Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53388.roa
File: AS53388.roa (raw, json)
Hash identifier: 6v8PTSV5GuOgS2zil92dBYqXODC4XouDRT0xjnvg3wA=
Subject key identifier: 50:EB:EB:9B:17:E8:60:3F:55:08:98:7C:37:87:6F:4A:C7:EB:1D:6F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 448DFA3ABACE999716F83CEB340910F233B7B30F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53388.roa
Signing time: Tue 07 Oct 2025 08:12:52 +0000
ROA not before: Tue 07 Oct 2025 08:07:52 +0000
ROA not after: Tue 06 Oct 2026 08:12:52 +0000
asID: 53388
IP address blocks: 95.135.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:8d:fa:3a:ba:ce:99:97:16:f8:3c:eb:34:09:10:f2:33:b7:b3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 7 08:07:52 2025 GMT
Not After : Oct 6 08:12:52 2026 GMT
Subject: CN=50EBEB9B17E8603F5508987C37876F4AC7EB1D6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:26:2c:22:d3:7d:48:ef:ea:a3:6c:14:96:d6:
73:70:aa:ca:fb:72:86:2c:e4:59:73:61:7f:cb:34:
4e:21:27:3c:cf:f1:3c:cf:2b:4a:1e:bf:fe:58:7e:
cf:6e:b1:92:f2:5d:6e:dd:04:4e:37:9f:34:2d:7f:
c4:87:65:49:6c:85:94:ca:2d:84:f9:cc:b3:3a:91:
0b:da:e2:60:22:d1:a0:7f:f6:de:f2:d3:3c:7a:7d:
c1:62:48:ca:14:0d:d0:31:27:75:8c:ce:f9:d6:c0:
44:c7:f7:3e:49:ab:57:7f:09:65:a8:07:e2:10:95:
3c:db:5f:c8:e9:fb:7a:7e:53:89:a5:63:a7:37:83:
e5:cc:24:da:97:b3:0c:1b:fb:7a:26:ad:8c:29:ad:
66:fd:3d:72:da:6d:5b:d9:10:2f:3f:88:aa:c0:f0:
08:b1:c1:77:10:37:5c:7f:34:7e:31:44:6a:dc:ed:
73:fa:80:da:93:96:10:71:ec:4e:19:dd:51:10:3f:
53:4c:1f:03:47:f2:26:9e:cb:cc:c1:fa:77:a2:b7:
83:75:f5:e9:ff:b6:19:8b:f9:ac:90:3b:86:10:9d:
5a:fd:66:7c:68:e1:64:5c:de:f4:eb:f6:aa:dd:87:
fb:9e:6b:e9:2d:68:a7:e5:02:21:fe:71:2e:5c:60:
25:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EB:EB:9B:17:E8:60:3F:55:08:98:7C:37:87:6F:4A:C7:EB:1D:6F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53388.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.125.0/24
Signature Algorithm: sha256WithRSAEncryption
50:c3:ee:f3:46:cb:57:8f:b2:7b:fa:05:a2:c1:ab:94:44:5d:
74:b1:ef:d4:0e:1f:e1:ce:1d:db:01:0f:c2:93:5a:5a:b2:c8:
33:83:9b:2c:d8:31:78:b7:21:e4:31:b3:c6:9f:92:0f:94:cc:
ee:ce:30:9c:5f:69:44:be:3c:94:90:7c:c2:5c:50:44:82:ef:
10:92:ae:dc:02:a6:36:52:a0:ef:ad:59:56:c6:36:8b:95:1c:
9a:be:22:6c:d6:eb:47:07:2f:65:8b:09:da:19:12:d5:07:e5:
71:56:c9:d4:a8:6c:a6:85:1e:56:7a:46:7a:13:13:ea:8c:05:
2a:94:ed:8a:30:98:2a:fd:ac:9b:a7:b7:4f:7f:d7:1e:e4:77:
04:5d:86:4d:b1:f0:35:ab:95:23:9e:52:c0:21:fe:dd:c8:cf:
3b:08:f8:1a:75:45:ba:5d:3a:b3:0a:33:2d:16:64:1c:b5:81:
2a:76:6c:af:d7:c6:a9:b5:46:f3:e4:0f:48:64:48:75:d8:d1:
94:91:c3:bf:95:4e:7b:5f:61:48:14:e0:3d:c8:b6:f7:62:92:
60:c5:8c:ed:72:fe:e2:8a:b3:c3:42:6a:b6:db:da:84:1f:e8:
17:3f:29:49:fc:38:99:c0:cc:80:f9:7f:73:12:d2:e0:3b:57:
7c:28:60:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:39:51 2025 by rpki-client