Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: MuI7PGs5U4V9H/hUY9RxLw6W8y2JPUBgEad3xYHSS8M=
Subject key identifier: D7:2C:99:81:D6:17:F0:B2:AA:B0:56:E0:4E:C3:C8:9F:07:A0:E1:B7
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 5163737EB1A1EBB7320EB6F96926524ED1929644
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS834.roa
Signing time: Tue 29 Jul 2025 00:03:06 +0000
ROA not before: Mon 28 Jul 2025 23:58:06 +0000
ROA not after: Tue 28 Jul 2026 00:03:06 +0000
asID: 834
IP address blocks: 176.53.169.0/24 maxlen: 24
188.119.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:63:73:7e:b1:a1:eb:b7:32:0e:b6:f9:69:26:52:4e:d1:92:96:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jul 28 23:58:06 2025 GMT
Not After : Jul 28 00:03:06 2026 GMT
Subject: CN=D72C9981D617F0B2AAB056E04EC3C89F07A0E1B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:e9:07:ac:3d:23:4c:ed:2a:37:45:f8:94:
ff:d8:27:2f:aa:5c:e4:9e:6c:38:ef:cf:38:04:ad:
6f:a3:3b:6a:9e:8a:94:ae:01:2c:a9:55:55:54:dd:
bf:52:9f:41:df:44:8f:b3:a7:28:eb:ed:07:55:e8:
76:fc:25:55:4a:4c:9f:02:ba:47:98:f7:78:d2:99:
16:94:15:cf:45:b7:6c:eb:57:b2:38:63:e1:45:9d:
83:a6:11:79:eb:eb:21:bb:92:c1:da:5f:ac:2c:6b:
6d:b9:da:b7:25:aa:2a:66:b0:0f:2f:45:23:13:ab:
d6:9f:da:f4:75:45:52:19:11:fb:30:f4:b7:a8:f9:
a7:8c:60:1a:5a:22:82:1d:eb:85:35:89:58:fc:70:
29:8b:8b:98:13:be:3d:4e:2b:84:07:0a:d3:50:94:
63:0b:6f:94:01:d9:28:ab:dd:dc:eb:ff:fd:ee:ab:
0e:bf:46:91:e9:2e:bc:b2:cc:19:aa:a1:53:74:2e:
ed:4c:30:ae:ed:97:cb:5b:11:52:f0:01:f3:91:b6:
76:a1:72:61:01:b6:c5:8f:f5:18:95:6a:20:a5:44:
1d:cb:95:2d:44:41:52:e1:6a:59:49:91:37:9f:5e:
49:6e:f3:b7:97:e4:dc:19:99:91:e1:d9:c7:bf:fe:
f5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2C:99:81:D6:17:F0:B2:AA:B0:56:E0:4E:C3:C8:9F:07:A0:E1:B7
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.169.0/24
188.119.70.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:d3:c1:d1:a1:ae:57:49:3e:27:c9:82:a8:95:b6:e7:d0:48:
74:f7:46:d1:9f:15:a2:cb:79:b4:10:46:73:d1:52:97:74:f4:
5f:05:69:92:1a:70:73:0c:f2:d6:6a:0f:e1:48:e5:0a:95:7e:
b9:58:19:6c:e8:1d:79:00:da:d8:ce:0f:a2:61:93:dd:4c:98:
24:67:6e:ce:14:95:74:c6:25:94:c6:cb:71:40:4d:db:33:3a:
81:65:3d:f9:54:3b:ee:87:c5:25:48:5b:15:25:32:3b:ac:2e:
1f:5e:02:90:9b:e8:f5:dd:b5:28:27:56:fd:e3:c9:82:69:3c:
79:05:6b:67:8d:88:64:68:21:08:b8:34:9e:cc:86:e7:fa:a7:
e5:85:db:bc:3c:13:64:4b:ad:c0:2c:11:3f:ad:7a:eb:52:7b:
7b:e6:a0:a9:9b:d1:1d:0b:55:a6:18:67:ea:47:7e:85:94:d2:
89:81:8a:5e:46:1a:0b:64:1d:0d:f6:77:41:59:a5:66:c5:50:
3b:52:72:90:3b:25:23:af:0e:b0:d4:d5:15:dd:bc:a9:d5:f2:
73:ac:34:01:83:f3:6c:cd:7b:89:55:e1:eb:72:08:b6:a0:bc:
7e:21:1b:1f:82:41:0f:45:93:db:72:78:a4:99:f9:73:c5:4e:
b5:6f:40:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:58:11 2025 by rpki-client