Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS58212.roa
File: AS58212.roa (raw, json)
Hash identifier: lHBjVRY34YMPHsJU5+ds3dnC/ljxHg3b3EwDHhZrgoQ=
Subject key identifier: 03:BC:5B:51:45:B2:52:32:C8:9C:9D:23:0F:9E:C0:9E:90:4B:BE:B9
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4278B9F4951C6FA4C2FD897162F4A8C61EC59E28
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS58212.roa
Signing time: Sun 12 Oct 2025 00:02:13 +0000
ROA not before: Sat 11 Oct 2025 23:57:13 +0000
ROA not after: Sun 11 Oct 2026 00:02:13 +0000
asID: 58212
IP address blocks: 92.113.174.0/24 maxlen: 24
92.113.253.0/24 maxlen: 24
178.92.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Oct 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:78:b9:f4:95:1c:6f:a4:c2:fd:89:71:62:f4:a8:c6:1e:c5:9e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 11 23:57:13 2025 GMT
Not After : Oct 11 00:02:13 2026 GMT
Subject: CN=03BC5B5145B25232C89C9D230F9EC09E904BBEB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:48:65:8c:78:25:50:01:67:a2:7a:bf:2a:af:
71:5e:e5:59:03:38:25:0d:f8:ad:cf:70:29:98:78:
86:2d:63:37:89:44:c3:5e:60:50:e7:24:5c:21:4b:
05:dc:58:da:54:69:6f:32:77:d9:40:47:49:f8:98:
c6:08:8a:a4:97:b0:19:29:a5:2c:65:5f:07:93:a6:
25:10:52:6d:9c:27:ca:9c:6d:73:e0:85:ec:0a:40:
7f:0b:15:54:71:4d:c1:59:65:3e:37:b8:49:ee:b8:
33:26:3b:56:ed:b8:da:96:bf:6e:2a:ff:b1:53:d1:
81:09:c4:94:c1:15:ae:cc:ed:e6:36:9e:e4:1a:6c:
f7:41:a9:8a:8f:10:ec:2d:0d:d9:97:06:a6:5d:16:
76:d1:f4:a7:06:25:b6:d5:8e:2a:34:63:2e:4c:34:
71:1f:11:8c:ae:d4:a7:2a:a0:52:82:8f:93:3c:20:
f7:76:fd:7d:b8:01:01:23:7f:b6:b6:5c:7d:a1:3d:
08:45:0e:89:04:99:17:be:c2:38:4e:17:6a:fc:da:
82:08:24:8f:63:1f:08:02:26:96:5c:d2:00:37:dd:
69:89:9f:97:89:b1:9e:af:39:8b:3c:c6:1c:ca:b4:
67:90:c1:f9:fc:8d:62:32:d4:00:40:4c:0d:2b:9b:
7b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BC:5B:51:45:B2:52:32:C8:9C:9D:23:0F:9E:C0:9E:90:4B:BE:B9
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS58212.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.174.0/24
92.113.253.0/24
178.92.100.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:a6:53:78:29:e1:45:fb:08:0a:0b:68:d0:bf:4b:4b:84:a2:
cf:05:f8:d2:9f:08:df:8f:e0:8a:30:f6:0c:b8:ce:da:b9:94:
c7:1d:06:e6:11:16:7c:aa:00:e8:6f:60:2b:41:e9:3e:5d:bf:
8f:76:dd:e6:f7:b5:4a:a2:5c:4b:8e:08:45:51:4d:64:8a:5b:
b5:bd:00:ca:cc:6b:da:43:3b:9b:57:9e:53:f7:f4:ab:90:8a:
f0:92:06:ad:b3:b9:2d:b7:c7:d2:53:eb:2f:d6:eb:bf:10:53:
27:c4:96:7a:ac:61:15:60:31:5f:a7:bd:96:27:11:03:a4:82:
64:63:33:02:97:ac:a7:c2:7a:fa:cb:6b:d3:2e:9c:60:f5:ef:
88:37:23:b2:2f:a3:f5:da:d7:75:cd:1a:6c:91:76:9b:39:4b:
b0:ed:ee:e2:f1:f8:47:9c:b9:fa:55:47:d8:b4:7a:31:6e:ea:
56:86:e5:04:d6:ae:82:a1:bc:92:43:f3:bf:fc:c0:fa:b0:a8:
9a:bb:04:37:8a:91:01:30:af:86:32:90:41:d0:2d:9f:b6:a7:
40:28:03:6c:e2:2e:64:d7:82:c8:c1:90:6f:43:55:9e:15:28:
50:73:55:c3:15:03:22:c4:c2:33:d0:e9:d2:cd:b6:81:d4:c5:
71:87:1e:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 16 21:31:12 2025 by rpki-client