Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS202736.roa
File: AS202736.roa (raw, json)
Hash identifier: Hy4WEVHu8K8Jfh9iR51rIuphWKnESV1nXQnYeL2verk=
Subject key identifier: EF:89:55:6C:E9:9E:7B:E2:4F:2B:16:DF:98:56:97:9E:FB:D1:8C:37
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 09B51574EFAA773396C5B623F3540F0CEC9F35C6
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS202736.roa
Signing time: Wed 06 Aug 2025 09:42:47 +0000
ROA not before: Wed 06 Aug 2025 09:37:47 +0000
ROA not after: Wed 05 Aug 2026 09:42:47 +0000
asID: 202736
IP address blocks: 176.53.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 05:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:b5:15:74:ef:aa:77:33:96:c5:b6:23:f3:54:0f:0c:ec:9f:35:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Aug 6 09:37:47 2025 GMT
Not After : Aug 5 09:42:47 2026 GMT
Subject: CN=EF89556CE99E7BE24F2B16DF9856979EFBD18C37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3e:a2:dd:7e:28:41:7c:2b:70:81:42:04:a9:
7f:27:ef:0f:d2:61:8d:71:66:a4:93:04:2a:1d:58:
dc:0b:2f:17:d8:1d:45:ef:fa:eb:95:a5:f7:5b:87:
83:56:2b:92:17:26:98:8a:32:31:c1:aa:c8:88:c9:
97:c4:28:32:86:36:84:cf:c7:e8:2f:af:85:e5:a7:
d0:cc:aa:ca:a9:92:5c:2b:88:72:f6:e8:cd:11:b0:
59:c8:73:6d:99:81:60:21:6a:86:b2:e2:74:61:70:
09:92:2d:e2:b4:d9:0a:47:f5:b2:01:ba:5b:a1:1d:
20:28:cb:8e:8d:89:44:e3:59:bf:fe:10:d8:a6:12:
21:6f:ab:28:e5:6c:92:90:01:82:3a:a5:6c:67:f9:
d6:f2:da:b9:57:a4:09:1c:7e:59:d8:a9:5e:2a:51:
21:dc:ff:97:29:10:81:df:56:2e:11:73:eb:ac:95:
e9:77:b3:8c:4e:27:92:78:fc:cc:3c:5b:2f:bc:12:
b7:86:59:bf:2c:f5:9e:14:69:3a:e8:a5:43:aa:ab:
ab:33:b3:19:6f:da:d0:d9:ee:5e:c3:76:65:89:1d:
c7:bf:8b:dd:c2:70:1f:5a:34:c2:c7:f1:3b:2e:0f:
f8:0b:0b:40:05:e8:15:a3:40:91:e3:93:56:a9:a7:
b8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:89:55:6C:E9:9E:7B:E2:4F:2B:16:DF:98:56:97:9E:FB:D1:8C:37
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS202736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.169.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:9e:7f:38:51:9c:f8:c7:ae:88:d1:ce:f7:41:2c:29:73:61:
be:67:26:e1:74:46:5d:71:6a:ce:3c:ba:a5:ac:85:cd:13:0d:
64:40:21:ee:3c:d0:13:6a:ff:f1:8e:fe:0b:2d:d1:d7:5e:e7:
0a:8b:ba:a7:85:62:7e:ab:e2:b0:13:85:c2:46:7f:0b:09:cb:
2e:4d:af:36:98:58:c7:ca:2e:84:5d:89:d6:87:37:c8:a2:63:
16:ad:7d:de:e2:85:73:94:d9:3b:f4:9d:65:ab:42:65:c4:53:
51:00:e9:73:74:f4:7d:a4:b9:2b:8d:7d:15:fa:55:a1:02:d6:
1b:79:c9:f7:e4:05:31:bf:1d:e7:51:35:51:0c:3d:a1:bc:cc:
6c:5a:c6:3a:5a:06:9d:32:b7:64:01:45:57:ca:84:08:25:ab:
93:db:fc:61:40:e6:bb:55:a2:1e:4c:af:67:fb:85:24:6f:11:
0d:ac:32:5e:9f:a7:b5:81:3b:05:b7:26:1e:49:53:00:fa:1f:
4e:aa:ce:2a:95:59:6c:a1:94:b5:b0:86:f5:43:18:b3:d9:a7:
da:35:37:f8:2b:05:ae:67:20:32:df:67:b9:a2:c0:28:9a:5b:
50:9b:a2:8d:25:3c:7b:90:22:5a:a5:64:46:90:f0:72:4f:58:
a2:bc:c9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:07:28 2025 by rpki-client