Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS9457.roa
File: AS9457.roa (raw, json)
Hash identifier: vh45TuB/CVuobQ1rzRRxJ++kvcfsi5HIzHf5S+5+Zcc=
Subject key identifier: 69:51:41:A7:FB:13:99:A1:97:BE:C3:80:F1:1D:DF:6E:A2:E7:18:64
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 373439A050700C84AF900CB81286A315ADA76F6A
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS9457.roa
Signing time: Wed 16 Sep 2026 07:25:21 +0000
ROA not before: Wed 16 Sep 2026 07:20:21 +0000
ROA not after: Wed 15 Sep 2027 07:25:21 +0000
asID: 9457
IP address blocks: 5.199.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:34:39:a0:50:70:0c:84:af:90:0c:b8:12:86:a3:15:ad:a7:6f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:21 2026 GMT
Not After : Sep 15 07:25:21 2027 GMT
Subject: CN=695141A7FB1399A197BEC380F11DDF6EA2E71864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:91:97:e8:31:b3:b8:47:a0:2a:fa:c4:31:e4:
62:0a:c2:dc:a4:08:3a:4d:f5:da:6f:ae:8f:6b:1f:
6f:09:ed:6f:2f:aa:44:96:e2:e7:7b:77:3b:6a:99:
21:21:9e:77:bb:6b:c0:aa:85:cc:70:2f:7e:8f:83:
a7:22:96:bd:70:32:4e:34:83:7c:fa:75:a4:6f:8b:
45:b2:7b:97:5d:13:6d:a5:d4:2c:1f:8e:33:fe:2e:
ca:4b:5d:4e:9f:0f:b7:d5:29:f5:1c:60:89:da:c5:
f5:20:29:43:2e:5b:79:cf:00:cb:ff:3b:22:ba:05:
d2:ba:35:53:26:8f:88:63:30:e2:97:41:fc:f4:26:
34:e8:f6:68:fc:d6:49:10:3c:72:8c:c1:ab:fd:71:
ac:6c:ca:1a:cf:9d:55:b5:44:a2:cd:af:6d:4c:6d:
73:e3:d8:9e:9e:52:3d:1d:f5:76:c9:14:bd:eb:e3:
ed:1a:82:a6:ae:4e:92:f2:fe:b1:03:6d:46:a8:fe:
3c:19:cd:00:27:54:56:43:e0:5c:e6:2f:f6:cd:4d:
4f:dd:ec:ed:37:68:52:a9:9a:fb:42:99:0e:e4:f3:
ec:b3:e7:11:4a:52:12:2f:54:29:54:29:9e:0b:34:
b5:40:da:51:f0:81:5a:7f:2e:8c:04:85:68:c3:72:
36:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:51:41:A7:FB:13:99:A1:97:BE:C3:80:F1:1D:DF:6E:A2:E7:18:64
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS9457.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.56.0/24
Signature Algorithm: sha256WithRSAEncryption
14:3a:1b:67:a9:b2:69:69:4b:0f:aa:ef:0a:26:0d:aa:8b:c6:
0d:b5:41:0b:75:4f:66:30:4c:67:45:c2:48:81:aa:bb:85:59:
6e:1c:a4:db:ad:25:cb:57:01:44:b9:37:d7:04:08:4b:23:ff:
b3:59:31:ad:15:94:9e:1a:5b:49:44:05:d3:8d:89:9f:ca:b5:
fe:8b:e3:dd:83:d1:8e:35:90:98:70:3b:be:37:22:2c:3f:a0:
cc:07:1e:10:e7:c5:e6:85:f9:58:f0:c4:40:83:af:06:d1:59:
bc:22:77:20:36:6e:fb:62:8a:99:37:93:3e:91:03:6c:41:62:
ac:df:c9:dc:c9:cd:fa:86:1e:5b:47:38:45:6f:1a:5a:56:02:
87:ae:71:3b:0b:bd:65:d0:1f:80:8d:00:c5:fd:2c:ab:ef:2c:
4f:f8:bd:3d:7e:68:c4:3a:a8:4a:d1:6b:2d:43:f6:5b:9f:88:
da:4b:6e:2e:08:b4:ff:6c:7d:cf:ad:0d:c3:1d:b8:2c:72:99:
e7:ef:70:1f:f8:4e:f2:c3:af:cb:12:65:8f:8d:af:0f:b6:e6:
a1:3b:82:80:00:41:1e:4b:d1:48:87:a5:c7:14:4e:ee:17:fa:
b2:92:3c:aa:36:60:28:1e:5c:a8:20:74:58:f1:d8:b4:91:be:
0f:01:22:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:08:35 2026 by rpki-client