Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS54098.roa
File: AS54098.roa (raw, json)
Hash identifier: rLET+kRb3f/x5VlENN7cM7GdPjaUPlhrtGG8OKuBTh0=
Subject key identifier: 71:64:8B:C8:B6:73:C3:9B:26:68:81:21:45:CC:7C:2F:73:2C:5D:79
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 5F61CEE5EBC3B496F8A9DA29AA6F48F102838DF1
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS54098.roa
Signing time: Thu 02 Oct 2025 13:55:08 +0000
ROA not before: Thu 02 Oct 2025 13:50:08 +0000
ROA not after: Thu 01 Oct 2026 13:55:08 +0000
asID: 54098
IP address blocks: 91.198.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:61:ce:e5:eb:c3:b4:96:f8:a9:da:29:aa:6f:48:f1:02:83:8d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 2 13:50:08 2025 GMT
Not After : Oct 1 13:55:08 2026 GMT
Subject: CN=71648BC8B673C39B2668812145CC7C2F732C5D79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:30:ce:a5:ed:fc:4a:17:ed:eb:d3:21:56:
d1:bf:94:1c:f5:0c:16:d1:29:df:c6:14:bf:dd:25:
7e:df:65:b0:80:10:64:a0:c6:11:f4:87:04:7d:31:
88:31:96:47:dc:a5:1b:05:4b:97:1c:12:61:18:bb:
8c:86:ed:ed:f1:77:01:54:d2:8f:ba:71:9b:7a:c5:
d9:86:f7:dd:33:45:f0:0d:49:95:6c:b2:65:0a:fb:
d5:1c:ed:87:9d:11:0d:9e:4a:e3:8b:b0:e9:32:62:
76:d6:e8:4b:25:dd:52:bd:29:45:8b:ce:97:c6:2f:
9d:68:10:79:45:65:19:ee:20:65:54:77:4e:3b:1f:
6c:74:9a:ce:55:cd:e5:d3:8f:ba:b9:88:17:a1:da:
8a:31:5b:6d:a6:d9:24:eb:0f:a3:d6:b0:ca:06:b1:
ed:34:4a:7d:42:17:70:14:e0:5d:19:2d:94:06:00:
e6:e4:d6:b0:df:7a:e9:2d:5d:9b:b1:1d:9f:a5:75:
24:1d:d2:05:14:46:a3:76:3d:e6:19:3a:dc:8e:ac:
cb:51:2c:ac:de:72:8f:1d:b7:fe:16:ae:65:75:7b:
e4:cc:86:15:63:96:90:16:9a:32:d1:18:c0:8f:da:
1f:90:42:fa:00:5b:f9:af:38:38:07:55:5d:58:39:
16:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:64:8B:C8:B6:73:C3:9B:26:68:81:21:45:CC:7C:2F:73:2C:5D:79
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS54098.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.115.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:d3:eb:66:dd:3a:49:bb:3d:ce:86:2d:50:50:4f:fe:e5:51:
f5:f5:47:0a:41:5b:6d:6d:db:47:29:e5:6e:02:ad:69:43:04:
33:e3:0b:7b:eb:2c:02:f0:59:76:ab:ce:88:c7:7a:c8:ed:19:
b6:86:ef:91:d0:64:ef:71:ce:ad:bb:8a:2d:c4:9a:c5:8b:ed:
8f:bd:d5:ad:8a:1f:81:d3:70:8b:07:f0:0e:32:fe:51:07:46:
7e:a1:20:54:15:d5:d1:dd:53:72:2b:51:6f:68:67:35:ee:f8:
e8:23:88:64:03:57:46:aa:35:1f:a5:63:68:16:2f:70:4e:ff:
f1:32:e2:7e:7b:d3:96:3d:12:6e:45:f2:84:00:a1:48:68:f7:
f2:15:a7:f6:22:ca:98:77:27:80:3d:c3:75:da:cf:e7:7c:df:
16:49:11:ff:c3:e2:66:80:98:07:9e:f0:3c:05:7a:81:47:5d:
e5:59:39:df:68:24:bd:28:3a:5b:51:74:80:80:5c:09:cc:51:
ea:97:d6:81:e0:d5:06:4d:44:af:33:00:9c:47:2f:fb:bf:e7:
14:09:b2:4c:c9:04:c4:1a:99:fa:0a:8b:52:2b:65:92:4e:c7:
80:9b:b9:24:a8:d8:e5:8b:1b:2c:77:83:4e:83:34:68:2e:a3:
2e:d0:6a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:02:11 2025 by rpki-client