Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS53356.roa
File: AS53356.roa (raw, json)
Hash identifier: x6wXBWfX5BUbsgbB1JsdKDflcq9kxNaPagWnqJvuHbQ=
Subject key identifier: 9D:A2:BF:9F:7A:62:2A:3D:7D:71:90:7B:1D:51:AF:DE:19:4B:8E:1D
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 04E6194631C53DF50E3098704EF3CE369AF8710F
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS53356.roa
Signing time: Fri 31 Oct 2025 15:07:24 +0000
ROA not before: Fri 31 Oct 2025 15:02:24 +0000
ROA not after: Fri 30 Oct 2026 15:07:24 +0000
asID: 53356
IP address blocks: 193.32.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:e6:19:46:31:c5:3d:f5:0e:30:98:70:4e:f3:ce:36:9a:f8:71:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Oct 31 15:02:24 2025 GMT
Not After : Oct 30 15:07:24 2026 GMT
Subject: CN=9DA2BF9F7A622A3D7D71907B1D51AFDE194B8E1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:95:13:9d:7d:16:3c:09:f3:b8:a2:3d:1e:50:
23:0d:0e:8e:6c:83:54:94:5f:05:4a:a1:4b:8a:42:
fa:36:b9:ce:64:fc:76:02:bf:b7:04:fa:a4:3f:93:
71:1d:79:6d:38:26:51:d5:04:bb:87:7d:b7:90:ff:
1e:52:7a:b0:38:f4:89:7a:48:9b:4b:33:e6:38:0a:
c2:8e:07:fe:51:a6:3e:f0:19:e8:17:c3:5d:bf:df:
c2:93:04:68:51:32:5b:66:66:aa:89:a9:8e:96:d2:
1a:65:ac:5f:46:68:cc:f5:16:bc:43:71:6b:ae:5a:
d4:7e:9c:a9:90:41:ed:0a:51:97:4e:9e:90:ad:7b:
47:a6:59:05:be:45:e7:97:b9:51:ce:c2:1c:1d:fb:
3d:17:96:9d:72:bd:94:1f:31:d6:38:91:1c:f4:f7:
ff:fe:9f:2f:f6:99:fe:79:37:5c:93:cf:f8:28:2a:
3e:90:73:c1:25:3e:c3:56:71:75:5c:de:fd:4c:d7:
8d:59:88:7d:d1:e5:84:d6:d6:da:aa:1c:18:5c:79:
ec:ed:52:c5:e9:4d:bf:fc:c6:15:d8:48:b1:68:55:
38:8f:29:b9:e9:97:5a:f6:34:03:2b:c4:48:e3:ea:
ee:d6:55:8f:1f:24:41:08:12:3d:20:40:b5:10:c2:
33:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A2:BF:9F:7A:62:2A:3D:7D:71:90:7B:1D:51:AF:DE:19:4B:8E:1D
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS53356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.205.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:72:7b:8b:d6:29:ca:b8:38:78:c5:7c:48:b0:58:6c:bc:0a:
19:db:ce:99:07:aa:32:6a:da:00:73:50:d6:9a:1b:b3:ec:6b:
ac:b5:24:00:2f:7e:6c:1d:90:da:1e:a1:97:e1:53:87:8b:28:
00:40:3d:d4:7b:15:0f:c1:9d:f9:a4:ec:9f:22:62:c8:5d:1a:
c8:c2:bd:af:49:2b:3a:4c:34:49:7f:40:4d:9d:e5:e7:06:4c:
2b:7f:5a:76:d4:3e:be:d6:e3:12:50:27:11:52:06:d1:b4:2a:
59:ed:d3:09:88:0f:90:21:e8:d1:1f:f6:fd:27:88:fb:bd:99:
b3:0d:a8:b9:9c:ad:46:b1:03:50:6f:e4:a4:84:a4:db:fa:f9:
0a:37:63:5f:24:23:23:a4:de:e7:d2:78:59:88:d3:cd:a4:bd:
fd:00:b1:09:b3:0d:87:2c:e5:e2:55:50:bc:e1:17:60:ff:50:
42:32:cd:0d:6c:3e:16:df:0a:f8:94:ae:29:13:4c:52:c7:16:
d0:84:9c:9d:a8:2e:84:a0:bb:d4:25:6f:ea:a7:43:df:5c:38:
76:ac:3b:61:7e:95:b0:e1:91:6d:ee:45:3d:34:c6:18:e8:cd:
1e:d6:06:1c:b8:b6:47:d2:41:5f:e4:c5:db:e6:ec:5a:1a:e8:
90:63:29:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:38:16 2025 by rpki-client