Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS33659.roa
File: AS33659.roa (raw, json)
Hash identifier: OCBqJd5SV2kmufDkF88j2j1qOxWodm2uC0NpbQcxops=
Subject key identifier: 4E:6A:09:40:DD:C3:70:38:FC:A6:E8:3D:93:E3:D5:27:13:F4:C8:8E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5A09B3FE5D585D1DD25E89C153AA8446629DB8F8
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS33659.roa
Signing time: Tue 09 Sep 2025 11:56:51 +0000
ROA not before: Tue 09 Sep 2025 11:51:51 +0000
ROA not after: Tue 08 Sep 2026 11:56:51 +0000
asID: 33659
IP address blocks: 178.93.76.0/24 maxlen: 24
178.93.77.0/24 maxlen: 24
178.93.78.0/24 maxlen: 24
178.93.79.0/24 maxlen: 24
178.93.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:09:b3:fe:5d:58:5d:1d:d2:5e:89:c1:53:aa:84:46:62:9d:b8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 9 11:51:51 2025 GMT
Not After : Sep 8 11:56:51 2026 GMT
Subject: CN=4E6A0940DDC37038FCA6E83D93E3D52713F4C88E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:24:fe:93:47:47:65:56:f1:50:3f:70:66:e0:
56:90:1f:b8:df:9a:27:53:71:43:ad:cd:49:db:ca:
94:a7:ef:83:95:1e:46:b7:db:ce:bc:25:78:a4:42:
95:d7:8d:35:52:fa:fa:28:40:17:f5:2c:ab:4a:c2:
60:02:75:e1:22:c8:a6:bd:22:36:00:68:7a:90:35:
80:4b:2e:c3:52:91:39:0a:53:45:d7:46:69:e9:e7:
0a:ec:26:ad:58:3a:0f:90:c5:e3:7b:d1:be:28:e4:
00:ed:60:c9:40:e2:f6:3f:c2:9a:4e:fc:64:a5:bd:
72:8c:0a:79:30:9d:d1:b1:f1:97:45:8f:71:11:96:
46:29:31:a6:42:51:0a:bb:75:1e:24:95:66:e8:62:
b1:3e:e8:9a:c0:9d:36:04:42:26:99:d5:5d:e5:cb:
71:05:9b:67:53:54:ba:b6:b1:fd:74:82:61:52:27:
28:0a:e4:13:5a:96:38:7f:1f:5c:b7:45:81:b5:70:
9b:ed:b5:44:4a:eb:1b:c3:80:52:6d:75:e0:f0:b6:
7a:59:40:47:c8:8c:91:f5:3b:3b:bd:d1:91:16:7c:
af:a1:48:b3:f6:b0:bf:15:cc:3f:8d:17:7d:15:c9:
dc:d3:34:7e:a8:da:67:4f:67:38:98:6c:44:89:ef:
86:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6A:09:40:DD:C3:70:38:FC:A6:E8:3D:93:E3:D5:27:13:F4:C8:8E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS33659.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.93.76.0/22
178.93.115.0/24
Signature Algorithm: sha256WithRSAEncryption
26:3d:92:1a:26:d9:68:4c:1e:4d:ad:bf:d6:0d:68:d2:22:82:
ec:fe:b8:ce:d6:1f:26:d5:40:3f:f2:74:c1:ba:46:cb:42:12:
96:a7:1b:c1:95:a4:37:f4:c8:43:71:42:de:97:5b:c5:31:f0:
5b:fa:c6:80:b0:05:c6:f9:b2:90:57:2b:df:bf:25:69:b9:4b:
08:f6:04:92:b0:cd:38:43:6f:df:48:b8:d4:71:c0:1e:d3:5b:
d2:f5:66:d7:a5:37:7b:73:5e:4a:46:12:8f:95:90:f7:f5:d0:
43:bc:72:9b:89:10:47:17:df:3a:86:1f:8b:21:ff:c3:b7:64:
9f:f3:65:e4:c4:05:57:8e:26:71:18:07:62:c4:07:fb:27:c9:
9a:37:d3:01:b2:57:3e:b5:eb:cd:09:d6:2e:6b:1c:47:2b:f9:
a1:a3:68:72:65:b9:d6:14:d5:c8:26:69:08:59:d5:8c:53:5c:
08:7d:32:76:44:27:23:02:58:07:2a:24:7c:b4:63:de:f1:a1:
ef:e4:22:8d:05:ac:b7:24:f5:ea:e4:6d:0c:4c:d3:51:7a:cc:
30:f3:66:2e:49:8a:9a:53:83:eb:d3:19:3a:27:2b:b2:76:b4:
74:8c:d4:03:6c:f9:d2:39:e0:d6:00:73:c8:fe:18:4f:1e:aa:
43:cc:92:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 20:33:50 2025 by rpki-client