Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS262287.roa
File: AS262287.roa (raw, json)
Hash identifier: CWC7EZ0UcaPnVbJIsrPyotR/mr8LyVTnO5S3qf1sQ8k=
Subject key identifier: C3:53:D9:82:38:C5:C6:33:23:C6:1C:E7:91:13:AB:5B:7F:BC:57:0A
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4D6E18763CBBA9F58CA5F6B55417A3333527AC84
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS262287.roa
Signing time: Wed 17 Sep 2025 17:55:07 +0000
ROA not before: Wed 17 Sep 2025 17:50:07 +0000
ROA not after: Wed 16 Sep 2026 17:55:07 +0000
asID: 262287
IP address blocks: 92.112.170.0/24 maxlen: 24
92.112.171.0/24 maxlen: 24
92.112.172.0/24 maxlen: 24
92.112.175.0/24 maxlen: 24
92.112.200.0/24 maxlen: 24
92.112.202.0/24 maxlen: 24
92.113.234.0/24 maxlen: 24
92.113.235.0/24 maxlen: 24
92.113.239.0/24 maxlen: 24
92.113.240.0/24 maxlen: 24
92.113.244.0/24 maxlen: 24
92.113.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:6e:18:76:3c:bb:a9:f5:8c:a5:f6:b5:54:17:a3:33:35:27:ac:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 17 17:50:07 2025 GMT
Not After : Sep 16 17:55:07 2026 GMT
Subject: CN=C353D98238C5C63323C61CE79113AB5B7FBC570A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c5:8d:53:3a:f1:dc:7b:81:63:7f:0c:de:81:
04:79:a4:ae:fe:a0:c6:6b:1c:b5:aa:e0:5e:83:9f:
82:b7:2c:28:7c:4c:42:8a:5d:40:3b:dc:db:9c:32:
54:25:28:1d:32:21:6d:6e:0d:e7:36:0b:32:ff:1d:
80:7b:f7:e0:1e:3d:7a:01:eb:93:77:f4:45:fe:09:
f3:25:64:0d:3f:e0:e7:f7:18:c9:30:38:e3:33:03:
08:62:5f:4c:5e:b1:7d:a4:8f:8e:6b:12:ba:3f:f9:
c9:b8:17:37:d0:d4:b4:8e:f1:c7:8a:aa:7c:6c:1c:
cd:11:5a:7d:b5:6e:ca:62:2a:d1:c8:b4:19:5c:f8:
fe:43:64:85:ea:2b:6b:9b:e3:ba:72:75:b3:58:d1:
98:a1:9d:7b:3c:d5:30:9e:45:be:27:7e:fa:81:61:
09:53:64:a1:48:68:89:1d:98:9e:ce:a8:3d:5d:73:
93:b3:30:3a:d0:30:f4:f3:b3:e2:00:ef:da:f6:a0:
a9:76:ae:d9:03:a5:09:04:e6:3e:49:6a:dd:03:89:
47:bc:99:64:95:38:23:a0:a6:85:4a:25:1a:59:f9:
13:c0:7e:2e:bc:26:02:11:af:df:d8:7b:0b:14:f2:
ae:e9:f8:06:19:7d:18:f5:38:40:9f:68:d4:11:08:
40:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:53:D9:82:38:C5:C6:33:23:C6:1C:E7:91:13:AB:5B:7F:BC:57:0A
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS262287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.170.0-92.112.172.255
92.112.175.0/24
92.112.200.0/24
92.112.202.0/24
92.113.234.0/23
92.113.239.0-92.113.240.255
92.113.244.0/23
Signature Algorithm: sha256WithRSAEncryption
71:1b:6a:98:64:47:a4:67:b1:82:84:2e:3c:e4:78:26:2a:36:
61:ca:98:8b:36:86:6a:ab:97:33:40:e8:ad:35:d0:c5:dc:03:
23:6f:bb:d7:f5:96:56:d4:ac:ab:f3:72:4d:ec:ae:bb:7b:20:
66:64:b5:a6:80:ad:18:0b:e9:40:1a:a4:ac:eb:13:a7:31:51:
3b:2e:13:38:25:66:05:63:c3:28:f7:7a:d7:2b:87:ef:3c:a2:
08:63:1f:7f:47:40:1f:12:b6:e1:ce:e0:d5:c4:dd:e4:96:29:
cd:b7:c9:05:77:af:c4:58:e6:1c:a5:89:f9:3d:ce:f0:89:f1:
65:db:70:79:f2:3a:95:31:76:11:61:e4:33:6e:76:28:50:8b:
7d:5b:0b:f2:21:b3:f4:3d:e6:aa:7b:fd:73:29:df:01:a9:ab:
1e:78:6c:5c:a3:45:df:41:cd:5f:bd:84:71:98:0e:54:79:28:
be:d5:36:6f:a0:a3:09:e8:87:37:0d:e6:c9:2b:0c:a2:34:02:
c1:a4:34:31:2b:a3:e1:34:b4:08:ab:8d:d8:39:4c:2a:21:4d:
3d:0f:53:17:15:23:37:18:74:9f:f7:91:78:5c:e5:b2:2a:62:
9e:d4:4a:ac:1a:fc:12:69:85:fe:eb:58:28:b7:0e:c7:24:33:
66:7b:68:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:35:37 2025 by rpki-client