Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS58232.roa
File: AS58232.roa (raw, json)
Hash identifier: kt5nJW+PHkwRxfaCWydEVcdA2jxI2aSMThecpjt+B8M=
Subject key identifier: C0:DB:48:7E:38:74:DE:1D:B0:49:EA:9E:86:3C:90:DD:B7:A4:00:E8
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3CD7A283EEFAE214E44C1F9A03C847D2F96FABFB
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS58232.roa
Signing time: Mon 14 Sep 2026 10:08:15 +0000
ROA not before: Mon 14 Sep 2026 10:03:15 +0000
ROA not after: Mon 13 Sep 2027 10:08:15 +0000
asID: 58232
IP address blocks: 95.135.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:d7:a2:83:ee:fa:e2:14:e4:4c:1f:9a:03:c8:47:d2:f9:6f:ab:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 14 10:03:15 2026 GMT
Not After : Sep 13 10:08:15 2027 GMT
Subject: CN=C0DB487E3874DE1DB049EA9E863C90DDB7A400E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3e:f7:bb:dd:4b:28:d9:bf:cb:ee:8e:1c:3c:
4f:79:94:d6:54:e0:0e:2e:07:dc:1c:ab:1c:d5:b0:
cb:51:4c:37:e1:9d:f1:e5:3c:06:a9:56:c7:e5:4d:
db:a4:19:bc:02:4f:38:a2:48:e1:b8:56:ff:7e:ac:
c1:03:7a:cd:e6:28:87:da:23:f8:ae:35:fa:b9:5e:
4d:40:61:dc:a2:5c:96:b5:58:52:04:96:56:c6:5b:
8b:7e:9b:45:0f:0b:8d:94:6d:79:15:c5:7f:58:2f:
9d:98:d1:06:1a:64:f0:f7:6e:38:09:7a:f9:bd:80:
cd:fd:90:57:2c:0d:86:fa:ce:13:f9:91:fa:76:db:
85:bf:2c:aa:21:e2:42:95:c2:05:da:26:82:6a:d6:
67:bf:80:3f:9e:e1:36:b1:5d:94:d4:00:9a:e9:a7:
f2:ae:4a:83:a8:e4:ed:bd:1f:3a:03:a9:a8:60:7d:
fd:4a:8e:71:df:74:d3:da:e5:76:e4:b7:1a:df:ea:
74:5d:4d:13:eb:06:aa:61:ed:41:f9:8f:e7:7e:be:
1d:6a:47:e6:f2:bd:21:16:6e:d0:24:8d:19:94:5e:
80:fb:08:06:f4:94:09:5e:2e:a6:0b:2c:40:d1:a5:
2e:51:d3:6d:96:26:52:c2:65:8d:0a:29:26:0d:b1:
5c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DB:48:7E:38:74:DE:1D:B0:49:EA:9E:86:3C:90:DD:B7:A4:00:E8
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS58232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.125.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:5c:66:6d:33:cd:80:09:22:42:76:1c:05:d9:5e:ca:24:9e:
89:d6:44:a6:10:15:69:63:96:de:3e:d8:a0:ce:52:44:66:33:
44:4b:92:2f:1d:d3:28:df:2e:78:d3:c2:ae:d0:88:89:76:84:
2c:dd:c1:e4:52:d6:7f:6c:be:02:3b:fe:73:ef:ea:47:43:fd:
d3:cf:9f:79:ad:2d:c0:22:9c:cd:57:04:10:0a:86:aa:a8:5c:
aa:6d:2b:93:e7:c7:56:1f:40:c2:2c:6b:c1:fa:de:b5:42:71:
c9:08:78:9c:c6:c1:9b:1c:57:8a:ef:44:09:34:0e:9b:06:25:
de:c4:7f:36:5e:cd:a8:c4:81:29:89:dd:06:d9:85:48:b9:6d:
c5:04:2f:08:a5:d2:86:e5:7e:36:52:18:d2:88:dd:83:41:21:
24:11:51:9c:f9:3b:dc:c5:20:82:ff:97:23:fa:1f:8a:5f:03:
0d:f7:97:bd:61:0c:c1:fd:e7:91:99:ee:11:13:2c:fe:42:83:
7e:34:f2:cb:a4:05:28:83:81:43:5b:d7:56:61:7d:f6:df:ea:
78:d0:24:06:17:da:56:59:e1:04:dc:a6:8f:56:cd:8f:50:cb:
f2:e4:21:a2:cf:d4:75:ee:9c:71:9f:40:76:c5:b3:1f:44:ee:
f4:ba:f1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:59:15 2026 by rpki-client