Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS57152.roa
File: AS57152.roa (raw, json)
Hash identifier: qtsnlyirutNpeG6l6cGC+B+Ka0inQHjxuayj05NgeSQ=
Subject key identifier: 50:E3:82:11:3A:43:84:3A:CE:9F:9F:5C:42:01:3D:E6:C6:94:CC:98
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 1403F3D76969D7720266D1939946569684C5641D
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS57152.roa
Signing time: Mon 22 Sep 2025 16:21:31 +0000
ROA not before: Mon 22 Sep 2025 16:16:31 +0000
ROA not after: Mon 21 Sep 2026 16:21:31 +0000
asID: 57152
IP address blocks: 93.190.8.0/24 maxlen: 24
93.190.9.0/24 maxlen: 24
93.190.10.0/24 maxlen: 24
93.190.11.0/24 maxlen: 24
193.32.184.0/24 maxlen: 24
193.32.185.0/24 maxlen: 24
212.87.197.0/24 maxlen: 24
212.87.198.0/24 maxlen: 24
212.87.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:03:f3:d7:69:69:d7:72:02:66:d1:93:99:46:56:96:84:c5:64:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Sep 22 16:16:31 2025 GMT
Not After : Sep 21 16:21:31 2026 GMT
Subject: CN=50E382113A43843ACE9F9F5C42013DE6C694CC98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ef:21:4e:db:52:8d:6d:ef:bb:84:bc:f8:d1:
56:5d:d4:95:92:84:5c:0a:bd:09:96:24:59:33:38:
d2:a4:d9:90:0a:58:44:c0:35:28:e9:e0:1d:e4:a9:
70:54:eb:c9:e4:c4:af:ca:1b:f3:65:39:ad:83:9e:
1d:a9:4d:22:8d:f7:9b:14:ed:c7:8f:82:4f:6a:87:
81:14:27:c6:ca:ea:f7:cb:39:d4:a0:ca:31:89:35:
0c:ea:0c:ec:3c:82:a4:dd:5b:6d:d5:11:8b:48:0c:
b2:9e:35:ab:aa:41:83:63:87:b0:90:0b:9b:00:83:
14:15:00:13:ac:5c:ef:22:78:3d:68:c1:7a:9a:87:
70:ff:31:63:ac:a4:22:6b:86:aa:2d:56:c8:0f:56:
00:39:22:e1:e0:d9:49:3f:0f:5f:6f:c0:70:39:ca:
d5:c6:0c:79:60:88:bd:f0:58:03:5d:12:8c:ac:a7:
b8:92:16:2c:6c:e1:6f:e3:c4:42:22:79:32:45:70:
d7:a3:84:73:2b:ab:3b:29:95:cf:b8:a7:e3:56:0c:
4d:96:e7:fb:94:8f:cd:85:e5:9a:1c:ac:50:e9:20:
d2:80:6c:17:19:25:cc:8f:7d:1d:aa:46:a4:41:21:
ee:dc:a9:49:03:2b:59:6e:9d:eb:5b:78:51:7a:c9:
8b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E3:82:11:3A:43:84:3A:CE:9F:9F:5C:42:01:3D:E6:C6:94:CC:98
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS57152.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.8.0/22
193.32.184.0/23
212.87.197.0-212.87.199.255
Signature Algorithm: sha256WithRSAEncryption
04:8c:92:9b:75:66:f5:cf:a3:12:ad:28:65:b5:c8:00:d2:b4:
a3:32:20:f6:f6:55:72:5a:0b:e4:e1:b5:84:c6:ba:72:e3:f9:
66:c8:be:e8:6d:38:2f:be:c6:08:10:7b:8f:0c:d4:71:8a:56:
40:88:c5:80:0b:fe:d3:b1:8a:eb:49:a2:6d:15:7c:89:42:fe:
71:bd:84:e7:2a:ce:e5:56:35:7f:cf:67:54:6d:39:d8:f1:d7:
90:ce:8a:af:47:cc:65:d6:39:60:f6:5d:c3:62:94:c5:2d:34:
b9:7b:b6:63:9a:de:2e:01:3d:49:e2:e0:39:94:29:23:d2:47:
21:a1:7f:14:92:eb:05:8c:47:9c:3a:4a:4c:d6:c1:c3:a4:8b:
11:d1:38:ef:0a:fc:ec:52:f2:27:b5:04:43:54:29:12:8c:8a:
de:c1:0e:8e:c6:78:ce:05:81:c0:c7:00:c5:61:48:35:cc:45:
2a:e6:fb:c5:0f:32:3a:98:9f:16:22:bf:09:38:4b:b9:2b:e5:
fe:f7:bf:50:a9:f0:9e:02:3b:70:d2:18:ec:ad:be:ce:48:55:
6a:02:62:92:7f:45:64:15:d5:07:ce:d6:99:2f:64:ad:ad:42:
a1:8b:de:ce:48:56:a4:65:33:27:ad:f6:fd:fa:5d:9d:d5:5a:
a3:8e:0f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:34:07 2025 by rpki-client