Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5065.roa
File: AS5065.roa (raw, json)
Hash identifier: jNZlbt8c+KybiOuMdtNsFhRVHOOvdwlH8CeTDvvNRJo=
Subject key identifier: 25:A2:9D:7C:E9:EC:BE:63:B4:73:25:0B:DE:F1:95:03:EA:14:F8:5F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0159D49D5CE2A38C8F30BF782FC4A16A3265642C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5065.roa
Signing time: Mon 28 Sep 2026 02:55:30 +0000
ROA not before: Mon 28 Sep 2026 02:50:30 +0000
ROA not after: Mon 27 Sep 2027 02:55:30 +0000
asID: 5065
IP address blocks: 92.112.158.0/24 maxlen: 24
95.135.52.0/23 maxlen: 24
95.135.56.0/23 maxlen: 24
95.135.74.0/23 maxlen: 24
95.135.86.0/23 maxlen: 24
95.135.92.0/23 maxlen: 24
95.135.94.0/23 maxlen: 24
95.135.106.0/23 maxlen: 24
95.135.108.0/24 maxlen: 24
95.135.118.0/24 maxlen: 24
95.135.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:59:d4:9d:5c:e2:a3:8c:8f:30:bf:78:2f:c4:a1:6a:32:65:64:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 28 02:50:30 2026 GMT
Not After : Sep 27 02:55:30 2027 GMT
Subject: CN=25A29D7CE9ECBE63B473250BDEF19503EA14F85F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4c:6d:97:dc:be:82:88:78:59:c0:46:cc:82:
d9:d7:26:ef:67:8e:7d:8b:e9:cd:fa:a1:31:7e:44:
93:22:1c:51:60:77:8b:09:fa:43:c1:f8:79:42:fb:
9d:95:aa:eb:7d:9a:97:93:73:ae:1d:c0:b6:86:e0:
e6:30:8d:94:78:16:e7:f5:fa:a3:0f:d9:9a:c2:15:
d5:18:8d:78:41:ca:86:74:de:fe:f8:2c:cf:60:a1:
1c:1e:8a:21:c3:30:c5:f3:02:4d:89:d0:3b:62:c5:
59:2e:02:b5:e3:0e:91:0a:53:77:72:de:a1:b9:59:
75:ed:c7:c8:31:1b:f1:f7:ba:f8:de:e8:45:d0:7e:
8d:f3:34:04:cc:9d:45:f3:05:88:c4:24:93:67:42:
0d:a9:ed:3a:f8:bf:81:87:18:3e:83:cd:17:36:45:
d1:93:6a:12:c9:78:5d:25:71:aa:38:0f:08:ad:76:
e7:c6:d6:3f:ff:c2:d2:96:43:6c:2e:36:03:18:6e:
d7:ff:db:5a:35:69:6c:ab:7f:1e:e2:a7:93:7f:25:
e9:50:ce:f8:0b:19:db:83:ea:96:77:d9:c9:79:5c:
b6:f4:4f:3b:49:9a:db:4e:21:21:f9:97:ae:b5:9c:
05:46:e6:f6:52:81:33:62:d9:ec:7a:f7:40:be:1b:
85:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A2:9D:7C:E9:EC:BE:63:B4:73:25:0B:DE:F1:95:03:EA:14:F8:5F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5065.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.158.0/24
95.135.52.0/23
95.135.56.0/23
95.135.74.0/23
95.135.86.0/23
95.135.92.0/22
95.135.106.0-95.135.108.255
95.135.118.0/24
95.135.246.0/24
Signature Algorithm: sha256WithRSAEncryption
94:15:db:fe:cc:2d:e4:08:a1:4a:74:6d:4f:49:d7:d7:1e:0f:
94:e5:f7:7f:4a:01:c0:b2:90:ca:17:87:83:30:b7:fd:6d:ce:
f3:e4:01:bb:13:f4:c4:97:a1:e3:a7:38:98:8a:19:4e:07:fa:
3a:85:e0:3b:98:09:4c:17:c0:7a:bc:04:92:fe:63:3f:17:f5:
17:c7:f4:01:6b:51:45:a1:85:8f:14:28:88:67:5a:34:7e:bb:
12:ca:2f:bb:97:c3:20:dd:8a:94:a3:0c:1f:d2:b3:a8:03:aa:
7d:75:37:57:a6:54:01:71:57:42:84:08:77:59:21:de:bb:c8:
d1:69:19:3e:38:2a:d4:5e:04:3e:bd:28:0a:c7:75:7b:4e:22:
67:dc:9b:2e:d3:50:d3:49:3c:2e:1d:ac:56:b1:f8:c4:07:23:
3d:92:4e:53:87:c2:76:ff:5c:5d:d2:c8:0c:94:78:38:1a:65:
03:64:05:b6:b2:e5:3a:29:a5:1d:e0:2a:07:7b:71:92:1d:ff:
d6:b4:53:35:9d:b7:dc:c7:92:53:dd:00:40:6e:75:18:11:41:
30:13:00:1b:2f:68:11:eb:37:59:aa:8d:e0:55:3c:95:0e:94:
5b:17:93:e4:90:31:11:f0:0f:db:9f:59:93:dd:37:8c:4c:e6:
94:ee:1e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 16:22:32 2026 by rpki-client