Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS269783.roa
File: AS269783.roa (raw, json)
Hash identifier: pMhjVsnIXBvSdts63wtRLsnU6hou14zEQtQPzD1JV4E=
Subject key identifier: 50:2C:29:D9:BE:FD:55:93:96:2E:31:F1:68:07:33:6E:AF:55:A0:7A
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7AE13B20ED21F087F1BB906EB803096A3FCDE8E6
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS269783.roa
Signing time: Fri 01 Aug 2025 17:54:39 +0000
ROA not before: Fri 01 Aug 2025 17:49:39 +0000
ROA not after: Fri 31 Jul 2026 17:54:39 +0000
asID: 269783
IP address blocks: 95.134.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:e1:3b:20:ed:21:f0:87:f1:bb:90:6e:b8:03:09:6a:3f:cd:e8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 1 17:49:39 2025 GMT
Not After : Jul 31 17:54:39 2026 GMT
Subject: CN=502C29D9BEFD5593962E31F16807336EAF55A07A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:f8:fd:80:60:24:42:bd:05:2b:5d:26:4f:
13:bc:c6:82:ac:41:1c:9d:61:5c:59:ad:77:e8:91:
3f:0b:09:4b:ed:db:8e:99:4d:04:b5:ae:6a:9f:03:
23:de:32:f3:2a:59:e9:b9:df:85:49:61:96:4a:b9:
71:94:61:96:1d:c3:cf:57:e0:d3:25:f6:87:dc:5c:
20:bb:2a:77:e5:6c:ff:2a:3d:c8:05:02:b3:b5:00:
12:a9:4a:62:ad:95:77:2a:e2:2a:56:13:a7:02:a2:
fa:46:05:50:49:c1:f7:03:da:6e:3b:9f:e1:99:21:
79:57:94:e7:44:9b:ec:06:b5:46:b5:8d:b7:24:8d:
40:00:f0:66:89:3b:26:ee:5f:b1:9b:65:2e:43:93:
94:53:dc:18:1b:59:a9:26:5b:38:f5:db:92:01:cd:
3e:a7:72:e6:7a:9d:24:40:e1:dd:e3:31:8d:c6:d8:
36:f8:0e:f3:7e:fc:d6:da:01:48:4b:33:a8:8d:52:
91:6c:4b:59:18:7f:f7:be:7e:41:d9:e4:52:df:97:
89:3a:d5:d1:85:91:2d:84:75:e2:4f:88:3f:5a:03:
77:b4:6d:86:7f:8f:da:7e:0f:c5:a0:29:c0:57:d0:
df:3b:af:c6:2f:28:71:90:21:7b:af:1a:db:5a:d6:
4f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2C:29:D9:BE:FD:55:93:96:2E:31:F1:68:07:33:6E:AF:55:A0:7A
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS269783.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.236.0/22
Signature Algorithm: sha256WithRSAEncryption
91:18:95:f3:17:4c:1c:3d:25:3c:92:9c:e3:af:25:48:43:d8:
d7:df:49:c8:31:9b:9b:75:ae:f6:37:c5:28:b5:09:23:e9:23:
fb:bf:d6:ba:0a:02:51:8c:bf:3c:77:77:00:d2:37:13:f0:22:
9e:91:f3:0e:97:e7:4b:a2:13:5e:4b:5a:76:94:51:65:0d:8d:
4e:76:2b:d6:88:ac:ad:de:f1:59:5f:34:4e:91:b7:d8:56:58:
f4:38:70:6d:bc:16:9a:d6:9c:47:8f:54:a9:fe:57:11:44:bb:
d4:9f:ff:e3:bd:97:ef:53:01:0d:fd:a7:6c:01:80:56:0d:3b:
28:af:72:f7:e5:41:ba:fd:25:94:8f:f0:14:de:22:f3:dc:18:
1f:b8:da:5b:1c:f1:1e:bf:90:ed:76:95:63:6c:cc:8f:00:9a:
df:79:84:98:20:28:9f:de:33:21:19:e9:0d:81:6e:32:ef:bc:
f3:74:d6:1b:9a:c5:8a:94:37:04:b2:55:8a:3a:a6:4f:c4:09:
03:c9:c5:6e:ff:a8:46:8b:97:1b:9f:44:76:73:6c:83:fc:33:
ff:81:a6:f4:f3:b3:0f:da:30:5b:20:ac:e1:f9:b2:54:0b:33:
b3:91:d7:13:18:23:f3:ff:d7:d0:12:cb:f2:21:ac:f2:09:9e:
0b:27:00:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:56:16 2025 by rpki-client