Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS8881.roa
File: AS8881.roa (raw, json)
Hash identifier: 7vAyZXOvrYAtZrZWV6aIdgw57ltCZUYHeo2ml85rWgk=
Subject key identifier: 92:30:DE:69:91:62:BC:85:F8:E6:D5:A8:65:89:69:4B:B6:F9:D3:7A
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 453F74740F7338FCC96CDED867775E23BF41CFB5
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS8881.roa
Signing time: Wed 25 Jun 2025 09:24:01 +0000
ROA not before: Wed 25 Jun 2025 09:19:01 +0000
ROA not after: Wed 24 Jun 2026 09:24:01 +0000
asID: 8881
IP address blocks: 46.202.69.0/24 maxlen: 24
46.202.73.0/24 maxlen: 24
46.203.112.0/24 maxlen: 24
46.203.152.0/24 maxlen: 24
46.203.156.0/24 maxlen: 24
46.203.187.0/24 maxlen: 24
46.203.208.0/24 maxlen: 24
46.203.227.0/24 maxlen: 24
95.134.193.0/24 maxlen: 24
95.135.61.0/24 maxlen: 24
178.92.76.0/23 maxlen: 24
178.92.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:3f:74:74:0f:73:38:fc:c9:6c:de:d8:67:77:5e:23:bf:41:cf:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 25 09:19:01 2025 GMT
Not After : Jun 24 09:24:01 2026 GMT
Subject: CN=9230DE699162BC85F8E6D5A86589694BB6F9D37A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:71:7f:d1:a3:7e:44:6a:e5:95:57:51:25:9a:
99:c1:4b:ec:77:16:e1:87:97:8c:0d:af:ed:ab:b9:
24:66:8a:a3:d0:02:68:48:8f:49:87:dc:eb:58:dc:
e7:32:9a:88:c0:1f:2b:95:c6:b4:fb:e5:5b:f8:c2:
f5:80:7d:43:bc:ae:4d:b7:e8:c6:31:cd:ed:fc:18:
db:7a:22:d3:04:59:90:90:fa:d3:68:47:72:06:10:
d9:d5:4b:7e:95:cf:03:9d:b0:d5:2e:8f:d9:02:f2:
d5:54:b5:15:27:b3:2d:60:75:24:48:e9:5a:3a:c8:
5a:4f:db:f5:1a:ee:93:aa:2e:f8:19:ad:ec:4f:01:
7b:2f:9c:a1:3d:22:9a:ae:ca:4d:c6:ee:fd:3b:7b:
d7:b7:f9:b9:e7:21:02:d4:c2:89:6c:3c:c7:06:b3:
b6:a3:fa:a2:d9:2f:ef:97:98:66:84:0a:f8:1b:a9:
8b:d1:f1:e5:9d:f0:db:65:1e:f0:7d:47:54:24:15:
e5:60:d2:46:1f:2c:04:fb:c2:e1:91:3a:24:9c:f1:
90:1c:df:d8:69:41:20:ca:f3:dc:43:c9:78:d5:82:
ea:9c:b1:94:62:d9:2f:f5:a4:95:e5:ec:89:ca:e7:
2d:15:0b:23:21:e7:15:04:45:f6:f5:80:02:59:81:
17:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:30:DE:69:91:62:BC:85:F8:E6:D5:A8:65:89:69:4B:B6:F9:D3:7A
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS8881.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.69.0/24
46.202.73.0/24
46.203.112.0/24
46.203.152.0/24
46.203.156.0/24
46.203.187.0/24
46.203.208.0/24
46.203.227.0/24
