Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS199737.roa
File: AS199737.roa (raw, json)
Hash identifier: 9sXadJbaXVZtLUQEr/KEhMGs+9M9jxyrPqQ5IQcnMEE=
Subject key identifier: 4A:A5:60:2B:1F:70:42:59:CC:92:3B:CB:A2:D0:E1:D8:3D:A5:2F:A2
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 7991CEB4C86C6B1E697B4E781CE466763ABB80EA
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS199737.roa
Signing time: Fri 27 Jun 2025 16:54:11 +0000
ROA not before: Fri 27 Jun 2025 16:49:11 +0000
ROA not after: Fri 26 Jun 2026 16:54:11 +0000
asID: 199737
IP address blocks: 45.154.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:91:ce:b4:c8:6c:6b:1e:69:7b:4e:78:1c:e4:66:76:3a:bb:80:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 27 16:49:11 2025 GMT
Not After : Jun 26 16:54:11 2026 GMT
Subject: CN=4AA5602B1F704259CC923BCBA2D0E1D83DA52FA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d5:58:d1:65:b9:7d:50:38:1a:07:ad:29:d6:
61:13:99:d9:ba:74:e7:bb:79:4b:0a:63:4a:b5:1c:
99:df:36:40:bf:6d:e6:d4:a6:26:ea:00:e6:1f:db:
c5:90:13:8f:6b:d0:50:5d:6c:81:f7:55:91:70:aa:
51:b1:bc:9e:9c:d4:ca:32:ee:d8:e7:72:25:27:1f:
9d:77:10:e9:9d:c5:7b:83:12:fa:53:1c:14:42:ee:
ed:93:d7:64:dd:1a:1f:d3:8f:3c:e8:e6:cf:c1:4e:
c0:21:b0:fd:24:41:d1:e8:5d:22:a8:b2:ff:c8:ba:
f3:fb:5c:33:b1:d8:b4:01:20:75:a5:99:fa:cb:ed:
df:79:47:52:50:68:0e:7a:5f:26:49:62:88:11:18:
2c:f6:f3:51:4b:92:5a:8e:05:1e:36:0c:8f:44:81:
c5:58:96:ba:7b:b5:f5:6e:41:d9:97:96:91:41:fc:
f7:b7:89:14:34:3d:af:94:db:2e:8a:12:c2:d0:f2:
5e:d1:50:e7:20:36:87:0d:17:14:8e:83:33:9d:68:
82:91:33:87:e2:21:ca:63:6a:bb:b4:4d:11:84:ec:
b2:86:54:fc:4f:06:33:84:f0:75:f3:37:17:7d:20:
ac:d6:2d:22:3b:9a:27:54:15:d2:43:a2:27:fd:0f:
13:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A5:60:2B:1F:70:42:59:CC:92:3B:CB:A2:D0:E1:D8:3D:A5:2F:A2
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS199737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.107.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:7e:55:a4:5d:93:66:67:ee:41:2a:5e:e0:af:ae:e9:25:3b:
9a:a6:c8:27:28:5b:68:8e:c0:47:54:be:29:4c:a4:58:a9:51:
f2:86:94:82:54:ee:9b:f0:29:09:0a:d3:0f:15:5a:90:11:fa:
10:71:12:00:c5:9c:57:e5:df:6f:29:f8:b3:71:47:ad:24:0c:
f1:1f:b2:7b:47:b7:be:09:ff:98:74:1b:bc:30:f8:da:51:ad:
2d:24:39:78:cd:12:cc:93:71:5a:f4:12:62:cb:7a:e9:36:c2:
af:45:e9:fe:3f:e0:35:35:bd:17:8e:a5:3c:58:29:22:8f:81:
ad:b3:d5:0e:04:51:53:49:26:05:82:5a:fa:da:80:20:fa:bf:
f5:86:a2:e1:c5:f4:20:7a:54:16:20:a3:2a:0a:23:8d:68:85:
9c:8c:05:c7:82:7e:24:fa:b3:0c:dd:f7:e9:46:f7:3c:5f:38:
76:47:ff:59:3f:18:99:00:d8:99:65:ee:35:8b:fc:6e:8f:ea:
9c:38:76:21:22:c8:a7:4d:9d:74:c0:e2:de:0b:52:7d:a9:37:
0f:76:6e:b8:02:ae:a8:f1:1a:04:2e:e2:e7:19:08:a5:e3:a0:
6c:00:c0:82:4d:eb:11:18:91:a6:52:64:ef:a4:80:90:5f:9c:
72:36:db:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:55:14 2025 by rpki-client