Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53356.roa
File: AS53356.roa (raw, json)
Hash identifier: 3EcBY+Gdu/4SxDwxEjkjUjML6z4/Jo7KcDWrwugFx1I=
Subject key identifier: 09:40:87:4F:3B:2D:25:0B:63:6E:68:DF:1D:7A:3C:41:BB:5E:9C:7B
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 52BEF2112F785F6003CF830182075D44582AD128
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53356.roa
Signing time: Tue 02 Sep 2025 18:25:01 +0000
ROA not before: Tue 02 Sep 2025 18:20:01 +0000
ROA not after: Tue 01 Sep 2026 18:25:01 +0000
asID: 53356
IP address blocks: 92.113.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:03:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:be:f2:11:2f:78:5f:60:03:cf:83:01:82:07:5d:44:58:2a:d1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 2 18:20:01 2025 GMT
Not After : Sep 1 18:25:01 2026 GMT
Subject: CN=0940874F3B2D250B636E68DF1D7A3C41BB5E9C7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9d:6f:cf:20:7f:4c:80:c2:b8:a2:1d:29:ce:
31:ad:84:8c:a3:76:8a:5d:12:e2:4f:13:cf:21:01:
38:2f:d2:52:ec:05:f9:75:6a:51:f0:17:b4:97:20:
95:c6:24:90:e1:af:9c:cb:b5:77:de:42:76:86:79:
8b:f1:7c:4b:eb:8f:75:87:27:33:68:56:68:83:50:
07:00:34:54:75:93:56:f1:79:83:ef:38:d1:d9:3e:
51:24:e9:b1:1a:f9:c4:7b:b2:80:e1:fc:af:3f:50:
d9:88:b1:5a:ec:e2:f3:5f:c4:10:08:d4:f0:af:c5:
e1:64:50:db:5c:bf:65:fd:d1:ce:20:78:9c:24:a6:
5f:c8:66:e1:8e:cb:12:66:51:e3:94:4d:42:1c:cd:
54:e2:f6:f4:7c:55:38:ac:e9:8a:bb:a2:9d:35:a6:
55:47:e5:2d:65:db:4f:5c:9c:67:6b:2d:b5:c5:22:
0e:f9:52:b1:07:5c:d0:26:5e:48:19:ad:8a:dd:88:
2e:d9:c2:62:36:0f:f2:79:66:d5:06:2f:06:49:a9:
a1:28:3a:19:c0:39:f5:39:cb:f7:53:92:2b:a4:47:
1a:a8:53:df:2e:76:df:b2:ca:69:7e:05:f1:f6:68:
69:94:20:fd:13:2d:a0:e9:0d:09:fa:90:e9:b5:a6:
bb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:40:87:4F:3B:2D:25:0B:63:6E:68:DF:1D:7A:3C:41:BB:5E:9C:7B
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.184.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a0:cc:60:fd:4a:6e:88:18:b6:f0:fa:f3:30:dd:b3:f8:93:
98:7d:dd:a3:c4:b6:ec:c9:7d:9f:9f:7f:8a:fc:6a:ba:42:78:
52:00:02:1d:8c:f3:32:02:16:62:39:a8:16:6d:40:1e:46:70:
34:bf:04:85:8e:6c:d5:d7:83:7d:87:83:48:e8:99:d4:c6:8d:
73:48:72:d8:da:45:0f:e8:95:28:72:e1:3d:99:e7:1a:e0:ee:
65:15:e6:a1:4b:36:e3:05:72:35:5d:a9:53:14:fb:74:92:f2:
22:82:7d:09:72:11:ae:6d:0a:72:10:d2:b6:8a:75:5a:c9:ef:
70:94:a6:93:8a:49:1c:88:5a:70:d2:72:20:81:8b:63:c1:b6:
93:ee:81:06:a0:51:c1:b1:2d:eb:79:d5:5c:04:b6:b3:b0:33:
a3:7a:f8:83:70:1b:34:9a:9a:72:fa:35:98:3c:65:fb:d4:b8:
96:ee:0c:05:44:3a:2f:28:77:45:b0:af:ad:20:4f:e0:87:bb:
2f:24:11:b0:5c:25:48:f9:1e:ad:02:73:cb:3a:8e:0a:a3:b5:
fd:e9:60:06:f6:b9:55:7a:42:39:bd:1b:0f:6e:76:ca:61:cd:
4b:77:1a:02:73:2f:04:1a:08:f9:72:72:bc:63:98:db:71:5f:
d4:84:ee:a4
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUUr7yES94X2ADz4MBggddRFgq0SgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA5MDIxODIwMDFaFw0yNjA5MDExODI1MDFaMDMxMTAvBgNV
BAMTKDA5NDA4NzRGM0IyRDI1MEI2MzZFNjhERjFEN0EzQzQxQkI1RTlDN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8nW/PIH9MgMK4oh0pzjGthIyj
dopdEuJPE88hATgv0lLsBfl1alHwF7SXIJXGJJDhr5zLtXfeQnaGeYvxfEvrj3WH
JzNoVmiDUAcANFR1k1bxeYPvONHZPlEk6bEa+cR7soDh/K8/UNmIsVrs4vNfxBAI
1PCvxeFkUNtcv2X90c4geJwkpl/IZuGOyxJmUeOUTUIczVTi9vR8VTis6Yq7op01
plVH5S1l209cnGdrLbXFIg75UrEHXNAmXkgZrYrdiC7ZwmI2D/J5ZtUGLwZJqaEo
OhnAOfU5y/dTkiukRxqoU98udt+yyml+BfH2aGmUIP0TLaDpDQn6kOm1prv3AgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUCUCHTzstJQtjbmjfHXo8QbtenHswHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNTMzNTYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABccbgw
DQYJKoZIhvcNAQELBQADggEBABagzGD9Sm6IGLbw+vMw3bP4k5h93aPEtuzJfZ+f
f4r8arpCeFIAAh2M8zICFmI5qBZtQB5GcDS/BIWObNXXg32Hg0jomdTGjXNIctja
RQ/olShy4T2Z5xrg7mUV5qFLNuMFcjVdqVMU+3SS8iKCfQlyEa5tCnIQ0raKdVrJ
73CUppOKSRyIWnDSciCBi2PBtpPugQagUcGxLet51VwEtrOwM6N6+INwGzSamnL6
NZg8ZfvUuJbuDAVEOi8od0Wwr60gT+CHuy8kEbBcJUj5Hq0Cc8s6jgqjtf3pYAb2
uVV6Qjm9Gw9udsphzUt3GgJzLwQaCPlycrxjmNtxX9SE7qQ=
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:55 2025 by rpki-client