Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS265919.roa
File: AS265919.roa (raw, json)
Hash identifier: 3UGtxxFKx+aiDFgwLf+w3+IxjJ1utgRHW6UnlRbGNgs=
Subject key identifier: 56:69:76:D2:DE:AB:14:F2:77:C1:EE:D6:BD:44:57:A6:DE:75:5D:F2
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 176F6EE60F77D7582B850D4143070BFF533D72EA
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS265919.roa
Signing time: Tue 23 Sep 2025 22:55:07 +0000
ROA not before: Tue 23 Sep 2025 22:50:07 +0000
ROA not after: Tue 22 Sep 2026 22:55:07 +0000
asID: 265919
IP address blocks: 45.146.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:6f:6e:e6:0f:77:d7:58:2b:85:0d:41:43:07:0b:ff:53:3d:72:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Sep 23 22:50:07 2025 GMT
Not After : Sep 22 22:55:07 2026 GMT
Subject: CN=566976D2DEAB14F277C1EED6BD4457A6DE755DF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:46:1c:ef:ff:d5:bf:99:61:1e:5a:bc:af:
8f:44:46:51:42:81:34:b0:95:c3:36:52:a2:d4:30:
4c:25:50:ca:be:8a:28:28:e7:ae:27:9a:2f:04:46:
46:65:3d:55:d5:e4:4c:0d:14:ad:66:8d:7e:af:c8:
54:24:9f:74:d0:2e:87:b8:1e:da:96:dd:83:ea:97:
92:12:6c:44:38:7d:09:af:be:0c:61:fb:59:79:57:
44:8e:09:25:42:ba:f4:85:3f:25:25:f8:cd:3d:5d:
09:46:ae:af:26:45:6a:d3:6f:58:1b:60:3f:1a:45:
0d:0d:47:90:96:bc:4e:c0:73:5a:02:b2:59:00:76:
ca:cd:f8:fc:b3:89:5b:07:21:e9:b4:e1:d8:91:8e:
14:cc:06:a7:e0:e1:06:ff:eb:e6:04:e1:03:75:04:
08:df:84:62:63:d4:f5:e1:a0:ed:13:87:d7:25:06:
7d:f7:43:d0:7a:46:b3:a5:73:cf:60:44:0e:a1:ac:
b7:c0:f2:88:3a:ee:da:5d:15:91:9e:7c:95:35:e3:
e0:5c:85:32:37:61:b1:5e:1e:3f:97:44:08:5e:a9:
82:84:e9:d4:f0:fc:0b:5f:8f:34:d3:2f:d6:f0:d4:
f7:cd:b8:9e:5a:33:75:46:7a:35:7f:4c:8d:03:8d:
97:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:69:76:D2:DE:AB:14:F2:77:C1:EE:D6:BD:44:57:A6:DE:75:5D:F2
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS265919.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.81.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:37:f1:8f:6b:1d:a5:e8:64:68:d3:d9:16:ed:2b:08:47:2a:
a8:4e:65:53:f4:0d:c7:07:6d:ce:e4:3b:d3:32:9a:29:ee:03:
c7:5e:53:4f:20:97:31:f2:52:e4:e6:2f:8b:03:61:38:ca:cb:
29:13:06:37:12:78:11:4e:f5:26:e6:e8:5e:4c:1b:bf:cf:36:
08:2c:15:74:e3:c4:c9:f7:2d:bb:a3:9d:a4:8b:2a:ed:48:dc:
41:b0:66:b6:4d:53:ec:1a:87:93:59:5a:c2:ed:59:cc:c4:6b:
56:d6:e2:24:62:b6:65:20:43:7d:10:b6:46:23:f9:5b:29:df:
54:54:32:b0:77:28:3c:c5:e5:85:af:11:7d:c2:56:be:bc:d6:
53:49:52:88:d2:99:ef:b8:32:b8:40:3c:50:6f:67:a8:3e:e6:
91:e4:3f:46:a7:fe:ad:5f:93:c5:02:0e:43:b1:46:8c:26:74:
1b:53:5e:60:7d:e2:0c:30:b8:8d:8d:97:ed:58:20:e7:07:9d:
f6:e5:f2:ee:b1:48:25:fb:da:f5:33:03:aa:d4:82:89:9a:ae:
52:71:53:7c:56:df:34:98:ba:29:77:fb:bd:c9:e9:a2:0e:a5:
80:79:cc:de:26:91:62:f5:21:1f:44:d8:2f:cf:dc:b4:84:54:
72:fb:54:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:38:19 2025 by rpki-client