Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS62246.roa
File: AS62246.roa (raw, json)
Hash identifier: W5SpKtJI0u+B6QxcMo5LKzuQu2mtgOiLPbzjaDbZAWs=
Subject key identifier: 57:73:8A:DD:7C:20:83:AB:61:A1:30:1E:D3:15:BE:3F:68:AE:13:0C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4045410FB862DBAA0957023A99A507B41834D3E5
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS62246.roa
Signing time: Sat 13 Sep 2025 14:15:18 +0000
ROA not before: Sat 13 Sep 2025 14:10:18 +0000
ROA not after: Sat 12 Sep 2026 14:15:18 +0000
asID: 62246
IP address blocks: 95.134.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:45:41:0f:b8:62:db:aa:09:57:02:3a:99:a5:07:b4:18:34:d3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 13 14:10:18 2025 GMT
Not After : Sep 12 14:15:18 2026 GMT
Subject: CN=57738ADD7C2083AB61A1301ED315BE3F68AE130C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:79:f0:30:87:43:43:36:ab:7a:b2:76:e0:
e4:7d:28:d8:0c:10:39:e8:92:82:dc:2e:1c:40:66:
8f:b2:6d:4b:7b:56:19:46:fc:69:b2:dd:11:49:36:
c0:62:58:9b:07:dd:84:d9:69:58:16:d4:ea:b7:5f:
6f:a5:0c:36:c3:b0:34:fd:35:21:1a:ce:4b:c0:54:
bb:36:0a:cc:26:ee:8e:c0:49:7a:a2:d6:2d:d3:86:
0c:e2:2f:5a:f4:65:4c:3e:61:71:5a:75:80:52:85:
16:d5:dc:d0:53:f1:51:70:3f:c9:69:53:55:78:f3:
50:1b:4c:54:ce:1c:e3:47:bc:36:56:51:cd:ea:33:
9b:a1:8a:56:42:e8:0e:d5:70:3e:19:e9:54:90:0d:
5f:c2:82:ab:c4:a8:d0:48:67:7f:2f:b9:51:09:0b:
ac:e2:50:6d:72:33:6c:c7:6e:d6:79:ac:96:47:62:
06:cb:63:fe:51:39:4f:1d:d1:37:a3:ed:91:34:a9:
27:20:be:96:36:1c:8f:96:33:df:0b:aa:52:a8:cb:
5b:97:fc:81:ea:32:b4:7e:f1:ce:21:2c:b6:26:5f:
8b:31:5b:c2:9a:1b:91:b6:35:d2:ec:a8:0e:fb:8b:
9c:c8:c3:50:19:54:7b:e8:72:d6:0f:6b:aa:b3:7f:
0b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:73:8A:DD:7C:20:83:AB:61:A1:30:1E:D3:15:BE:3F:68:AE:13:0C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS62246.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:7e:f8:26:7c:3b:79:fb:4d:f2:70:9c:14:8d:cc:9b:43:82:
7d:bd:b9:a0:e9:08:2b:ea:e9:0e:04:c5:06:3a:cc:53:47:1d:
6e:fa:00:dd:e3:d3:ed:47:0b:b8:a9:26:63:3b:34:43:c7:58:
de:3c:a7:34:e7:8d:e4:db:b8:6c:00:7b:01:45:13:68:d1:8b:
6f:b6:cc:7a:04:8f:a4:bc:f9:29:c0:dd:44:56:3e:48:15:78:
33:55:26:38:7c:e6:2a:7c:32:bc:ec:8f:d3:11:c7:c7:56:a0:
4b:ef:d3:dd:aa:43:18:a4:1f:e4:a1:c0:5f:9b:2e:65:42:fe:
01:af:91:d2:da:3e:d4:71:c1:cb:db:70:63:02:a8:bb:dd:6d:
df:28:1e:8b:3a:0e:ca:54:a5:e6:4e:b9:77:55:23:a0:b0:d7:
c3:41:f9:81:cd:b6:30:df:96:2a:ee:fb:36:cf:13:ec:11:f5:
61:7a:e9:84:92:cf:6d:78:8b:d9:97:24:e6:f9:08:fa:77:64:
f0:bf:d4:a8:6d:1c:ab:ca:59:5e:85:bf:11:2c:ae:9c:12:2d:
35:98:44:cc:f7:67:4a:a5:d3:5f:50:70:d0:49:8c:09:9f:89:
94:d5:a2:c8:5a:2d:73:a5:a7:d6:10:82:be:35:dc:4d:fc:7b:
87:b3:62:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 20:31:31 2025 by rpki-client