Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS58212.roa
File: AS58212.roa (raw, json)
Hash identifier: 158Nml57svX8fonrSxqb2llK2HeS76bcrAZqQv5DSf0=
Subject key identifier: F4:A7:0B:28:80:21:D4:EC:4B:9F:53:81:25:DA:FC:7B:E0:27:A1:E3
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 26D593564EE63744171E9335AE2A07AD3780B043
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS58212.roa
Signing time: Wed 13 Aug 2025 07:38:17 +0000
ROA not before: Wed 13 Aug 2025 07:33:17 +0000
ROA not after: Wed 12 Aug 2026 07:38:17 +0000
asID: 58212
IP address blocks: 92.113.174.0/24 maxlen: 24
178.93.41.0/24 maxlen: 24
178.95.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 16:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:d5:93:56:4e:e6:37:44:17:1e:93:35:ae:2a:07:ad:37:80:b0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 13 07:33:17 2025 GMT
Not After : Aug 12 07:38:17 2026 GMT
Subject: CN=F4A70B288021D4EC4B9F538125DAFC7BE027A1E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0e:37:3e:ad:36:8c:d7:dd:66:46:1e:ca:a7:
97:35:27:65:e2:f2:d6:4f:83:5e:f0:c5:54:3e:ab:
c1:76:35:1c:e3:66:28:db:8c:22:07:1f:30:8d:63:
f9:fc:4e:06:23:9f:77:f5:da:90:01:eb:51:c4:61:
7d:e3:5d:d5:cc:57:3e:75:4f:12:de:e4:2b:19:c3:
ef:4f:d2:d2:f6:56:d4:61:6b:dc:6d:b8:3b:97:be:
89:d1:ed:6d:ea:d7:60:62:6a:30:8d:9b:f0:1f:2f:
7b:93:80:46:ac:a4:05:91:b4:7f:4f:98:06:97:aa:
2e:d3:09:8e:aa:bb:11:47:54:12:78:7d:ae:cb:2d:
c6:2e:06:23:73:67:e8:2a:5f:10:86:a3:6a:b8:5a:
20:6b:eb:da:f3:2d:9f:fd:a1:3d:b3:ec:81:77:b3:
a5:68:9f:00:ba:08:c9:81:f9:c3:c7:3a:98:f4:0e:
48:23:06:e7:bc:d1:d5:34:6c:b8:eb:aa:fb:9b:9b:
5a:9d:56:54:8d:91:0b:31:7a:71:f0:11:4b:c2:90:
0b:36:2a:9a:7e:9f:24:2c:27:67:82:31:9e:f3:71:
f4:65:61:58:5b:b4:cd:5b:ce:e5:f6:7e:b0:c6:f2:
ec:72:cf:49:76:ec:9d:b5:67:82:19:01:1b:9d:dd:
55:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A7:0B:28:80:21:D4:EC:4B:9F:53:81:25:DA:FC:7B:E0:27:A1:E3
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS58212.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.174.0/24
178.93.41.0/24
178.95.250.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:00:d8:c5:3e:43:86:a4:96:1a:9b:ce:52:4c:c7:40:66:57:
82:53:d5:ca:12:d9:96:bc:4f:5a:f8:d5:7d:ff:d4:76:9b:77:
ea:3b:19:d2:c6:5a:8e:9f:06:8f:8e:82:b8:2c:ff:39:12:16:
4a:6a:c6:48:af:0f:d1:60:9e:dd:08:6a:81:7b:0e:13:51:ae:
b7:6f:ea:8b:65:73:da:fa:98:e3:3d:f2:59:17:5c:44:97:a1:
ea:cf:62:f8:5b:5b:aa:25:27:17:e8:11:5e:6b:b1:37:1c:fc:
44:38:21:03:ed:eb:48:31:b6:6b:0f:1e:e5:66:43:09:ab:1f:
02:6e:f7:d2:51:7a:36:28:e4:13:32:e4:fa:70:c7:f8:e7:2f:
13:bc:8c:3d:4f:bd:b1:de:aa:a8:70:12:d6:2a:d8:4a:78:9b:
da:a7:84:00:ee:3a:30:53:d0:1e:09:2a:7d:e3:01:66:ef:28:
c8:d6:94:60:cf:5b:0a:da:2d:cf:a8:b0:ac:dd:85:ea:aa:d7:
f0:0e:75:50:db:35:d4:d8:31:0d:58:ec:86:80:bc:b7:ac:8f:
fb:cf:fb:d4:34:5c:bb:07:76:eb:64:9f:66:f0:c3:1e:46:36:
46:5c:38:43:c0:e5:39:19:ef:db:d5:a0:a9:d6:30:0c:95:c7:
f5:c2:9c:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Aug 21 06:05:17 2025 by rpki-client