Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53356.roa
File: AS53356.roa (raw, json)
Hash identifier: wGkdQJcTA6Az0PfCFF+c9z44vvP/olnwsLxCvLXAT3M=
Subject key identifier: 04:D6:E4:96:8D:EE:A8:C5:35:41:52:15:41:54:86:AE:C3:BC:57:5B
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7B2AF9B98FCCF78D445F0E4BB8A4CB859FEED860
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53356.roa
Signing time: Fri 31 Oct 2025 15:07:22 +0000
ROA not before: Fri 31 Oct 2025 15:02:22 +0000
ROA not after: Fri 30 Oct 2026 15:07:22 +0000
asID: 53356
IP address blocks: 92.113.184.0/24 maxlen: 24
92.113.224.0/24 maxlen: 24
95.135.42.0/24 maxlen: 24
178.92.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:2a:f9:b9:8f:cc:f7:8d:44:5f:0e:4b:b8:a4:cb:85:9f:ee:d8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 31 15:02:22 2025 GMT
Not After : Oct 30 15:07:22 2026 GMT
Subject: CN=04D6E4968DEEA8C535415215415486AEC3BC575B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:93:51:55:a6:5b:c5:18:fa:18:65:dd:1c:6c:
5e:77:5c:76:c3:08:1f:59:f7:7e:e3:07:31:8b:a3:
95:ba:25:00:00:c5:8d:f1:3f:44:85:46:71:93:3e:
60:1a:e4:c5:36:10:8b:68:40:bb:cb:96:e3:61:cc:
dd:79:27:3c:d7:f1:16:7e:a4:b1:5a:f7:c5:91:e3:
a4:53:83:18:64:fa:92:0c:d4:56:f4:14:37:80:5c:
e9:e7:82:b0:61:ad:3a:48:b4:e7:1d:f8:f6:1a:d8:
71:43:21:e0:db:26:2d:2b:77:3c:46:28:d1:61:78:
4b:22:15:65:ea:74:ee:42:ef:12:4e:97:84:19:0b:
6b:85:8d:79:12:b5:c0:ba:5d:b7:00:38:48:84:2c:
21:16:1d:56:16:58:e4:dc:89:a0:92:26:e4:e3:82:
bc:91:6d:c2:cf:fb:06:71:89:23:09:5d:53:41:ad:
c8:93:61:4c:a3:34:19:c4:40:47:85:a7:53:84:50:
5a:85:26:cd:e4:f7:d5:ee:6b:c0:96:99:e2:a4:5a:
3c:f9:85:71:3f:5f:ac:3f:b5:7a:9e:db:63:f7:64:
26:54:eb:b5:46:d3:de:1f:ac:0d:96:eb:30:25:c2:
4b:89:23:d5:da:72:30:1b:ec:72:57:12:ca:39:30:
96:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D6:E4:96:8D:EE:A8:C5:35:41:52:15:41:54:86:AE:C3:BC:57:5B
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.184.0/24
92.113.224.0/24
95.135.42.0/24
178.92.128.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:30:09:5b:78:81:35:ae:aa:de:1c:5b:30:1f:42:13:41:29:
1c:cd:1f:49:3e:9b:b6:d1:97:4a:6a:9b:90:ba:76:c4:04:a4:
88:b4:ce:39:df:75:2e:c8:29:51:63:19:0b:a5:30:fa:97:1b:
11:60:95:00:86:49:bd:03:f9:ad:92:48:71:f3:cf:ff:ce:43:
ef:06:4e:6f:b0:03:2f:89:16:27:48:52:27:d7:db:73:04:e9:
3a:4d:4b:e3:d8:7d:0b:50:f4:b6:75:ff:39:61:94:b6:c2:c0:
88:3d:19:cc:bc:29:ff:83:39:dd:65:3b:d6:34:2c:dd:94:26:
20:84:6d:76:5c:83:bb:50:4d:a5:c5:77:57:63:2e:da:ff:ff:
5c:62:ba:71:82:17:5a:08:5c:1e:cb:d6:d7:7d:d8:ab:02:51:
56:15:ec:7a:38:a3:e0:3b:ab:91:ce:e4:d2:98:8f:6c:53:c1:
02:55:61:94:30:58:a0:2f:af:bf:97:17:f1:82:0e:25:92:37:
56:03:25:33:4e:9b:2b:c6:48:aa:51:5d:b0:61:54:3b:b9:d2:
fd:4d:b4:00:7b:2f:53:1a:91:da:82:11:98:3c:c4:bf:1d:87:
ab:58:98:0b:ed:e5:08:91:1c:bb:a7:90:62:42:c6:74:c7:4b:
35:ff:49:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:43:52 2025 by rpki-client