Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS23532.roa
File: AS23532.roa (raw, json)
Hash identifier: 5W5nDim7AEP/aB7ns1j8wkvQ62rOHj34yHv4j6oAPq0=
Subject key identifier: 00:86:18:AC:96:BB:4F:E6:40:D3:C3:83:38:CA:45:82:6F:E2:96:4F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6C1D413C4AF04983AF153765DE45C0C7A232E922
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS23532.roa
Signing time: Fri 25 Sep 2026 10:49:35 +0000
ROA not before: Fri 25 Sep 2026 10:44:35 +0000
ROA not after: Fri 24 Sep 2027 10:49:35 +0000
asID: 23532
IP address blocks: 95.135.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:1d:41:3c:4a:f0:49:83:af:15:37:65:de:45:c0:c7:a2:32:e9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 25 10:44:35 2026 GMT
Not After : Sep 24 10:49:35 2027 GMT
Subject: CN=008618AC96BB4FE640D3C38338CA45826FE2964F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a9:83:bb:67:50:10:76:0d:f2:a6:63:d2:e2:
e4:26:30:ec:e4:ab:d5:96:10:2e:09:b9:69:b4:e5:
26:61:6d:52:08:f4:37:68:72:fb:20:92:04:26:39:
2d:0e:8b:13:bf:86:59:98:23:11:fd:3f:4d:ce:42:
14:07:d6:7c:72:5d:60:3e:82:aa:8b:1f:02:3a:eb:
11:7c:c3:64:94:52:2e:14:7f:98:59:16:18:51:89:
6c:c6:fd:2d:f0:5e:55:12:12:5a:0c:8b:8c:87:3d:
9c:6d:79:7a:40:3b:f4:e1:26:c8:10:20:63:17:0f:
37:fb:47:9d:f8:a2:73:72:11:e9:01:59:ce:ed:84:
58:02:48:4f:96:d0:39:f6:3f:bd:5a:a1:e1:c8:91:
b5:ad:92:b1:ee:dc:47:c5:41:f0:96:70:1f:8d:95:
0b:b8:d4:4f:b3:ee:f7:4e:8d:fb:90:05:bf:e0:3f:
19:6e:b6:9d:c0:9e:f0:7e:f8:7a:d3:85:b9:60:19:
f6:e3:06:86:fd:83:b2:6c:b9:6c:f0:0f:82:dd:1a:
f0:b8:49:11:c9:ac:11:8a:75:1e:f0:c2:b7:b4:77:
ce:b4:d2:7c:df:f6:52:84:61:1e:37:40:95:f5:8c:
50:dd:1c:72:ff:b5:2a:2e:0d:4e:3d:ee:74:91:23:
52:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:86:18:AC:96:BB:4F:E6:40:D3:C3:83:38:CA:45:82:6F:E2:96:4F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS23532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.188.0/24
Signature Algorithm: sha256WithRSAEncryption
05:84:11:d7:39:0b:67:af:8b:d5:79:47:17:1e:76:6a:6a:42:
7f:ee:8f:6f:a1:20:de:04:6c:8f:13:ba:ff:47:a1:84:7a:15:
69:9e:1a:7d:de:4f:f5:11:0b:c9:d4:ed:cb:dd:df:dc:6d:5d:
05:a3:df:34:91:49:cc:f9:3a:f3:e4:80:0f:19:de:77:22:05:
1a:88:81:02:5f:7b:93:1f:76:0e:2d:fa:4f:94:15:cc:33:03:
83:f9:93:c6:3f:e7:27:62:0f:5b:99:19:d5:b2:3d:d3:2e:a8:
89:ad:c2:a8:fd:79:38:bd:c8:b8:54:e2:64:1d:42:82:48:4a:
5f:a5:07:ab:57:8a:ae:a2:00:14:82:20:85:cb:d3:02:dd:03:
1c:9c:27:ce:29:54:ac:89:6b:8a:6e:9f:38:02:18:f9:df:17:
ae:1c:b4:16:2d:4d:2c:d8:20:c2:df:e3:ae:e0:d5:80:4a:c1:
3a:eb:f0:7a:a1:fa:16:9c:0d:82:e6:86:c0:18:c1:0a:94:df:
06:a5:81:c0:ba:ff:d4:2a:2d:a5:1f:5f:22:37:2f:38:2a:fd:
df:ed:f8:4a:97:ec:12:9c:30:0b:a0:33:af:29:cf:cf:22:01:
f2:2b:49:51:5f:70:d9:8c:51:23:ca:91:7f:9a:bf:90:ad:df:
5f:50:6a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 16:36:56 2026 by rpki-client