Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS51082.roa
File: AS51082.roa (raw, json)
Hash identifier: fSKDM8BQuTeYhGPbfXtw4cZpPhdN+4edSXn9ydyqt58=
Subject key identifier: 61:24:55:D5:45:33:DE:34:37:1D:EF:87:EA:F2:FE:58:C7:6E:CE:3C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 424DD0BB19882D2BB26C51E6236BFFE43114613C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS51082.roa
Signing time: Mon 08 Sep 2025 07:55:40 +0000
ROA not before: Mon 08 Sep 2025 07:50:40 +0000
ROA not after: Mon 07 Sep 2026 07:55:40 +0000
asID: 51082
IP address blocks: 148.135.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:4d:d0:bb:19:88:2d:2b:b2:6c:51:e6:23:6b:ff:e4:31:14:61:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 8 07:50:40 2025 GMT
Not After : Sep 7 07:55:40 2026 GMT
Subject: CN=612455D54533DE34371DEF87EAF2FE58C76ECE3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:aa:05:78:47:3b:33:59:26:5e:03:88:d0:0e:
c4:1d:d5:69:28:6c:b9:77:58:2e:62:05:dd:11:f8:
d8:a4:6d:ee:7b:4f:a7:53:f7:fb:04:51:d8:8f:57:
9b:36:64:11:92:c0:fe:80:02:1a:5a:2a:a7:2c:90:
29:17:57:f7:ff:41:1a:42:ed:85:c9:3c:e9:74:37:
93:3c:a2:be:ab:a2:d1:53:86:0d:42:64:92:61:d7:
df:49:36:fd:ae:44:ec:4f:18:c4:49:2e:99:76:65:
4e:1b:0d:b6:25:14:e4:5d:a6:f0:c7:9f:06:6c:90:
6b:84:97:80:45:36:60:28:91:de:c9:de:5b:2f:90:
d9:12:5e:12:a0:16:d4:44:c3:c5:b7:62:1b:30:fc:
0c:4f:e0:bd:30:14:c8:98:28:b0:04:9b:1e:fe:dd:
b7:20:94:a0:64:eb:77:c4:85:f7:de:3c:31:ac:d3:
8b:f3:49:5c:61:02:2c:aa:4d:45:0e:9f:b8:1e:05:
1c:38:f9:45:fa:bb:36:0e:67:b3:b1:d8:1c:6e:84:
cd:24:4e:3a:e6:9e:1e:a3:35:6f:33:f5:01:19:58:
59:67:cd:fe:ad:d6:87:21:36:09:0f:bb:f0:f4:28:
56:d6:6d:c1:bc:ca:8a:1d:bf:7d:53:4b:1d:da:ea:
e5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:24:55:D5:45:33:DE:34:37:1D:EF:87:EA:F2:FE:58:C7:6E:CE:3C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS51082.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.176.0/24
Signature Algorithm: sha256WithRSAEncryption
66:e8:da:92:e7:4e:0e:02:83:84:b5:62:38:a6:f2:ac:0a:76:
31:fe:78:2f:9a:f2:3d:5d:f3:4f:83:15:f6:bc:f8:e8:8a:8a:
58:a0:e7:52:86:ef:95:dc:a9:1c:e8:d6:97:cf:35:37:f7:fa:
8b:52:e1:19:2f:04:b5:70:3b:0f:2e:ec:d1:b1:e7:66:ed:6c:
00:0b:24:e8:17:ff:93:1b:29:2a:74:3d:f0:37:81:04:46:47:
47:7d:a8:d1:21:73:eb:6a:78:1d:28:82:03:96:3a:d6:49:2d:
75:cd:e8:fc:82:35:4c:69:9c:2d:7f:03:0b:be:91:1a:68:b0:
fd:a9:a5:eb:29:13:1d:d2:2e:d6:de:24:4a:b4:9f:b8:6a:2b:
32:e4:0a:e5:68:7c:db:ce:0a:60:d0:11:8d:c1:e8:00:81:93:
de:66:57:82:89:a6:9c:9c:d6:d1:e0:3b:c3:21:7d:17:56:42:
76:11:95:13:e4:66:5f:2d:ad:f4:91:ca:0e:f9:43:6e:69:93:
f7:c8:4b:dc:2a:67:14:30:00:e3:3a:82:6c:c5:5c:09:87:eb:
fa:d0:cd:db:4c:14:bb:8a:87:79:93:39:df:c3:e9:be:e3:e5:
70:38:e8:22:7b:68:41:41:7c:6f:0c:1f:fe:b2:5b:5d:88:3e:
69:dc:00:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:29:44 2025 by rpki-client