Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53356.roa
File: AS53356.roa (raw, json)
Hash identifier: DEwcoP4nVyomR8MvoXNJ1TVn6X7yv6GHu7LjJI7i1wk=
Subject key identifier: DF:7C:B5:53:20:6D:A2:48:E2:E9:42:46:26:29:28:1E:CF:1A:E0:4E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4229273A35CDDE2BC8D6068126F9C612E6CF3539
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53356.roa
Signing time: Fri 10 Oct 2025 18:05:51 +0000
ROA not before: Fri 10 Oct 2025 18:00:51 +0000
ROA not after: Fri 09 Oct 2026 18:05:51 +0000
asID: 53356
IP address blocks: 92.113.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:29:27:3a:35:cd:de:2b:c8:d6:06:81:26:f9:c6:12:e6:cf:35:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 10 18:00:51 2025 GMT
Not After : Oct 9 18:05:51 2026 GMT
Subject: CN=DF7CB553206DA248E2E942462629281ECF1AE04E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e4:98:91:25:6c:87:7d:72:f3:17:30:a2:2a:
fe:72:45:72:4d:88:c4:0d:96:a7:e1:88:e9:df:24:
81:1e:ec:14:d2:5b:5b:00:27:a1:d1:bf:46:46:15:
de:a7:f2:b9:7e:27:39:48:0e:75:8e:a3:0b:13:2b:
2c:bf:be:d6:f9:d7:77:c6:7f:88:6b:bb:8d:6c:f5:
b9:52:30:ff:85:62:6f:79:cc:65:f8:97:7f:86:61:
ac:b9:90:d9:ee:1c:0d:6f:6a:7d:c2:3d:e3:3a:96:
d3:f7:f1:42:2c:a1:71:d5:d4:bd:a5:55:44:be:c2:
b5:80:5f:00:75:14:46:d0:ff:8e:4d:05:59:eb:34:
ef:b6:d0:ee:c8:da:09:c6:b8:dc:e3:d1:cd:a8:3b:
57:6a:51:e7:aa:c2:c9:76:c8:12:b8:97:8d:1d:02:
60:96:d2:d4:5d:be:0b:47:29:03:9e:23:b3:2c:6d:
dc:6d:55:78:6b:88:21:d7:eb:00:88:49:66:d3:ad:
1a:37:51:9e:f5:a3:81:bd:de:8e:20:0b:4d:16:7a:
a9:38:51:14:78:86:bb:31:cf:4d:4b:ce:85:3f:2c:
04:2e:37:bd:20:cb:9e:1f:17:e2:b1:ba:7f:0e:00:
fb:01:10:96:a3:b3:fe:33:cc:7b:f1:00:aa:b5:61:
85:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7C:B5:53:20:6D:A2:48:E2:E9:42:46:26:29:28:1E:CF:1A:E0:4E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.184.0/24
Signature Algorithm: sha256WithRSAEncryption
63:d3:c7:66:bb:9f:19:cc:30:41:2b:5c:d1:c2:8b:76:23:85:
c8:57:41:b2:f8:03:29:c3:71:04:3a:86:1b:47:9d:d6:12:21:
b0:28:29:93:ae:11:46:83:a9:05:ca:51:45:a4:8f:cd:cd:f9:
a1:78:dc:e9:be:b2:ce:23:27:86:71:87:f4:86:27:5e:e3:1b:
2c:e0:b5:bd:ca:01:69:ce:d1:70:fa:d8:e2:00:ea:7e:82:f0:
4e:e1:65:3c:95:ac:50:14:bc:c1:d3:36:27:62:2f:a6:b1:26:
a6:73:7f:17:21:91:26:44:fe:97:b9:a1:62:2e:6c:ef:62:6b:
a2:ee:77:69:11:09:42:f6:95:c3:54:a5:35:97:0a:47:8c:4e:
54:f8:b4:3c:30:d4:75:fb:38:6a:2e:a0:c2:f0:a1:dd:ad:4f:
7c:24:ef:b9:83:bd:7a:6e:d8:4b:4d:ba:f4:12:88:2c:eb:e9:
64:3d:e4:40:13:16:64:bd:7a:d5:b2:af:91:70:f6:51:57:fb:
0f:c7:cb:1a:92:19:83:86:03:66:df:7b:71:03:0e:e3:1b:66:
9e:ae:a3:0b:c5:d8:4d:ab:1a:8c:cf:20:bd:c0:4c:7e:63:c5:
e3:7d:be:e3:e0:be:2d:a4:d1:20:8c:51:14:5c:d0:d3:e9:d9:
e6:a3:9f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:33:12 2025 by rpki-client