Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS265919.roa
File: AS265919.roa (raw, json)
Hash identifier: 6VFB/Njb5V9i7zgDk2VMTlFcozwE2tCiImYqrCzU8Z8=
Subject key identifier: 17:28:03:BD:35:04:2D:ED:E9:10:14:BF:2C:06:44:0B:E7:8B:41:6F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 31CF5367088EAF944669148B0C2AA1EBB57A885D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS265919.roa
Signing time: Wed 25 Jun 2025 19:32:29 +0000
ROA not before: Wed 25 Jun 2025 19:27:29 +0000
ROA not after: Wed 24 Jun 2026 19:32:29 +0000
asID: 265919
IP address blocks: 143.14.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:cf:53:67:08:8e:af:94:46:69:14:8b:0c:2a:a1:eb:b5:7a:88:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 25 19:27:29 2025 GMT
Not After : Jun 24 19:32:29 2026 GMT
Subject: CN=172803BD35042DEDE91014BF2C06440BE78B416F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:15:aa:63:74:5b:1e:5b:e4:b0:4a:2c:2f:
52:96:8f:01:9e:a7:92:44:da:2f:04:4e:4d:2d:85:
67:4a:11:53:12:3b:f5:d1:b5:64:63:a3:56:81:16:
7c:2e:06:70:79:99:9d:5f:3b:af:a4:96:08:ef:4b:
ec:e4:61:d4:60:1e:6b:0e:c0:e1:e8:43:86:10:f3:
09:25:31:c2:46:5f:9e:d5:e8:f5:ee:90:34:04:08:
81:55:8c:8e:a1:74:e0:51:21:23:b6:f4:d8:41:9f:
88:55:f9:be:80:76:4c:f0:ef:8e:f7:d1:f3:dc:ab:
9b:30:09:72:ea:dc:23:07:35:34:ba:96:ac:3f:dd:
cc:32:04:59:9e:dd:e1:75:c1:e5:5c:fa:60:68:96:
80:6f:bd:1d:37:50:64:81:75:84:df:7b:9d:54:e5:
e2:fa:6c:85:05:17:34:6b:39:d7:7b:d1:d0:8e:e7:
da:9b:45:d0:e2:45:98:7d:e9:2d:f9:8b:bf:5b:a9:
03:86:ff:5f:f9:bd:2e:a0:e3:58:3b:9f:0b:ad:97:
6c:76:78:5b:1f:f8:82:49:d8:05:cd:51:5e:45:cc:
4d:19:b3:bc:38:b9:7b:cd:9d:65:8f:7a:82:61:56:
32:54:60:ee:ab:21:0d:13:91:46:1d:39:bd:78:09:
29:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:28:03:BD:35:04:2D:ED:E9:10:14:BF:2C:06:44:0B:E7:8B:41:6F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS265919.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.176.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:25:66:f3:36:42:93:49:44:50:f5:09:89:9d:0b:ef:9e:c6:
d6:fa:30:03:61:d7:8b:15:52:90:7a:18:95:73:74:42:8d:49:
fe:75:c9:15:4f:f2:9c:47:60:29:f0:12:75:04:68:d5:9c:f9:
9d:87:10:ab:08:86:07:09:5e:b2:42:e5:ea:2a:7d:00:35:de:
f5:e8:c2:37:7a:28:57:d9:7b:d3:6b:96:07:7a:c8:65:0b:c4:
fd:2d:b6:67:54:1d:9c:eb:9c:e1:df:ae:ad:98:07:a6:ae:60:
39:54:ea:57:8b:80:c1:4d:82:38:c2:91:e5:f5:24:a9:57:a4:
fd:72:d2:a1:9e:56:a1:21:e2:94:52:74:bf:51:9a:55:e7:86:
5a:28:a7:6a:6a:fa:45:6f:53:3c:9c:3b:eb:76:37:9b:67:1c:
cd:a5:e2:f9:16:6d:86:c2:cf:4a:0a:3c:81:71:7d:05:d1:4f:
a2:25:d7:ce:02:5a:14:80:35:1f:ec:89:0d:64:be:d1:f0:f0:
56:b8:b6:6b:47:48:77:c0:ed:28:e3:7b:f9:8c:6f:c5:0e:65:
cd:e8:99:80:4f:5f:33:7d:79:1c:69:cd:0d:b4:48:f5:f6:07:
a5:18:78:c0:f7:d7:79:af:44:ed:94:9a:88:62:28:1b:e7:9a:
8e:e3:83:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:44:39 2025 by rpki-client