Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197537.roa
File: AS197537.roa (raw, json)
Hash identifier: 87dAp5z0qftHay9N/MckknG8VL1tLCRD4o0Ufgq0TaA=
Subject key identifier: 9B:BA:44:62:83:1F:36:CD:ED:CE:4F:85:98:7A:0C:01:E6:EC:24:62
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2FEFDE97980B673EEE6849251C9AC12FB901C5C6
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197537.roa
Signing time: Mon 17 Mar 2025 06:01:17 +0000
ROA not before: Mon 17 Mar 2025 05:56:17 +0000
ROA not after: Mon 16 Mar 2026 06:01:17 +0000
asID: 197537
IP address blocks: 95.135.136.0/24 maxlen: 24
95.135.145.0/24 maxlen: 24
95.135.146.0/24 maxlen: 24
95.135.147.0/24 maxlen: 24
95.135.152.0/24 maxlen: 24
95.135.169.0/24 maxlen: 24
95.135.170.0/24 maxlen: 24
95.135.172.0/24 maxlen: 24
95.135.174.0/24 maxlen: 24
95.135.177.0/24 maxlen: 24
95.135.188.0/24 maxlen: 24
95.135.195.0/24 maxlen: 24
95.135.196.0/24 maxlen: 24
95.135.198.0/24 maxlen: 24
95.135.199.0/24 maxlen: 24
95.135.211.0/24 maxlen: 24
95.135.216.0/24 maxlen: 24
95.135.220.0/24 maxlen: 24
95.135.226.0/24 maxlen: 24
95.135.227.0/24 maxlen: 24
95.135.231.0/24 maxlen: 24
95.135.236.0/24 maxlen: 24
95.135.243.0/24 maxlen: 24
95.135.247.0/24 maxlen: 24
95.135.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:24:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:ef:de:97:98:0b:67:3e:ee:68:49:25:1c:9a:c1:2f:b9:01:c5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 17 05:56:17 2025 GMT
Not After : Mar 16 06:01:17 2026 GMT
Subject: CN=9BBA4462831F36CDEDCE4F85987A0C01E6EC2462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:6c:54:99:68:3a:92:b7:a5:13:00:a5:b3:
61:0f:81:5c:d9:24:9b:e5:8d:81:80:5e:5e:2c:e2:
2a:8b:a9:be:ba:24:bb:b6:3f:df:ed:1a:e5:a2:a0:
f4:e3:b7:92:6d:5a:ef:e2:6f:0c:01:e3:19:67:28:
58:4f:e0:5a:a5:4e:be:0e:64:72:31:f7:b8:87:ca:
f9:8b:c9:73:db:b1:f0:a5:e7:16:da:b7:cf:71:32:
a5:db:4e:d5:a3:de:f8:04:49:08:cf:ca:bd:a7:2e:
8a:be:45:ee:94:75:f2:8a:af:e0:cc:5c:eb:fc:8c:
6c:58:1c:17:be:78:94:3e:c5:0f:c0:b1:3e:b1:27:
e1:d7:95:b5:5c:ad:48:b3:f7:e2:2a:06:4b:b2:5d:
69:c4:84:d1:68:fb:ff:92:22:f9:58:ad:2b:d1:69:
fa:7d:7d:f8:e0:a1:a1:46:52:6b:8b:43:5f:05:07:
81:51:41:a5:d0:f9:63:3a:a6:9f:9e:27:04:f0:71:
6d:f1:8c:42:c9:d6:1b:64:87:20:ec:13:47:48:bd:
37:06:80:29:8a:c4:8c:90:ba:6c:52:0e:92:5a:42:
f2:1a:6e:36:9d:04:62:6a:9c:81:12:cb:05:31:50:
af:18:e8:bb:99:7d:8d:7d:2a:bc:fe:28:8e:35:25:
88:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BA:44:62:83:1F:36:CD:ED:CE:4F:85:98:7A:0C:01:E6:EC:24:62
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.136.0/24
95.135.145.0-95.135.147.255
95.135.152.0/24
95.135.169.0-95.135.170.255
95.135.172.0/24
95.135.174.0/24
95.135.177.0/24
95.135.188.0/24
95.135.195.0-95.135.196.255
95.135.198.0/23
95.135.211.0/24
95.135.216.0/24
95.135.220.0/24
95.135.226.0/23
95.135.231.0/24
95.135.236.0/24
95.135.243.0/24
95.135.247.0/24
95.135.250.0/24
Signature Algorithm: sha256WithRSAEncryption
36:b8:97:59:00:a0:2e:15:4e:5f:ab:79:21:c2:8b:ff:cc:5a:
2f:11:5a:e8:95:40:ac:5a:32:0b:b6:9c:1d:9e:1b:14:78:da:
e3:8f:d0:89:be:9b:f0:5f:b7:43:70:e1:4a:df:17:a4:15:c9:
30:35:a1:7c:f5:9c:96:f8:7a:d5:a2:1c:8e:5d:f6:92:b6:eb:
64:55:23:4e:34:31:51:51:78:c2:27:00:bf:62:08:1d:51:37:
b7:7a:7e:ff:bd:9f:b4:0a:db:32:95:6b:64:8c:4c:4f:e7:34:
25:3c:5a:0e:86:c2:d1:26:55:11:1d:ac:62:cf:5e:6b:ec:bd:
dc:41:02:32:bd:0f:06:0d:4c:25:2a:e9:ce:6f:13:c7:b8:72:
b4:84:4e:0b:ef:9d:6f:22:eb:5c:52:da:69:75:bd:70:44:b5:
44:9a:57:ca:81:7e:b8:c8:af:94:5b:a6:b1:06:7e:ab:3c:b6:
fa:2a:82:1c:7b:08:e5:f1:e4:5a:cf:e0:69:bc:58:25:b8:e2:
d9:83:fc:c5:a2:5e:93:08:fa:94:ea:9d:78:95:cd:3f:8b:19:
0b:49:c6:e6:ef:ca:e0:02:ff:88:70:ac:be:d3:b0:5f:cd:52:
b3:f2:48:ff:8d:60:d0:13:b1:b0:da:d6:d9:1c:10:2a:b6:ce:
13:4d:b9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:59 2025 by rpki-client