Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS39798.roa
File: AS39798.roa (raw, json)
Hash identifier: HOid86QSSQP05rwxWFRoO3ZEsxd1v7pdgl/4qj9m8HA=
Subject key identifier: E9:A5:C7:A9:9A:24:88:B1:33:2A:FD:A6:50:70:0F:D7:2B:EB:7C:0A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 73523ADD624388B373CADDDB68181A5775005765
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS39798.roa
Signing time: Thu 30 Oct 2025 08:55:11 +0000
ROA not before: Thu 30 Oct 2025 08:50:11 +0000
ROA not after: Thu 29 Oct 2026 08:55:11 +0000
asID: 39798
IP address blocks: 185.145.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:52:3a:dd:62:43:88:b3:73:ca:dd:db:68:18:1a:57:75:00:57:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 30 08:50:11 2025 GMT
Not After : Oct 29 08:55:11 2026 GMT
Subject: CN=E9A5C7A99A2488B1332AFDA650700FD72BEB7C0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:23:38:2b:e1:a9:b8:aa:9b:ca:4a:8b:8e:33:
43:1f:90:c0:05:a3:1d:a8:5d:d4:83:7d:8e:df:23:
b3:63:a4:65:99:59:6e:2a:c4:38:53:e4:02:b0:40:
50:4f:ea:d4:fb:5b:43:ff:61:8c:38:bd:8a:b5:59:
91:4a:25:2e:16:a9:7b:5b:5e:4f:05:53:7e:44:44:
28:95:bb:8c:92:89:4d:f6:91:8d:5d:c4:39:97:71:
1d:9b:bc:7d:51:dc:c9:e1:2b:3c:56:c8:4d:11:4e:
a5:76:8f:85:73:cf:9f:e6:13:28:68:04:fb:11:ff:
e2:a9:44:56:85:99:d3:8f:86:5d:12:45:76:cb:c9:
14:d9:8c:71:1d:b3:b3:cd:15:55:cc:ab:1a:d8:4f:
a0:60:3e:e3:b4:22:ee:99:57:6a:f5:03:1e:7e:60:
0d:ad:c7:e5:f3:4f:77:c3:44:bd:55:fc:1a:b3:23:
89:57:7c:be:86:69:66:f9:95:9f:14:c5:38:3e:27:
91:38:0c:14:12:c4:20:f4:2b:eb:ba:69:e5:42:e0:
bc:14:a0:d5:c1:d7:62:6e:26:65:4a:01:66:99:56:
97:37:bf:33:1b:cc:cc:70:54:de:d9:86:21:5e:a4:
39:df:1d:4c:a6:9a:20:67:44:76:88:41:46:a6:77:
5c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A5:C7:A9:9A:24:88:B1:33:2A:FD:A6:50:70:0F:D7:2B:EB:7C:0A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS39798.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.37.0/24
Signature Algorithm: sha256WithRSAEncryption
07:67:02:1e:f7:0f:9b:b8:e7:ce:f6:c9:18:f7:70:18:d9:ec:
d0:cf:1d:87:ea:83:c3:c3:8f:f6:86:06:a6:77:43:c6:aa:6b:
5a:59:6e:1a:ad:a1:d5:06:60:49:03:40:2b:e6:c9:4e:74:96:
cd:74:27:55:eb:c8:1e:be:bd:af:66:6c:46:12:d3:e1:8f:93:
3f:73:ce:b2:6c:8a:a4:dd:9d:fd:b5:a2:0b:b4:9f:90:33:db:
b4:0b:ce:97:a9:fe:45:43:62:7a:15:7a:32:28:c1:58:c4:6c:
64:62:15:8b:b5:ee:fa:3b:9d:9e:a3:02:5a:c9:c1:be:c1:79:
6c:f3:60:24:e9:58:6e:a1:76:79:fe:c7:67:1d:d9:5e:34:08:
38:34:76:67:b0:2c:b9:e1:ca:bb:c8:65:3c:ad:2b:20:10:b5:
2d:02:19:c3:22:8d:b7:72:36:65:7e:bd:fe:82:5b:cb:5a:82:
9e:8b:6c:93:77:08:f6:2b:ae:eb:14:36:7b:f1:19:3f:68:06:
dd:87:30:c2:a9:1c:16:0e:48:df:94:34:e0:37:15:08:77:d9:
13:6b:84:0c:59:07:f8:e2:43:e6:b7:11:52:23:60:9d:f8:da:
82:3b:bb:da:30:b4:57:0e:66:1e:ad:39:06:95:bd:50:0a:ee:
a3:6f:99:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:08:51 2025 by rpki-client