Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215418.roa
File: AS215418.roa (raw, json)
Hash identifier: I2drwMg52puIMiUeB06a/srB5+Ah23iVlq7xL3XPQaY=
Subject key identifier: 0E:BB:E9:72:52:48:A8:47:9B:E3:CA:CB:BD:94:26:1C:C7:74:7F:44
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 41D2C6B3AF64DEB530A2B150BC00438AB7513FF0
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215418.roa
Signing time: Tue 07 Oct 2025 14:34:26 +0000
ROA not before: Tue 07 Oct 2025 14:29:26 +0000
ROA not after: Tue 06 Oct 2026 14:34:26 +0000
asID: 215418
IP address blocks: 185.36.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Oct 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:d2:c6:b3:af:64:de:b5:30:a2:b1:50:bc:00:43:8a:b7:51:3f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 7 14:29:26 2025 GMT
Not After : Oct 6 14:34:26 2026 GMT
Subject: CN=0EBBE9725248A8479BE3CACBBD94261CC7747F44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:98:bd:b2:89:1c:24:c3:23:19:04:80:92:
dd:27:97:b8:5d:59:00:fd:ea:d6:44:5a:5a:ba:be:
db:56:1f:6b:fb:5e:33:2f:eb:a0:e9:22:79:6c:63:
e9:96:e3:6e:e5:1f:1f:00:32:8d:46:25:b9:48:35:
92:5a:e4:8f:20:53:00:5a:ad:df:78:27:10:19:31:
92:5a:99:54:65:8d:71:a3:dd:0f:fa:5f:b4:c5:02:
d2:d7:c4:f4:c2:97:23:af:7a:12:b9:9d:60:b4:f1:
ae:60:21:4a:88:2b:fe:3a:3b:e7:28:89:b6:ff:6e:
9c:09:bd:60:05:31:8c:e7:26:8f:31:d4:65:d3:7e:
57:8b:dc:01:7d:e2:0f:01:3d:9f:63:8d:b8:7e:37:
9e:2a:d3:db:48:b2:39:ce:a0:85:05:c5:57:06:b7:
69:c4:fe:6e:e1:f8:c9:1b:c1:df:4c:d5:fc:cf:12:
b8:c1:75:fd:24:86:d3:80:86:ce:a2:96:5c:f1:99:
db:9e:38:e1:4d:25:81:18:18:38:36:aa:15:2e:82:
24:a6:81:98:6b:e5:1d:6b:00:7a:c5:c2:b8:eb:d9:
08:f5:c9:1d:e9:a3:dc:08:2b:a3:86:3d:46:e9:91:
b7:2d:7d:9c:c6:31:f1:d6:64:3c:3c:e6:a2:5c:a7:
11:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BB:E9:72:52:48:A8:47:9B:E3:CA:CB:BD:94:26:1C:C7:74:7F:44
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215418.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.58.0/24
Signature Algorithm: sha256WithRSAEncryption
24:29:8f:f8:93:69:3d:18:60:e5:56:93:ad:81:53:a1:e0:07:
5f:fa:a0:cc:89:32:f8:44:bc:e9:89:97:9f:d0:d1:20:39:64:
e1:45:98:87:3c:ad:f7:2d:91:dc:24:a3:97:34:7c:29:80:83:
fc:b8:16:b1:f1:b8:07:35:89:8f:1b:e4:b1:ce:ea:9e:a9:54:
e7:64:c3:cb:fc:5a:19:89:5c:ed:05:9f:6e:54:7c:88:91:4c:
8d:20:a5:e9:fd:2a:9b:b4:12:ff:22:b1:ae:54:7c:62:e6:1a:
c5:77:11:d8:4a:f9:4c:58:06:fc:be:c3:f7:f8:37:4a:7c:6e:
c0:1a:cb:92:88:87:35:9a:77:ab:d7:f6:4a:4f:cc:c4:0c:66:
36:53:a7:71:ad:86:f9:4e:c9:b2:e3:cd:62:08:5e:72:8a:be:
29:a5:79:43:2e:82:7e:cf:eb:24:3f:7f:b3:39:e7:1d:e5:0f:
23:eb:ac:80:08:98:43:c4:d8:08:7f:f5:92:b6:2b:1e:7f:54:
2a:ec:56:90:13:08:36:6f:e4:55:4f:f7:89:09:7f:32:e6:02:
e0:08:7f:bb:b6:0a:db:f8:09:da:74:c8:ab:23:db:fc:0c:ea:
ce:1c:23:86:a6:12:a7:4f:f4:51:88:e9:df:ca:40:74:8e:95:
19:43:c2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 21:27:47 2025 by rpki-client