Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154049.roa
File: AS154049.roa (raw, json)
Hash identifier: 2DdqBDykJfrtj+UNXca13XnltMmhiUEnOV0E/502yDE=
Subject key identifier: 2D:25:32:5C:44:FD:43:72:4D:90:A4:51:18:54:EE:5C:7F:97:09:8D
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 13FB9FDD31A942612EF108D335C17C0639E94945
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154049.roa
Signing time: Mon 04 Aug 2025 17:27:09 +0000
ROA not before: Mon 04 Aug 2025 17:22:09 +0000
ROA not after: Mon 03 Aug 2026 17:27:09 +0000
asID: 154049
IP address blocks: 92.112.140.0/24 maxlen: 24
95.135.252.0/24 maxlen: 24
178.92.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:fb:9f:dd:31:a9:42:61:2e:f1:08:d3:35:c1:7c:06:39:e9:49:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 4 17:22:09 2025 GMT
Not After : Aug 3 17:27:09 2026 GMT
Subject: CN=2D25325C44FD43724D90A4511854EE5C7F97098D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6a:c1:c5:9f:e7:81:9b:e2:42:76:d2:e8:63:
75:8d:76:31:ab:ee:b8:6a:52:49:84:a2:f2:73:58:
69:4a:cd:a3:98:fb:6d:07:35:1a:29:4a:b9:eb:11:
e6:6c:43:fc:6c:d7:c4:f2:e3:34:5a:ce:31:66:99:
1e:eb:16:01:d3:b3:b3:ac:07:9e:2a:02:19:20:0e:
ed:55:cf:ff:ea:f5:00:70:ec:6b:23:4a:4a:a2:07:
c7:72:fe:4d:5a:6d:84:9f:97:fb:4a:67:db:18:6f:
c1:2c:dd:41:2f:c0:2c:d9:fe:46:a2:ab:aa:8d:c6:
a6:de:cc:ab:42:50:18:54:56:76:9a:63:ca:e8:3b:
ad:c8:e7:c1:d8:89:6a:74:54:f3:97:81:2d:52:b8:
4d:a7:44:16:0f:f1:4e:5b:c2:16:7c:26:63:72:a5:
88:a2:a8:5b:68:8a:bd:1c:3a:a7:0c:03:93:c0:10:
75:5b:6c:3b:46:cc:ed:52:96:24:2c:81:6f:69:d5:
51:00:ef:38:6f:ab:7e:6c:dd:44:0b:ea:06:1c:72:
d9:3b:3d:44:6f:52:a8:69:f4:81:e7:14:4a:f9:c0:
4d:c4:88:b1:ba:32:cd:82:e5:58:5b:41:d9:28:92:
6b:46:19:78:e6:6d:5a:52:7f:37:fc:55:5c:f0:d7:
40:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:25:32:5C:44:FD:43:72:4D:90:A4:51:18:54:EE:5C:7F:97:09:8D
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS154049.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.140.0/24
95.135.252.0/24
178.92.13.0/24
Signature Algorithm: sha256WithRSAEncryption
03:6c:43:9e:6a:54:b9:bb:ca:d2:9a:d4:a9:11:bc:a1:f1:4a:
76:67:85:bd:53:a0:e7:82:dd:2f:40:af:dd:02:ae:3e:0b:57:
3e:8f:2d:c2:75:bc:2d:b0:e7:f9:73:78:5c:4b:a7:23:7d:b5:
30:94:fa:59:27:b3:eb:67:d6:d5:59:20:3f:08:5b:1a:95:60:
68:01:50:42:c2:43:32:cd:a9:4a:97:38:56:a2:9c:a8:6b:96:
35:bd:25:7e:32:6f:56:df:58:f7:10:bf:c6:03:2d:b7:bc:a5:
56:ed:c4:10:bf:0b:38:49:23:76:3e:c9:07:57:25:e1:99:af:
30:33:38:c9:ec:32:84:23:ae:8a:fc:77:a9:33:49:4c:15:46:
ae:9d:84:d8:e7:c1:b8:7c:5f:3d:74:53:91:00:e5:fb:6b:ce:
b3:4b:25:49:a3:83:e4:1d:d8:d9:9f:6d:43:fc:c5:2d:aa:60:
36:37:2f:f9:b3:b9:62:8e:43:50:c3:6c:bd:34:6b:08:cc:01:
31:f7:3e:99:78:ad:80:9e:53:16:6e:b8:26:9f:1d:26:b0:59:
3e:8c:69:50:9c:8c:74:b0:d2:9a:92:3a:13:4b:48:e3:58:5c:
06:80:7e:64:79:6b:1c:3e:86:03:dd:2c:cc:d3:e8:7b:3f:75:
70:9d:0e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:35:42 2025 by rpki-client