Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS5065.roa
File: AS5065.roa (raw, json)
Hash identifier: JGE9pcBF2Jpsr5+PtvnbT/gcrMiv31piwJgRI0akVTQ=
Subject key identifier: 7A:6A:71:5F:00:83:AC:63:2D:1F:19:CA:20:99:E3:3E:E3:BB:77:89
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 62A5A0E6C837D063094DE0963BA30F66E7D34BB2
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS5065.roa
Signing time: Tue 30 Sep 2025 10:03:13 +0000
ROA not before: Tue 30 Sep 2025 09:58:13 +0000
ROA not after: Tue 29 Sep 2026 10:03:13 +0000
asID: 5065
IP address blocks: 46.236.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:a5:a0:e6:c8:37:d0:63:09:4d:e0:96:3b:a3:0f:66:e7:d3:4b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 30 09:58:13 2025 GMT
Not After : Sep 29 10:03:13 2026 GMT
Subject: CN=7A6A715F0083AC632D1F19CA2099E33EE3BB7789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fb:ca:a6:2c:a4:ff:76:ca:ab:ba:1e:f7:0f:
59:1b:d8:5c:fc:3e:14:56:db:b1:b1:90:bc:6a:47:
9f:35:0e:d7:48:81:90:10:d6:23:40:be:b1:26:40:
d4:01:8f:2c:eb:4f:28:67:02:65:6f:bc:83:33:6d:
54:da:9c:c1:9f:30:c8:7b:75:1b:df:33:32:d0:f7:
85:ca:3a:5b:87:fd:87:2f:bb:7e:91:3f:8b:7f:ca:
39:e9:40:59:ca:a7:ef:73:14:30:aa:07:a4:35:d2:
d9:91:c7:c0:4c:a8:70:0e:0e:e7:56:f1:89:18:cf:
94:b5:c9:72:6a:8f:59:5f:24:df:ba:9c:d7:8c:0a:
1c:28:64:22:80:cb:85:29:13:f4:ff:5b:76:96:37:
ff:d7:96:3a:8c:65:6f:57:d1:e1:ca:c0:93:4f:52:
7d:25:ec:51:36:90:f2:65:4c:70:c2:5c:af:fe:02:
84:0c:0e:d0:88:40:52:d3:50:e9:52:b2:5f:b9:6a:
c2:bd:44:70:af:25:53:d2:d3:7a:86:0a:75:a1:32:
aa:6f:f9:41:3d:86:67:54:58:03:cd:b6:ed:fc:95:
28:f2:ca:75:4c:b9:e5:7c:71:2f:a4:d3:7b:dc:4b:
68:36:04:d9:22:62:fa:f1:8c:8d:d9:9c:a9:18:52:
1d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6A:71:5F:00:83:AC:63:2D:1F:19:CA:20:99:E3:3E:E3:BB:77:89
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS5065.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.203.0/24
Signature Algorithm: sha256WithRSAEncryption
24:6a:c1:0e:58:5e:dd:9f:d0:c6:d4:ce:a5:a0:a3:5c:3b:09:
57:40:7d:d4:fd:84:5d:45:02:2f:34:ee:70:f0:ba:a4:ef:da:
ed:7b:87:e4:8d:a3:51:35:1f:f1:ba:f0:36:13:ad:38:77:06:
ce:4e:1a:d5:95:3e:60:ed:f9:ff:ef:92:0f:12:a4:96:b7:35:
ef:3d:65:04:80:93:20:47:ee:f0:e5:a5:35:8c:bc:f8:75:f0:
ec:bc:6f:32:24:a2:1f:f3:f5:13:40:36:3a:82:28:ca:15:73:
ec:c6:ed:a5:3f:ff:88:24:68:09:dc:f5:1e:8e:66:3a:b4:c1:
96:2c:49:06:2d:2b:41:91:6b:d5:43:77:a5:91:c6:93:12:cc:
ed:32:9e:df:76:52:5d:92:be:d9:9b:c3:70:80:06:3b:c7:b9:
40:a8:d9:49:cf:7e:e8:b1:8f:90:a8:df:ad:26:21:4d:ae:f8:
bb:0a:08:bb:ed:72:f8:84:70:0c:0e:d1:93:11:9d:77:85:a8:
34:58:35:24:39:f7:90:4e:a0:01:24:8f:d0:48:bf:ab:8d:db:
6d:46:02:fb:66:e6:7d:a1:d7:39:1e:b4:28:42:42:14:21:e7:
fb:80:95:80:ef:4a:73:c0:de:10:32:3a:7d:45:d0:f4:28:19:
0c:e9:21:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:21:57 2025 by rpki-client