Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS52053.roa
File: AS52053.roa (raw, json)
Hash identifier: xP+Pm8bAsIx0xT3Nv775G9xT6UkIoTeXqrjYCoLsHJ4=
Subject key identifier: E8:6E:9E:91:B0:E9:18:30:8D:B1:66:1A:65:4A:75:17:A1:7B:E7:1B
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2390A9FBBACB708F21C28A7F481B7E3EC28EACAB
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS52053.roa
Signing time: Thu 04 Sep 2025 15:19:12 +0000
ROA not before: Thu 04 Sep 2025 15:14:12 +0000
ROA not after: Thu 03 Sep 2026 15:19:12 +0000
asID: 52053
IP address blocks: 178.93.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:90:a9:fb:ba:cb:70:8f:21:c2:8a:7f:48:1b:7e:3e:c2:8e:ac:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 4 15:14:12 2025 GMT
Not After : Sep 3 15:19:12 2026 GMT
Subject: CN=E86E9E91B0E918308DB1661A654A7517A17BE71B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:95:5f:2b:a6:1a:14:85:c5:74:88:50:13:d3:
db:11:d2:e5:4f:25:19:dd:eb:70:c1:99:40:64:4f:
fb:0c:18:3c:5e:95:8a:b2:5b:00:20:60:a3:83:85:
ca:ac:26:52:21:0e:39:cf:22:10:61:14:c9:e3:58:
5b:7b:30:19:81:31:f8:35:d5:ab:13:c4:7b:d5:a4:
a6:3c:25:92:ed:eb:aa:15:9e:1f:11:40:2f:25:49:
96:67:be:73:db:66:2a:0a:4f:23:f9:f9:43:6f:0b:
53:f9:81:8f:8a:ec:4c:3a:4d:eb:18:b4:f9:3a:1d:
6d:c7:15:2d:85:9e:97:12:d8:7b:da:71:ed:c6:6e:
6e:09:87:21:a0:8c:1b:31:32:84:80:e7:16:db:e1:
9b:51:ad:c0:c5:c9:9c:f2:ff:db:be:71:9f:b1:92:
7d:7f:72:8a:cf:06:98:1c:72:25:c8:5b:72:67:17:
71:4a:4e:fe:ea:17:59:06:62:5b:e7:a7:9f:23:ee:
ca:b5:1c:b2:73:2c:fd:98:c8:c5:42:1c:34:2e:b0:
6c:36:75:ec:81:c5:f8:39:48:b3:38:22:1b:e4:8e:
93:3d:72:4d:a1:03:65:09:0f:ac:17:ec:a2:59:20:
a4:9b:69:02:b5:94:e5:d1:e2:51:58:56:ee:c1:d4:
ae:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6E:9E:91:B0:E9:18:30:8D:B1:66:1A:65:4A:75:17:A1:7B:E7:1B
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS52053.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.93.80.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:49:d5:77:e2:52:90:0a:b4:23:70:91:e1:9f:a6:e2:ce:12:
21:83:2a:8d:c3:48:ac:09:ab:60:2a:9b:aa:53:91:28:15:db:
3c:b0:11:52:82:ae:00:d6:21:27:be:46:e3:ab:8a:f9:36:47:
34:1a:db:cc:3f:84:6b:78:04:53:e1:c7:e6:0f:de:d9:0c:04:
67:b7:08:90:10:ad:4c:01:0a:fa:01:93:0a:0b:68:3b:14:39:
14:26:3e:a9:f1:f3:d2:c4:a5:20:dc:d6:9b:a2:01:22:90:53:
d2:15:c5:d6:37:27:6f:fd:6b:76:5d:91:19:80:11:4c:54:88:
a6:6e:0f:7f:01:d7:66:db:11:25:3f:5a:5d:06:dd:e6:27:eb:
86:a1:ef:00:3a:69:fe:d8:1e:a5:6f:4c:6e:fd:f7:c2:65:4e:
d4:a5:19:bd:c2:53:a3:63:d3:47:ab:72:5a:70:dd:c8:96:68:
4c:a8:42:ce:ee:48:75:b3:e1:aa:75:77:b9:8d:25:b7:ee:b3:
49:3c:65:ba:6e:b4:47:2c:b8:48:33:6b:61:e4:bc:e7:d7:f4:
25:8b:9e:58:75:5d:25:3e:f8:4e:e5:88:b8:4f:00:46:1d:32:
48:37:39:91:03:07:c9:cd:09:ec:10:9b:e2:c9:4f:8b:03:41:
d5:f5:23:15
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUI5Cp+7rLcI8hwop/SBt+PsKOrKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA5MDQxNTE0MTJaFw0yNjA5MDMxNTE5MTJaMDMxMTAvBgNV
BAMTKEU4NkU5RTkxQjBFOTE4MzA4REIxNjYxQTY1NEE3NTE3QTE3QkU3MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMlV8rphoUhcV0iFAT09sR0uVP
JRnd63DBmUBkT/sMGDxelYqyWwAgYKODhcqsJlIhDjnPIhBhFMnjWFt7MBmBMfg1
1asTxHvVpKY8JZLt66oVnh8RQC8lSZZnvnPbZioKTyP5+UNvC1P5gY+K7Ew6TesY
tPk6HW3HFS2FnpcS2Hvace3Gbm4JhyGgjBsxMoSA5xbb4ZtRrcDFyZzy/9u+cZ+x
kn1/corPBpgcciXIW3JnF3FKTv7qF1kGYlvnp58j7sq1HLJzLP2YyMVCHDQusGw2
deyBxfg5SLM4IhvkjpM9ck2hA2UJD6wX7KJZIKSbaQK1lOXR4lFYVu7B1K5HAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQU6G6ekbDpGDCNsWYaZUp1F6F75xswHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNTIwNTMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKyXVAw
DQYJKoZIhvcNAQELBQADggEBAGtJ1XfiUpAKtCNwkeGfpuLOEiGDKo3DSKwJq2Aq
m6pTkSgV2zywEVKCrgDWISe+RuOrivk2RzQa28w/hGt4BFPhx+YP3tkMBGe3CJAQ
rUwBCvoBkwoLaDsUORQmPqnx89LEpSDc1puiASKQU9IVxdY3J2/9a3ZdkRmAEUxU
iKZuD38B12bbESU/Wl0G3eYn64ah7wA6af7YHqVvTG7998JlTtSlGb3CU6Nj00er
clpw3ciWaEyoQs7uSHWz4ap1d7mNJbfus0k8ZbputEcsuEgza2HkvOfX9CWLnlh1
XSU++E7liLhPAEYdMkg3OZEDB8nNCewQm+LJT4sDQdX1IxU=
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:33:12 2025 by rpki-client