95.134.193.0/24
95.135.61.0/24
178.92.76.0/23
178.92.252.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:2f:e4:ac:a4:d1:92:75:0e:1e:d5:06:de:d5:b9:f9:51:36:
bf:34:f5:3c:06:55:e1:31:ff:fb:e2:b7:f1:4e:41:71:7c:6e:
01:8b:1f:73:24:90:0f:5d:9c:8e:40:a7:34:a3:3f:29:ed:04:
a7:60:81:4b:56:3c:9a:54:c4:83:d0:05:79:2a:8d:56:d1:e4:
71:9f:56:5a:06:9e:a2:e2:87:19:3e:e2:00:99:49:2c:d3:c9:
f3:7b:7a:49:47:9a:d5:97:8c:43:3a:55:f4:d4:9a:78:96:e5:
90:fc:a3:72:40:d4:e9:c3:89:fd:cc:3d:13:32:1f:1d:03:c5:
aa:41:2f:7b:41:e1:3f:ff:75:c2:c7:2f:e2:9f:8e:e4:98:bd:
6a:d7:c0:91:a2:5e:1e:4b:ea:1f:6c:a5:a9:1b:fc:e2:ad:4b:
94:93:54:62:81:cf:b4:d6:e7:be:c6:53:5c:42:e8:16:3e:0b:
9c:93:80:4f:eb:22:be:e0:07:c9:b6:ca:c4:97:0f:bf:76:ff:
53:e3:7c:78:3e:20:ef:1d:f4:b4:6c:31:24:03:19:b4:65:48:
1e:6a:f7:e2:97:d6:6e:1c:fd:2a:40:1b:e8:7f:af:09:7b:da:
8e:14:5d:de:98:00:d9:16:fa:b3:c6:ea:40:ec:37:d7:90:2d:
b3:5b:22:ca
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIURT90dA9zOPzJbN7YZ3deI79Bz7UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA2MjUwOTE5MDFaFw0yNjA2MjQwOTI0MDFaMDMxMTAvBgNV
BAMTKDkyMzBERTY5OTE2MkJDODVGOEU2RDVBODY1ODk2OTRCQjZGOUQzN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6cX/Ro35EauWVV1ElmpnBS+x3
FuGHl4wNr+2ruSRmiqPQAmhIj0mH3OtY3OcymojAHyuVxrT75Vv4wvWAfUO8rk23
6MYxze38GNt6ItMEWZCQ+tNoR3IGENnVS36VzwOdsNUuj9kC8tVUtRUnsy1gdSRI
6Vo6yFpP2/Ua7pOqLvgZrexPAXsvnKE9Ipquyk3G7v07e9e3+bnnIQLUwolsPMcG
s7aj+qLZL++XmGaECvgbqYvR8eWd8NtlHvB9R1QkFeVg0kYfLAT7wuGROiSc8ZAc
39hpQSDK89xDyXjVguqcsZRi2S/1pJXl7InK5y0VCyMh5xUERfb1gAJZgRffAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUkjDeaZFivIX45tWoZYlpS7b503owHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTODg4MS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBhBggrBgEFBQcBBwEB/wRSMFAwTgQCAAEwSAMEAC7KRQME
AC7KSQMEAC7LcAMEAC7LmAMEAC7LnAMEAC7LuwMEAC7L0AMEAC7L4wMEAF+GwQME
AF+HPQMEAbJcTAMEAbJc/DANBgkqhkiG9w0BAQsFAAOCAQEAny/krKTRknUOHtUG
3tW5+VE2vzT1PAZV4TH/++K38U5BcXxuAYsfcySQD12cjkCnNKM/Ke0Ep2CBS1Y8
mlTEg9AFeSqNVtHkcZ9WWgaeouKHGT7iAJlJLNPJ83t6SUea1ZeMQzpV9NSaeJbl
kPyjckDU6cOJ/cw9EzIfHQPFqkEve0HhP/91wscv4p+O5Ji9atfAkaJeHkvqH2yl
qRv84q1LlJNUYoHPtNbnvsZTXELoFj4LnJOAT+sivuAHybbKxJcPv3b/U+N8eD4g
7x30tGwxJAMZtGVIHmr34pfWbhz9KkAb6H+vCXvajhRd3pgA2Rb6s8bqQOw315At
s1siyg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 05:00:17 2025 by rpki-client