40:F9:F5:D1:4A:3A:DA:A0:57
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3E0C74A871AEF4729FD59E24A47F98A28314F38D
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS19577.roa
Signing time: Sun 14 Sep 2025 00:05:11 +0000
ROA not before: Sun 14 Sep 2025 00:00:11 +0000
ROA not after: Sun 13 Sep 2026 00:05:11 +0000
asID: 19577
IP address blocks: 46.202.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:0c:74:a8:71:ae:f4:72:9f:d5:9e:24:a4:7f:98:a2:83:14:f3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 14 00:00:11 2025 GMT
Not After : Sep 13 00:05:11 2026 GMT
Subject: CN=152C974D5FCCC9A27EFAF740F9F5D14A3ADAA057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0d:c1:97:73:50:6f:6e:48:70:6b:38:7a:20:
00:d2:1a:9c:e3:d5:bf:e8:d6:2e:4a:2c:82:84:b6:
32:b8:af:83:96:98:38:9e:6f:c5:b5:83:b0:9e:b0:
8e:33:e9:06:b1:16:dd:e3:dd:e1:1d:fc:d3:d8:b3:
89:e9:16:99:3f:8f:88:5f:12:c1:9d:89:1e:0f:5b:
71:22:96:65:b4:3f:60:60:47:ea:92:a2:65:4d:28:
16:06:45:a3:f0:7d:b2:9a:1e:29:6d:f0:1f:08:9b:
f9:f9:13:fa:47:a9:94:7f:7e:58:54:fe:72:58:5a:
0c:8d:63:14:69:a6:df:24:bd:80:16:ec:0a:46:10:
27:26:1e:37:fb:4a:1c:97:61:9a:4b:d7:c8:8b:89:
21:5a:33:c0:07:3b:13:87:92:9d:c6:b9:08:d5:f4:
a7:07:42:af:22:9c:72:d4:64:78:5d:a0:f1:ae:b5:
23:a4:b3:fb:aa:07:f5:20:0f:c1:41:f1:30:36:82:
41:9a:b2:7d:a4:9d:1b:e0:f8:78:5d:9b:39:e5:93:
f1:a2:f9:84:6a:66:0c:f2:fd:b9:9c:8f:2d:fe:f4:
4b:15:18:f8:36:72:76:fc:76:9b:cb:fb:ac:52:2e:
c5:fc:f2:0a:82:0d:8b:62:5b:7c:d7:0d:99:da:04:
3c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2C:97:4D:5F:CC:C9:A2:7E:FA:F7:40:F9:F5:D1:4A:3A:DA:A0:57
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS19577.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.40.0/24
Signature Algorithm: sha256WithRSAEncryption
34:42:99:db:f3:b0:a4:fd:e3:84:c6:34:46:2e:29:cb:e1:99:
ae:13:84:55:cd:22:f0:38:77:84:6c:4a:6c:df:71:39:e7:e9:
cb:5e:b5:18:cf:79:8c:2f:ce:92:44:57:e3:b1:f9:0d:7e:27:
8d:d4:6c:b1:c1:4a:6f:72:b2:5f:22:02:c3:4f:f6:07:ec:c4:
df:b1:f9:fa:d9:34:76:9c:8b:4f:23:b0:c5:a8:4b:c2:d0:cd:
be:cc:c6:4b:ee:a7:2d:37:c5:bd:fd:c6:e5:a5:c0:5d:04:98:
ac:3a:52:2f:a9:69:8d:1c:53:b7:6d:1a:55:c0:a2:6e:0c:8b:
f3:31:4e:cb:48:0f:a9:52:6a:48:65:a3:18:da:55:00:3d:a2:
8f:e5:55:12:bc:21:2a:a5:66:38:97:a1:b8:6e:47:c5:e6:a4:
be:1b:cc:10:50:5f:c6:b6:b7:a3:f2:f3:da:da:10:64:4e:e1:
31:ed:a2:ac:b5:38:c4:8f:95:27:4c:41:cd:3e:91:14:07:e2:
9a:07:c4:c5:72:ed:00:eb:b8:dc:a7:e0:39:7d:c2:77:97:ba:
8c:76:16:3e:0a:e2:d4:fd:cf:f5:00:5c:26:e3:36:81:4a:43:
19:56:d3:48:da:bb:10:4a:71:1b:77:81:26:a7:98:1f:c0:25:
c9:3e:46:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 20:35:07 2025 by rpki-client