Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7488.roa
File: AS7488.roa (raw, json)
Hash identifier: tqo4Q9GsQIW5M9TPTDEz2gMjiCdLvys30OWdTxKtIww=
Subject key identifier: 4C:4E:19:39:92:7B:5E:FF:56:CF:E0:E0:13:70:C4:DB:78:07:93:41
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 342A4B9E7F917311DB1297B74B87FDCE1A125240
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7488.roa
Signing time: Thu 16 Oct 2025 09:55:08 +0000
ROA not before: Thu 16 Oct 2025 09:50:08 +0000
ROA not after: Thu 15 Oct 2026 09:55:08 +0000
asID: 7488
IP address blocks: 46.202.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:2a:4b:9e:7f:91:73:11:db:12:97:b7:4b:87:fd:ce:1a:12:52:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 16 09:50:08 2025 GMT
Not After : Oct 15 09:55:08 2026 GMT
Subject: CN=4C4E1939927B5EFF56CFE0E01370C4DB78079341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:47:8a:04:60:b7:cb:1a:53:05:ec:86:2d:11:
80:d3:d2:56:24:e6:4c:61:06:01:37:59:51:e8:f8:
99:11:97:e3:3c:ef:83:1f:69:e6:27:d0:0b:4f:77:
bb:e5:1a:f2:16:31:69:88:b1:1a:31:29:46:8a:55:
8c:04:e3:6e:1d:ed:aa:c0:fd:68:b9:ee:f6:d7:47:
2f:92:c3:86:1d:8d:fd:6c:1b:02:6b:3d:83:93:d3:
60:1f:08:91:6e:9f:b0:41:26:3e:3d:3d:e4:d7:a7:
ce:9c:9b:44:0c:13:a9:4c:ad:01:84:ce:a5:ee:77:
d2:b6:c9:ea:d2:2c:2a:85:05:d5:99:47:9d:79:d5:
dd:f4:55:57:ee:9f:ec:50:0f:dd:0f:fc:f7:0c:9e:
0f:55:fa:22:69:fb:55:dd:4c:13:6d:e7:4b:04:0d:
c3:5b:de:63:f7:c2:76:da:10:38:61:9c:87:e5:05:
14:6c:9d:26:d4:95:24:c5:b0:76:50:06:53:34:94:
4c:80:4b:bb:8e:c0:0f:c3:78:1d:f4:c0:97:4c:1c:
2b:9f:8e:da:01:78:88:43:da:0f:81:6d:a2:fe:1c:
d7:52:11:3c:3d:7b:0b:fd:cd:2f:6f:74:1e:27:e4:
59:6d:85:9d:eb:e2:c7:a3:85:d1:a9:b4:66:67:90:
a0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4E:19:39:92:7B:5E:FF:56:CF:E0:E0:13:70:C4:DB:78:07:93:41
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7488.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.208.0/21
Signature Algorithm: sha256WithRSAEncryption
47:89:7b:1f:fa:7d:42:da:bc:06:e6:9e:dc:b5:89:3e:bd:5d:
3a:30:0e:b4:b0:a7:00:56:ce:f9:64:96:91:e0:df:90:37:a9:
24:5b:d2:23:57:7f:35:9e:2f:8e:3a:31:a7:45:61:5f:34:75:
e6:37:9c:3c:40:a0:ea:4f:b2:20:7b:80:6f:67:ba:d1:d4:3d:
d5:bd:d0:66:71:e8:8f:87:93:b7:c8:2d:ef:04:54:13:4f:4c:
62:91:3f:ca:73:08:ef:a1:09:72:cb:68:02:73:9a:97:46:6e:
14:4e:d2:58:f8:a1:29:36:96:a4:f8:88:46:0c:fd:0c:34:89:
60:58:5a:0e:34:2e:e0:a5:1f:5e:dd:79:c2:3e:f6:80:10:74:
78:58:33:a1:47:71:fd:99:2b:a5:11:c5:6d:54:1a:e9:16:2f:
b1:28:d1:a8:c8:17:02:34:8e:ca:2d:39:fb:3a:06:94:da:b1:
58:5e:2c:6b:a4:16:9c:5a:d4:64:a1:b9:4c:75:7b:f0:85:b5:
cf:57:43:e3:33:aa:85:d0:a8:1d:b0:69:15:27:01:97:18:50:
69:2f:90:9c:84:7b:97:a1:64:34:9a:70:70:bd:9e:46:ff:a4:
62:f2:d0:9b:94:ea:60:b1:e9:28:78:69:a4:42:94:3a:02:8d:
b1:ca:da:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:39:36 2025 by rpki-client