Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202736.roa
File: AS202736.roa (raw, json)
Hash identifier: 0FPY9+EPLEHubzgujjCdWDNUKo9y3at5MbmeO5pNQeQ=
Subject key identifier: 88:1D:4D:C4:CF:A6:96:C0:41:A6:71:C3:00:40:9E:65:8B:F4:5E:19
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3EB16F158EDC5B38618B1126F96048A0135A24F0
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202736.roa
Signing time: Tue 05 Aug 2025 19:36:06 +0000
ROA not before: Tue 05 Aug 2025 19:31:06 +0000
ROA not after: Tue 04 Aug 2026 19:36:06 +0000
asID: 202736
IP address blocks: 95.135.147.0/24 maxlen: 24
95.135.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 06:14:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:b1:6f:15:8e:dc:5b:38:61:8b:11:26:f9:60:48:a0:13:5a:24:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 5 19:31:06 2025 GMT
Not After : Aug 4 19:36:06 2026 GMT
Subject: CN=881D4DC4CFA696C041A671C300409E658BF45E19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1a:d3:b3:8e:16:eb:77:0f:42:0a:ca:55:a4:
0a:70:89:5c:4b:71:59:1e:ed:17:e4:78:6a:a1:27:
e0:9a:63:bc:e6:e3:ad:1a:9e:07:12:a3:5b:54:4f:
fa:af:b7:51:3c:b2:b9:5a:72:c6:7e:47:a4:13:f1:
fa:86:93:ca:da:b4:f7:44:89:20:67:47:86:64:24:
8e:98:68:da:d9:a3:d4:fb:ce:bc:e3:2e:40:86:e2:
8a:b6:74:ae:99:96:3c:fc:14:d4:89:9a:ec:0c:a5:
97:2a:bf:29:1b:1b:be:f3:83:57:df:9a:b8:69:35:
96:18:22:3c:28:2a:5d:c1:ea:97:2e:7c:a8:a0:f8:
87:2e:11:bd:a4:cf:10:76:9a:35:e4:67:20:b8:8c:
5d:59:96:bc:8a:96:e3:57:00:d8:c9:8d:df:0d:1c:
49:49:4b:9e:4b:2a:8a:f9:16:71:c5:e5:ea:33:93:
d0:b4:28:18:3c:a6:b6:bb:64:7d:f9:d7:4b:75:1f:
2c:9a:44:9b:82:2e:3f:35:d8:86:33:86:d3:9e:8c:
1f:29:23:ed:08:ff:e0:21:cd:10:0e:8d:2b:c9:4e:
7e:6c:da:ca:3f:af:4b:19:34:0b:ee:ba:84:82:f0:
37:d4:1e:13:3b:69:5d:10:20:1d:25:fd:a2:66:0f:
71:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1D:4D:C4:CF:A6:96:C0:41:A6:71:C3:00:40:9E:65:8B:F4:5E:19
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.147.0/24
95.135.188.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:1e:98:84:0f:d4:a1:b4:e5:e7:16:c5:34:68:6e:4c:4d:b2:
22:dc:f8:d9:64:ec:8b:b6:f2:63:cc:ce:da:9b:49:10:13:03:
7b:ec:b7:14:8a:cf:85:18:fc:21:39:8a:91:c7:a6:51:3c:7b:
83:21:81:7c:5d:5d:11:31:a7:b3:b8:9c:fa:c7:d2:bd:1d:62:
67:b4:f3:03:14:b8:cc:8b:d6:b7:47:80:bd:dc:d4:c3:33:1a:
cb:be:e5:8c:1f:c8:f9:8c:49:94:06:17:05:01:ba:0a:de:3d:
2f:8b:51:87:c1:54:f1:ab:b7:ab:cd:e2:62:a5:79:24:38:f1:
b9:3b:26:dd:6e:5d:62:8b:f9:29:e2:9d:9f:d3:c5:9f:14:b6:
fa:90:d3:45:87:66:7f:b9:b4:2b:06:90:71:2c:73:9b:57:7a:
2b:52:ea:7b:da:b3:cb:0f:44:1f:b9:e6:0e:f7:de:ee:27:b3:
bb:f4:72:f4:ec:ad:10:1d:11:11:fe:e9:83:f2:03:d7:fc:fa:
66:e6:56:0f:c0:00:c5:ef:85:df:b7:1c:a0:82:c9:29:f2:c7:
68:1e:0d:81:c5:58:b0:bb:2d:74:be:c8:ff:87:65:c7:c9:6b:
48:b5:ec:39:53:9a:00:71:ba:f9:ff:c1:88:5e:19:54:71:8f:
44:86:7d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:07:58 2025 by rpki-client