Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS4593.roa
File: AS4593.roa (raw, json)
Hash identifier: Gv3qWwKtZ5Q95syn8LFd4SrazEm+naP0PRhkEKTflGY=
Subject key identifier: 4A:3A:FE:50:12:65:21:76:C7:67:C0:69:00:7D:90:F0:B5:9F:A0:BF
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 36D1B0FF0F3FED3BDDB44CBD6F4E45E2E299C29E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS4593.roa
Signing time: Sat 16 May 2026 04:01:17 +0000
ROA not before: Sat 16 May 2026 03:56:17 +0000
ROA not after: Sat 15 May 2027 04:01:17 +0000
asID: 4593
IP address blocks: 95.135.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:d1:b0:ff:0f:3f:ed:3b:dd:b4:4c:bd:6f:4e:45:e2:e2:99:c2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 16 03:56:17 2026 GMT
Not After : May 15 04:01:17 2027 GMT
Subject: CN=4A3AFE5012652176C767C069007D90F0B59FA0BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:e3:36:da:d7:97:18:75:a7:75:ff:2b:24:49:
f8:b8:04:06:30:6b:50:25:ef:8d:70:b7:a3:d6:46:
f1:7d:7e:a0:66:52:2b:bb:06:72:c9:e7:c9:e9:ca:
65:3f:98:0b:b1:40:c3:f3:8e:93:cc:60:87:53:ad:
3b:8b:99:c7:e8:d3:25:ac:7c:ed:61:bc:ed:da:8c:
a4:dd:e0:ee:11:00:19:14:8d:bc:d9:c3:5b:38:b8:
1e:a3:5a:3b:41:ab:e0:90:74:2b:ad:4c:12:87:9b:
c1:70:99:08:08:33:06:5d:86:3c:4a:54:ff:4c:4d:
5b:df:63:6f:9c:d6:7e:67:25:b1:f4:77:53:44:60:
29:af:a7:90:3b:08:db:c4:54:e7:1a:95:17:d3:35:
17:98:13:ca:6d:7d:fc:56:c0:51:56:e6:bc:f3:76:
f5:d6:ee:fd:2e:02:9a:02:fd:ee:e8:a7:c3:ff:32:
4e:0e:b3:c3:28:4a:21:57:4d:2b:e8:46:ff:91:81:
57:4d:7d:47:20:73:34:9b:4a:13:39:ff:ac:e8:53:
3f:73:09:3a:38:a8:32:c1:5f:22:f9:bb:9c:2e:55:
f5:b4:c8:3b:7c:5d:a5:e5:0f:8c:a5:9a:13:9a:13:
b8:bd:c7:55:bd:d0:cd:5b:79:50:eb:f3:01:e7:3e:
0f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3A:FE:50:12:65:21:76:C7:67:C0:69:00:7D:90:F0:B5:9F:A0:BF
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS4593.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.203.0/24
Signature Algorithm: sha256WithRSAEncryption
60:43:15:0b:00:48:3d:d0:1a:78:9d:03:10:7f:29:57:dd:20:
66:bc:54:88:62:c2:e7:8e:a4:f6:e1:7d:e8:db:b8:f9:43:3b:
0a:62:d6:88:b2:cf:8d:e9:4d:86:86:7f:2a:ec:cb:4d:18:fb:
f2:12:16:dc:05:03:2e:33:42:48:d0:19:b9:75:af:df:f6:c8:
a2:92:ee:bd:88:9c:e3:70:14:81:ff:40:6f:2f:03:31:c5:b1:
23:1e:18:af:58:d0:f1:24:ae:98:a9:cc:bc:76:a9:92:64:11:
aa:3f:2f:60:f3:01:59:d1:53:ff:34:09:ea:8b:7d:1e:7d:f0:
47:a8:aa:79:12:0f:e1:05:30:e2:35:a1:a1:de:56:c9:ff:70:
8d:2e:9b:c1:10:e0:37:44:04:dd:2d:a1:8f:c3:78:52:67:09:
a7:6b:db:9f:a2:88:9e:fb:cc:7e:fa:f3:81:9d:77:d9:9a:23:
35:71:a7:64:84:2a:44:a9:87:17:fd:06:09:64:0a:f6:f7:e0:
d2:b0:23:36:5b:12:2f:39:67:ad:a5:4f:b8:ac:1a:54:a9:35:
ee:49:fe:32:d6:68:77:56:04:ff:e6:92:fc:14:22:d8:27:2f:
de:b5:1a:8b:95:10:73:74:4b:32:89:bf:ca:f5:43:d4:87:19:
e6:53:47:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 03:14:01 2026 by rpki-client