Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS44547.roa
File: AS44547.roa (raw, json)
Hash identifier: CjRwiP6S8Q4LuoOsdzg8S8JshWS+rYM8+JXu6a8CSDs=
Subject key identifier: A4:54:34:6A:30:22:8F:74:E8:AC:A1:6C:08:7E:C9:56:69:86:C8:04
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 5B859D63C4765BB4D77E800A90CBD9D774B7985F
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS44547.roa
Signing time: Fri 15 Aug 2025 19:31:47 +0000
ROA not before: Fri 15 Aug 2025 19:26:47 +0000
ROA not after: Fri 14 Aug 2026 19:31:47 +0000
asID: 44547
IP address blocks: 92.249.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:85:9d:63:c4:76:5b:b4:d7:7e:80:0a:90:cb:d9:d7:74:b7:98:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Aug 15 19:26:47 2025 GMT
Not After : Aug 14 19:31:47 2026 GMT
Subject: CN=A454346A30228F74E8ACA16C087EC9566986C804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0a:26:76:3b:86:ea:b3:7c:92:3a:46:cc:90:
20:0b:c7:be:ee:3b:55:26:16:e9:bd:51:4b:de:34:
96:9f:64:7e:aa:a3:d9:b6:02:2e:d3:1c:e3:48:cf:
3e:37:93:2d:75:79:1e:4e:67:20:81:58:e1:35:96:
a7:08:ce:a0:a0:29:6c:65:43:3d:17:61:40:ea:44:
7f:0d:d2:6b:e0:c2:52:14:8a:8b:bc:9c:5e:34:a6:
38:c8:71:0a:0b:8a:38:f8:20:48:03:7c:69:c6:50:
d7:60:2a:fa:c2:8c:4d:e1:0e:d1:aa:44:95:fa:bf:
34:83:20:5d:7b:c4:9e:1f:0f:3a:3c:10:05:62:50:
f5:8a:74:ff:0f:e1:e9:7b:f2:2a:7b:e5:41:43:8a:
77:54:6f:da:d2:b7:3b:4b:b7:5c:b4:a0:e4:3d:a6:
18:96:a2:c1:c8:16:7e:0f:1a:93:31:21:e8:81:b3:
02:ff:83:80:fb:f0:93:e0:a5:d5:8f:59:12:cb:2e:
cf:00:9b:65:4c:2e:46:6a:e2:00:b7:0c:68:42:d2:
2e:d1:b1:80:65:15:f0:eb:09:47:46:63:a2:21:27:
9f:60:fd:f7:f4:b6:fb:98:f4:9f:ae:51:da:48:a5:
ee:c5:c3:63:9f:18:2d:69:79:0e:39:ab:e7:39:7c:
f6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:54:34:6A:30:22:8F:74:E8:AC:A1:6C:08:7E:C9:56:69:86:C8:04
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS44547.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.60.0/24
Signature Algorithm: sha256WithRSAEncryption
99:5d:7c:57:ce:17:eb:02:a9:0b:4c:50:75:05:86:e0:a9:76:
74:7a:b1:02:a5:c7:d1:ad:dd:32:60:04:db:2a:d5:41:2f:98:
70:57:f9:dd:b4:08:7d:18:92:6d:af:35:22:66:a6:17:0c:8a:
86:7a:e1:07:3a:ff:d6:18:cd:05:54:4d:6a:96:c2:a0:4d:bc:
01:81:b2:41:a4:a1:a7:ce:50:5b:1f:c7:2c:cc:d2:a2:7c:c7:
c2:37:af:63:f3:91:81:56:40:0f:44:0c:2d:ae:e4:c7:55:38:
11:14:f0:0f:b2:25:b0:3c:4a:63:32:a3:3d:6a:e5:2f:f1:2a:
f2:3d:bf:e5:70:17:1f:36:39:d0:cb:08:36:e7:ad:0d:44:e0:
ce:0a:a1:1d:c2:15:90:69:1e:76:71:a5:15:86:16:eb:e7:8b:
31:46:f1:66:d0:b3:07:1e:0b:70:86:13:aa:05:0a:9d:c0:48:
34:60:29:13:5f:76:cd:41:dd:28:55:92:38:b8:66:6a:f0:72:
94:ee:cc:a2:49:62:8b:87:ca:76:e3:69:46:fe:cd:9a:b5:2f:
59:20:ad:cb:ea:e2:d7:7d:6b:32:63:19:5e:ed:bc:13:05:82:
32:fb:a9:5d:53:f3:3e:d3:ae:3d:60:5c:03:08:0a:35:31:a9:
c9:da:6d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:36:28 2025 by rpki-client