Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS39600.roa
File: AS39600.roa (raw, json)
Hash identifier: ewX872chJ149e3ni4+nBZkK+zjTl77iLS4i0rAdKgYA=
Subject key identifier: 91:05:48:42:9C:AF:C1:F8:A2:A7:2B:9A:94:D5:9E:3E:8C:7F:96:C5
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 65245B3F38D7DD438B3C002ACC482E3229B4A648
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS39600.roa
Signing time: Mon 08 Sep 2025 00:55:00 +0000
ROA not before: Mon 08 Sep 2025 00:50:00 +0000
ROA not after: Mon 07 Sep 2026 00:55:00 +0000
asID: 39600
IP address blocks: 141.11.152.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:24:5b:3f:38:d7:dd:43:8b:3c:00:2a:cc:48:2e:32:29:b4:a6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 8 00:50:00 2025 GMT
Not After : Sep 7 00:55:00 2026 GMT
Subject: CN=910548429CAFC1F8A2A72B9A94D59E3E8C7F96C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:df:00:c7:49:9a:04:c1:0b:a9:49:ca:8e:16:
27:4e:4b:f5:47:54:06:7c:e8:02:9a:e9:db:55:35:
44:91:b6:99:e8:f4:e6:ce:ed:31:25:d8:da:82:1a:
26:23:0e:ca:e9:78:73:14:f4:73:dc:32:d4:14:0d:
29:21:6d:04:d1:c6:7d:ae:89:9c:b2:df:25:cd:a1:
a7:d1:9b:80:31:9e:e1:dd:c0:52:65:f4:70:60:9e:
a5:86:3e:90:66:77:eb:24:f5:a2:6b:ed:4f:a9:2a:
b4:72:56:dc:08:4f:c6:fe:51:42:1c:4e:42:6f:2c:
b1:c9:e7:ca:2f:82:6c:31:c0:b6:68:a8:14:5f:88:
6a:d6:ae:d2:e8:49:d3:ce:2a:64:41:bf:4f:48:8a:
7d:c1:a1:30:57:33:be:2d:c2:36:b9:df:82:d8:86:
7e:ac:82:a3:b3:fc:f3:5f:8e:da:1e:a0:24:18:b8:
9f:ad:bd:e9:f2:02:82:7d:1e:5c:87:cd:07:bc:3d:
99:23:26:c6:07:ea:d9:6e:4e:0f:5e:d6:9c:6b:b4:
32:af:05:3f:8f:49:63:21:77:85:85:cd:10:64:bc:
5d:7f:2e:7e:36:17:52:ec:d4:b8:84:df:28:09:b3:
39:34:dd:91:9c:fd:06:81:8f:c6:68:a5:7a:3e:85:
08:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:05:48:42:9C:AF:C1:F8:A2:A7:2B:9A:94:D5:9E:3E:8C:7F:96:C5
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS39600.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.152.0/23
Signature Algorithm: sha256WithRSAEncryption
d7:7c:1f:ee:24:48:f9:cb:7b:a4:ee:dd:1a:4c:e6:5c:3a:0e:
bb:18:e3:f8:06:97:ce:cb:d5:52:5d:67:59:15:18:e1:a5:63:
d9:03:d0:0c:f6:e1:c0:84:64:4d:cc:b8:36:b6:e1:b1:0a:87:
1a:7e:0f:97:97:3f:ce:54:3f:37:bd:7e:1d:4b:e3:df:53:0d:
3c:20:be:aa:e2:70:82:8c:d5:7b:16:65:75:17:56:e3:89:43:
f8:65:10:72:2a:59:d4:5e:17:42:83:d6:47:b0:b2:14:08:69:
40:81:75:1e:c6:53:96:27:af:31:6f:8c:3c:db:cd:07:16:41:
9e:ef:04:d1:5e:07:7c:6d:34:f5:ab:6a:c9:db:7f:2e:8b:c7:
3a:14:0a:a3:be:5d:74:7f:08:ac:5c:07:61:03:f6:3d:37:28:
ca:74:27:53:05:c1:4c:00:ed:58:35:a2:07:50:00:0f:85:97:
ec:82:85:48:a3:74:fd:22:cc:57:22:73:4f:3d:7b:fa:79:46:
7d:a3:75:d3:04:44:a7:de:e8:23:5c:1a:13:68:0b:cd:3a:28:
d3:bb:ce:b4:18:14:a1:9f:57:c1:e0:a0:9a:db:84:f5:c9:33:
d8:44:f8:c7:da:0a:40:55:d2:64:ad:0f:0a:39:1e:0a:b2:32:
59:c9:af:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:10:23 2025 by rpki-client