Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5065.roa
File: AS5065.roa (raw, json)
Hash identifier: 0437AkSrm0BG3QCiQ9SQRa61CfqlT4jWoHwVWX3uZK4=
Subject key identifier: B5:DB:E2:4A:32:74:D5:DC:E0:9A:4E:4A:24:A2:A2:13:CD:D2:C0:52
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 423D3EA13A8464A7F24655BFE29E8F1624A7510B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5065.roa
Signing time: Wed 28 Oct 2026 00:04:44 +0000
ROA not before: Tue 27 Oct 2026 23:59:44 +0000
ROA not after: Wed 27 Oct 2027 00:04:44 +0000
asID: 5065
IP address blocks: 92.112.158.0/24 maxlen: 24
95.135.52.0/23 maxlen: 24
95.135.56.0/23 maxlen: 24
95.135.74.0/23 maxlen: 24
95.135.86.0/23 maxlen: 24
95.135.94.0/23 maxlen: 24
95.135.106.0/23 maxlen: 24
95.135.108.0/24 maxlen: 24
95.135.118.0/24 maxlen: 24
95.135.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:3d:3e:a1:3a:84:64:a7:f2:46:55:bf:e2:9e:8f:16:24:a7:51:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 27 23:59:44 2026 GMT
Not After : Oct 27 00:04:44 2027 GMT
Subject: CN=B5DBE24A3274D5DCE09A4E4A24A2A213CDD2C052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bf:3d:e6:09:77:bc:9e:8d:f4:1a:9d:a3:0a:
58:c4:34:e7:47:27:62:5e:82:ff:ce:e8:05:09:75:
21:e9:95:3c:ef:45:ee:37:37:d6:f3:c5:a4:4e:19:
2a:d5:0d:f7:e1:eb:48:46:6c:65:69:14:bf:dc:6a:
a3:ea:0d:55:75:c6:fa:2c:ae:c4:c2:75:91:bc:4b:
14:87:26:04:03:6e:56:81:16:d5:1d:4c:a5:70:cc:
9a:97:77:c2:ee:83:38:2a:53:bc:c7:95:e7:0b:a4:
13:11:c0:d0:01:32:98:08:40:7a:f7:c4:a9:29:a4:
12:51:02:b0:cb:93:83:5c:5a:97:e7:b8:c8:ad:1d:
6e:26:84:aa:8f:1e:42:e9:a3:d4:ca:db:aa:02:e6:
2a:35:ec:ae:ed:7e:35:00:49:98:a6:3b:10:6c:e4:
43:73:1f:a1:3a:5e:ff:f9:ae:11:d3:e6:83:ca:71:
cb:a9:35:5a:12:4c:24:bd:2d:14:58:7e:3b:e6:cd:
28:b2:86:5a:a0:29:47:0a:94:d8:6b:bf:6d:cd:f4:
54:e7:64:8a:97:b9:7b:d7:6d:a5:72:2c:61:18:6f:
50:de:f8:c1:a9:31:22:8b:41:4a:ac:4d:25:d8:bc:
47:cf:74:31:8c:29:22:1e:50:0b:78:ba:3c:b6:b5:
0d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DB:E2:4A:32:74:D5:DC:E0:9A:4E:4A:24:A2:A2:13:CD:D2:C0:52
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS5065.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.158.0/24
95.135.52.0/23
95.135.56.0/23
95.135.74.0/23
95.135.86.0/23
95.135.94.0/23
95.135.106.0-95.135.108.255
95.135.118.0/24
95.135.246.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:cd:f6:9d:0f:e0:18:15:d1:fe:9b:91:d2:09:fe:53:c6:bf:
f4:16:7a:1e:6e:2d:24:d7:c6:d7:5f:15:2e:31:b0:78:f2:90:
5e:17:b1:4c:1f:6e:84:a8:7a:3b:ed:58:db:5a:25:bd:59:37:
97:cc:a0:27:b0:ac:d6:92:df:e9:c1:94:c8:3f:2a:26:73:f5:
22:1e:d3:c7:9b:88:ec:90:74:3b:4a:b3:9c:d4:34:f2:20:c6:
c1:8c:31:c4:a3:1c:63:90:aa:0b:4c:86:2b:f8:8d:03:a9:18:
e3:f7:45:26:e0:64:88:54:38:90:37:b2:91:8d:db:d9:9e:0c:
d0:57:c1:c4:0a:72:11:9e:16:ea:aa:a2:06:9c:00:0c:8a:99:
08:8b:f5:ee:3c:a7:7c:fa:94:d0:c0:2c:41:5d:78:6b:62:a7:
65:5e:50:81:49:6d:09:5e:77:dc:d6:bc:72:6e:ba:68:ac:22:
67:cf:d7:e3:b1:ee:17:be:0a:45:e1:45:13:29:69:04:c2:0d:
c9:e0:99:f1:ee:87:d1:63:9c:b1:27:13:f0:c7:c6:0a:4c:4e:
2a:3c:00:59:ef:d4:79:29:14:2e:cd:10:ab:45:20:21:c9:e9:
a7:3d:90:5f:e2:8d:02:82:1d:6a:b3:e1:f7:7d:4b:2f:e9:4d:
eb:a7:11:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:16:57 2026 by rpki-client