Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3356.roa
File: AS3356.roa (raw, json)
Hash identifier: OYF3Byi8LJaxG4EChesvP0OZWhVfj389oCFSo5NOV+g=
Subject key identifier: 0B:CA:4B:8C:F4:EF:E3:02:01:AE:D3:2D:4D:12:75:98:BD:4F:B0:57
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 28A35F67668B187CFEF29D2672A7FBFDDB62B4F1
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3356.roa
Signing time: Mon 16 Jun 2025 14:01:41 +0000
ROA not before: Mon 16 Jun 2025 13:56:41 +0000
ROA not after: Mon 15 Jun 2026 14:01:41 +0000
asID: 3356
IP address blocks: 46.202.16.0/22 maxlen: 24
46.202.24.0/22 maxlen: 24
46.202.104.0/22 maxlen: 24
46.202.112.0/22 maxlen: 24
46.202.120.0/22 maxlen: 24
46.203.24.0/22 maxlen: 24
46.203.48.0/22 maxlen: 24
46.203.68.0/22 maxlen: 24
46.203.153.0/24 maxlen: 24
92.112.1.0/24 maxlen: 24
92.112.4.0/24 maxlen: 24
92.112.14.0/24 maxlen: 24
92.112.64.0/24 maxlen: 24
92.112.84.0/24 maxlen: 24
92.112.86.0/24 maxlen: 24
92.112.90.0/24 maxlen: 24
92.112.94.0/24 maxlen: 24
92.112.110.0/24 maxlen: 24
92.113.156.0/24 maxlen: 24
92.113.157.0/24 maxlen: 24
92.113.163.0/24 maxlen: 24
92.113.164.0/24 maxlen: 24
92.113.165.0/24 maxlen: 24
92.113.168.0/24 maxlen: 24
92.113.225.0/24 maxlen: 24
92.113.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:a3:5f:67:66:8b:18:7c:fe:f2:9d:26:72:a7:fb:fd:db:62:b4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 16 13:56:41 2025 GMT
Not After : Jun 15 14:01:41 2026 GMT
Subject: CN=0BCA4B8CF4EFE30201AED32D4D127598BD4FB057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f0:73:ec:dc:c2:d3:34:b0:f4:03:23:6b:a5:
21:a6:e8:57:f8:12:03:f4:da:87:04:cd:bd:72:6f:
f2:8c:43:db:af:45:ce:d3:85:e7:80:bb:b5:d5:c8:
6e:79:64:eb:38:58:18:da:a2:78:4c:2a:89:81:50:
bb:b2:2b:fa:03:f3:d1:ea:05:6f:dc:df:ef:ee:78:
60:d7:62:ea:63:0c:81:8c:e8:57:31:da:cf:90:a0:
b1:a1:ce:13:4c:be:73:72:c2:04:37:f8:c8:ae:e9:
16:46:ed:fe:bb:6a:b8:59:eb:0f:ef:28:b8:4e:23:
da:8b:08:16:c6:38:2e:de:2e:9d:3b:12:e5:d0:b4:
4a:5f:42:44:1c:b6:49:9b:a3:28:56:1f:eb:20:57:
e3:28:ef:0f:f3:19:37:75:83:39:ff:7f:86:e6:dd:
c9:f1:ee:f4:46:aa:02:a3:4a:48:99:0c:5f:d4:16:
2d:93:df:d6:b3:0d:31:46:4e:cb:52:f1:d0:09:62:
f0:2e:6c:c9:78:c9:8e:d7:f9:e8:25:42:d5:54:e4:
42:ec:3b:cb:f1:73:20:6e:27:96:ed:dd:72:20:6e:
44:a5:c4:7c:e2:95:79:56:f7:89:fc:f9:a9:9b:dc:
b2:90:bb:95:90:ce:4c:6f:03:79:92:ee:4b:4d:84:
a6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CA:4B:8C:F4:EF:E3:02:01:AE:D3:2D:4D:12:75:98:BD:4F:B0:57
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.16.0/22
46.202.24.0/22
46.202.104.0/22
46.202.112.0/22
46.202.120.0/22
46.203.24.0/22
46.203.48.0/22
46.203.68.0/22
46.203.153.0/24
92.112.1.0/24
92.112.4.0/24
92.112.14.0/24
92.112.64.0/24
92.112.84.0/24
92.112.86.0/24
92.112.90.0/24
92.112.94.0/24
92.112.110.0/24
92.113.156.0/23
92.113.163.0-92.113.165.255
92.113.168.0/24
92.113.225.0-92.113.226.255
Signature Algorithm: sha256WithRSAEncryption
9d:d4:04:a5:0b:87:f6:b4:67:e4:73:f3:bd:ce:67:ea:28:be:
6b:d2:fb:eb:c3:1c:21:c4:93:67:76:20:84:c8:9b:cc:29:51:
d6:4b:a3:fb:77:48:4c:a8:16:ac:ae:3e:89:45:5f:e0:cf:3c:
96:72:06:95:1a:f7:f9:b8:97:1e:d7:6e:c4:05:b6:25:f4:f1:
82:78:5b:a6:96:66:0e:c1:91:3c:bd:4d:2d:55:ce:e4:20:60:
a2:0a:17:3c:aa:5e:40:53:90:00:1f:4f:6d:59:a7:bb:53:6c:
f1:a5:0d:e6:8d:86:a3:05:de:63:35:c8:63:3b:b9:5d:e7:54:
40:2c:d0:49:7b:ab:40:a1:18:fd:d5:e2:d1:2c:62:72:a6:6b:
b7:08:4a:b2:6d:3e:67:bb:44:9e:d5:da:82:08:2d:3a:e5:23:
0c:92:04:a2:b7:57:72:b5:ec:89:b6:98:f8:25:57:8e:5e:08:
c0:ee:0a:49:ae:e7:8f:a7:2d:06:a5:5e:35:b6:c5:bf:62:26:
d6:eb:62:80:44:f7:30:58:fe:5b:6f:0a:6a:02:af:95:da:fd:
bc:19:94:7e:27:26:e3:d1:c4:8a:2d:b1:f4:5f:8f:bc:c5:74:
6e:6b:9a:61:17:26:e5:ae:db:f5:fa:93:57:02:45:de:33:2a:
6d:85:37:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:55:15 2025 by rpki-client