Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS57717.roa
File: AS57717.roa (raw, json)
Hash identifier: ZgDHps1MNToCCxBTZbJLwwKXAvj/69a/qjLecpkHo9s=
Subject key identifier: F7:BB:D9:26:83:18:42:A3:63:60:CF:5C:05:E4:A1:28:CF:32:AF:FB
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3F9D1954F485F7B24E24CC04944E6549C53B4DAE
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS57717.roa
Signing time: Fri 31 Jul 2026 19:15:37 +0000
ROA not before: Fri 31 Jul 2026 19:10:37 +0000
ROA not after: Fri 30 Jul 2027 19:15:37 +0000
asID: 57717
IP address blocks: 95.135.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:9d:19:54:f4:85:f7:b2:4e:24:cc:04:94:4e:65:49:c5:3b:4d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 31 19:10:37 2026 GMT
Not After : Jul 30 19:15:37 2027 GMT
Subject: CN=F7BBD926831842A36360CF5C05E4A128CF32AFFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:af:25:34:36:8e:d0:f5:35:70:de:08:87:dd:
8c:c4:b2:6c:f8:7e:f8:e6:a3:71:96:89:22:5a:24:
f9:1b:ca:c8:b3:aa:4e:3a:66:5c:d8:bd:bd:43:91:
cd:f5:98:00:b7:13:30:88:30:4a:8f:a4:bb:c1:12:
72:c1:c0:96:d1:89:ae:4a:0e:db:57:40:df:39:f2:
80:5d:22:f6:8b:71:48:0b:1e:23:c3:7e:83:0a:94:
4c:77:7b:fa:a8:90:5d:eb:d5:6f:85:a9:03:a7:e4:
2e:0a:2a:a1:6c:62:83:60:af:c7:ca:bd:e8:ac:4e:
7e:e4:ca:06:4b:75:af:60:87:41:da:7d:37:a5:23:
75:14:68:51:29:d8:65:aa:62:4a:b4:71:5c:20:f1:
87:fb:74:94:97:5c:cf:4f:8b:36:59:d7:c9:b5:96:
c9:80:43:1f:da:42:36:a0:59:b8:07:cb:6e:93:4f:
73:4b:42:ca:e2:74:8e:47:3f:93:88:da:5f:61:68:
63:74:29:0b:61:04:c1:f4:04:10:bc:f5:95:b6:0d:
b5:c3:61:4f:b1:e8:e0:90:c8:a0:ac:1d:08:8c:fa:
6a:48:a1:ce:a8:ef:60:01:97:83:01:3f:2f:6c:99:
54:75:82:5d:00:47:ec:d4:7f:40:16:f9:e0:f9:bd:
a9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BB:D9:26:83:18:42:A3:63:60:CF:5C:05:E4:A1:28:CF:32:AF:FB
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS57717.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.68.0/24
Signature Algorithm: sha256WithRSAEncryption
35:d6:4e:cf:0c:ce:d5:5c:90:1e:71:88:c3:9f:70:73:d3:c3:
b9:03:1f:cf:03:d4:a8:ff:23:1e:75:7d:31:08:b9:1f:47:b1:
cb:d9:6a:05:21:e7:bb:0f:83:76:4b:61:d8:75:3e:2d:ed:c6:
1a:14:50:5a:2e:a2:f5:03:16:5f:ea:8b:76:b4:60:f0:51:4e:
e9:6e:89:f1:ea:e1:d3:8a:d8:a7:55:09:91:17:3d:80:31:ac:
f6:47:cd:e1:2e:9e:56:68:30:e6:01:8c:c0:32:19:56:6a:64:
42:d5:e7:ca:4a:4e:be:f7:c7:1b:8e:c2:58:ee:2f:e3:f6:08:
c4:9e:c9:38:46:7b:af:d7:93:c0:61:66:b1:12:f2:21:f7:e8:
48:f1:d8:b8:36:39:2c:2b:a7:16:93:d6:b9:e9:41:20:cb:2d:
63:73:ca:29:fb:1a:b7:f1:40:d7:f3:8c:9c:ce:b3:ec:1f:0b:
40:ac:50:36:c3:a0:d1:07:d5:d8:76:d3:e0:98:76:6e:3c:4f:
9d:13:d9:d7:4a:ee:42:dc:b0:54:0e:c4:21:c9:1c:81:0b:55:
cd:b1:83:f8:98:4c:03:2d:c5:c9:3c:2b:e4:d9:82:92:11:19:
dd:38:6f:61:38:8f:17:22:ee:b4:14:7e:fd:0a:2e:8a:0a:24:
f4:63:49:2a
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUP50ZVPSF97JOJMwElE5lScU7Ta4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA3MzExOTEwMzdaFw0yNzA3MzAxOTE1MzdaMDMxMTAvBgNV
BAMTKEY3QkJEOTI2ODMxODQyQTM2MzYwQ0Y1QzA1RTRBMTI4Q0YzMkFGRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkryU0No7Q9TVw3giH3YzEsmz4
fvjmo3GWiSJaJPkbysizqk46ZlzYvb1Dkc31mAC3EzCIMEqPpLvBEnLBwJbRia5K
DttXQN858oBdIvaLcUgLHiPDfoMKlEx3e/qokF3r1W+FqQOn5C4KKqFsYoNgr8fK
veisTn7kygZLda9gh0HafTelI3UUaFEp2GWqYkq0cVwg8Yf7dJSXXM9PizZZ18m1
lsmAQx/aQjagWbgHy26TT3NLQsridI5HP5OI2l9haGN0KQthBMH0BBC89ZW2DbXD
YU+x6OCQyKCsHQiM+mpIoc6o72ABl4MBPy9smVR1gl0AR+zUf0AW+eD5vamXAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQU97vZJoMYQqNjYM9cBeShKM8yr/swHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNTc3MTcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABfh0Qw
DQYJKoZIhvcNAQELBQADggEBADXWTs8MztVckB5xiMOfcHPTw7kDH88D1Kj/Ix51
fTEIuR9HscvZagUh57sPg3ZLYdh1Pi3txhoUUFouovUDFl/qi3a0YPBRTuluifHq
4dOK2KdVCZEXPYAxrPZHzeEunlZoMOYBjMAyGVZqZELV58pKTr73xxuOwljuL+P2
CMSeyThGe6/Xk8BhZrES8iH36Ejx2Lg2OSwrpxaT1rnpQSDLLWNzyin7GrfxQNfz
jJzOs+wfC0CsUDbDoNEH1dh20+CYdm48T50T2ddK7kLcsFQOxCHJHIELVc2xg/iY
TAMtxck8K+TZgpIRGd04b2E4jxci7rQUfv0KLooKJPRjSSo=
-----END CERTIFICATE-----
Generated at Sat Aug 1 00:39:05 2026 by rpki-client