Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53356.roa
File: AS53356.roa (raw, json)
Hash identifier: C7FwbAaLFtm1Nc0GJ/QJtyZEUua5JIFEpylVD8kmrl4=
Subject key identifier: 2C:FB:21:0E:9C:D1:54:90:FF:EC:17:0A:38:FE:17:D2:CE:5E:FC:E7
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3B04097CB1809A23200B35FABEBE8ED188FE6FB1
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53356.roa
Signing time: Mon 02 Mar 2026 12:31:58 +0000
ROA not before: Mon 02 Mar 2026 12:26:58 +0000
ROA not after: Mon 01 Mar 2027 12:31:58 +0000
asID: 53356
IP address blocks: 92.113.224.0/24 maxlen: 24
95.135.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:04:09:7c:b1:80:9a:23:20:0b:35:fa:be:be:8e:d1:88:fe:6f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 2 12:26:58 2026 GMT
Not After : Mar 1 12:31:58 2027 GMT
Subject: CN=2CFB210E9CD15490FFEC170A38FE17D2CE5EFCE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:e9:c3:41:a7:cd:88:ae:a7:6f:52:2d:96:
4c:9a:5b:0c:ad:de:e8:54:4e:80:8d:a5:6b:24:74:
76:1d:41:d9:23:e8:43:bb:cb:b8:e1:61:9b:9e:9e:
45:97:cf:25:46:a9:ad:2f:69:2b:16:7e:4d:72:9d:
b9:66:2a:a8:83:73:fa:55:f5:9c:01:10:df:6a:c5:
34:6b:0f:9e:c9:4a:b8:cd:51:1f:fa:6d:66:b4:6c:
9d:95:eb:81:c0:c5:12:d1:81:77:aa:c1:be:e4:86:
da:dd:e6:b2:d2:f9:7f:0f:33:e7:3c:f1:5b:60:67:
a3:21:c0:2c:c1:2d:fc:f9:09:b7:de:64:8a:a9:a4:
1e:2b:b6:02:41:01:bc:10:ee:e8:fe:e4:05:c0:72:
d5:5b:25:71:1d:a5:cc:30:06:74:b6:09:6a:e9:c0:
b6:42:53:b7:25:45:52:d5:72:7a:94:46:16:eb:71:
1d:85:1c:40:52:d3:47:33:b2:05:a4:da:43:e4:2b:
26:75:bc:6a:4e:ab:c4:9b:a4:b0:68:93:dc:cb:8d:
be:07:5b:61:b0:1e:fe:b0:3c:67:eb:17:cc:d9:ad:
e7:44:61:76:4d:a3:51:02:20:0f:84:9c:73:11:40:
57:72:2a:c4:d0:c0:0c:20:f3:01:fd:90:41:93:4c:
22:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FB:21:0E:9C:D1:54:90:FF:EC:17:0A:38:FE:17:D2:CE:5E:FC:E7
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.224.0/24
95.135.42.0/24
Signature Algorithm: sha256WithRSAEncryption
78:c5:82:60:9c:4b:e9:db:66:a6:85:12:bd:15:9c:35:c8:80:
79:ef:c1:11:98:48:65:c8:7a:9c:1e:2e:9d:bd:9c:8e:ca:fd:
8b:a9:7f:6f:56:01:7b:d3:8c:67:75:68:56:e0:92:bd:33:21:
78:7b:bf:fa:07:10:6a:fe:65:d5:bf:e8:de:95:24:3b:89:37:
06:bd:76:68:ca:e6:80:2d:95:d5:1d:74:06:53:81:cf:de:15:
c4:5b:e2:a9:be:a5:07:e1:4c:af:8d:52:c2:c8:59:ef:5c:cb:
35:a0:18:04:c7:eb:87:35:29:92:16:20:b8:84:87:90:1b:99:
45:ef:24:4e:5e:0c:5d:94:36:6f:8a:33:b4:30:0f:f4:a7:36:
fc:2a:1e:e9:09:e5:48:ad:fe:f4:75:3d:12:9e:99:01:70:9c:
c8:d6:8a:a3:d2:c0:46:6c:3d:26:c1:44:9f:41:bd:eb:5c:88:
c6:7a:3e:e1:42:31:98:b7:21:ea:2b:3f:82:d0:24:54:17:cd:
ee:0c:5c:49:d0:97:e2:a7:13:8a:25:57:f6:5a:dc:a2:b1:84:
dd:1f:4d:5a:6c:2c:6b:1c:6b:9b:7c:12:4e:bb:91:b0:c2:4e:
72:4b:34:db:72:61:d9:a0:e8:15:43:8a:62:55:23:28:5e:91:
17:36:dd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:48:42 2026 by rpki-client