Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS39855.roa
File: AS39855.roa (raw, json)
Hash identifier: PCg5NJdsPlMGtfdpeg17j0uR3Bzr7kvSO7JtP4E6sxw=
Subject key identifier: 15:39:06:F5:32:1E:67:C0:8F:34:D7:F8:13:7B:F8:04:1C:F6:25:9D
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 45823C39161E834369143F59739EDA0A43761277
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS39855.roa
Signing time: Mon 11 Aug 2025 14:15:48 +0000
ROA not before: Mon 11 Aug 2025 14:10:48 +0000
ROA not after: Mon 10 Aug 2026 14:15:48 +0000
asID: 39855
IP address blocks: 45.137.119.0/24 maxlen: 24
92.118.160.0/24 maxlen: 24
179.61.239.0/24 maxlen: 24
181.214.97.0/24 maxlen: 24
181.214.108.0/24 maxlen: 24
181.214.111.0/24 maxlen: 24
181.214.113.0/24 maxlen: 24
191.96.58.0/24 maxlen: 24
191.96.64.0/24 maxlen: 24
191.101.56.0/24 maxlen: 24
191.101.85.0/24 maxlen: 24
191.101.87.0/24 maxlen: 24
191.101.95.0/24 maxlen: 24
193.7.202.0/24 maxlen: 24
193.31.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:82:3c:39:16:1e:83:43:69:14:3f:59:73:9e:da:0a:43:76:12:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 11 14:10:48 2025 GMT
Not After : Aug 10 14:15:48 2026 GMT
Subject: CN=153906F5321E67C08F34D7F8137BF8041CF6259D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a2:65:99:9c:dd:fa:bb:47:24:a3:27:3a:2e:
33:49:ec:4f:c2:0f:cd:cb:30:0b:c5:d1:9d:72:57:
c9:9c:bd:10:c0:b2:7e:bc:20:36:e4:3e:dd:30:1d:
00:50:29:60:e8:e6:bc:cf:c3:38:64:bf:8d:20:70:
16:a6:85:c5:9a:f2:cb:95:8d:57:e6:d0:33:d0:df:
73:fe:fb:c5:f0:66:08:13:28:4d:ac:91:54:ba:f2:
e3:f6:51:7d:d0:21:e1:1a:6a:3d:cf:92:8b:b8:ee:
cb:7a:d5:20:6d:b5:29:9c:3e:c1:87:6c:36:2c:73:
bb:33:ea:cc:6f:d9:0b:51:8e:89:8e:df:53:f5:14:
4b:c1:a4:08:ea:7f:e6:b5:6e:1a:0b:97:e8:9b:ad:
95:75:31:fa:9c:ad:ee:b2:09:4b:e2:25:86:d0:a7:
2d:4b:1b:32:80:a3:58:1b:6c:29:19:5f:09:fc:c3:
eb:52:4a:39:31:21:0d:19:6a:45:61:db:39:07:06:
b5:37:02:75:87:3d:24:42:17:90:92:2b:7d:fe:39:
05:c9:b4:03:6a:ce:67:03:ec:60:ee:09:cd:56:4d:
49:b9:9d:22:3a:8b:4d:59:ee:91:75:05:2c:79:17:
9f:3b:fc:2a:c4:39:7e:97:2b:f8:3c:ef:d9:aa:6f:
a9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:39:06:F5:32:1E:67:C0:8F:34:D7:F8:13:7B:F8:04:1C:F6:25:9D
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS39855.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.119.0/24
92.118.160.0/24
179.61.239.0/24
181.214.97.0/24
181.214.108.0/24
181.214.111.0/24
181.214.113.0/24
191.96.58.0/24
191.96.64.0/24
191.101.56.0/24
191.101.85.0/24
191.101.87.0/24
191.101.95.0/24
193.7.202.0/24
193.31.41.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:21:98:7d:ae:1d:3a:66:ed:66:41:ad:f6:74:cd:c0:1f:8e:
3b:29:04:5a:3b:22:a8:e9:97:1f:06:6f:6a:05:06:c9:87:07:
3d:9a:c3:0b:be:83:31:0c:99:10:2d:fa:b9:fb:5f:04:02:d4:
c2:76:3c:93:c6:ee:65:56:c3:e4:72:1e:0d:ff:c3:7a:98:2b:
29:23:80:e8:eb:32:8c:ad:62:95:0d:5c:ca:d0:06:a0:88:84:
97:74:de:7b:0a:0a:66:a0:ae:98:9f:dc:2d:4c:c6:99:74:e9:
0c:fb:d3:10:f7:1c:ab:d8:3b:07:89:cd:bf:13:df:59:c9:b4:
3a:03:4e:e8:ae:1e:b7:b5:d5:db:27:8a:2b:7b:93:11:04:d6:
4c:7c:cf:cc:26:40:13:d9:07:f2:76:11:7f:69:16:aa:7d:d6:
c5:3e:42:ed:58:b6:12:9e:dc:08:c0:f9:59:be:da:10:9e:fc:
2c:b8:22:e7:0e:37:e7:a5:58:b5:bd:d5:84:60:26:cb:ea:36:
ee:5d:0f:76:16:cc:6d:32:72:d4:2b:cf:2f:ab:76:c2:d0:b6:
a2:e9:69:86:5b:69:ee:58:8c:ce:25:33:d1:99:a9:5f:3b:ff:
48:a2:57:46:fe:33:e8:75:98:4c:02:b3:af:97:5b:d9:b2:21:
cc:c2:5e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:40:28 2025 by rpki-client