Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS393942.roa
File: AS393942.roa (raw, json)
Hash identifier: s+exwdHP4nB5Q7i5o2rDcv/GH5QcUjVR4pQsAPz3JMM=
Subject key identifier: 08:91:CB:07:8E:2A:72:CA:E7:84:E1:D0:61:C0:86:CE:79:3B:7F:BE
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 600907611EB462FEF6A100A8DEB26533A4D1B60E
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS393942.roa
Signing time: Mon 09 Mar 2026 08:21:50 +0000
ROA not before: Mon 09 Mar 2026 08:16:50 +0000
ROA not after: Mon 08 Mar 2027 08:21:50 +0000
asID: 393942
IP address blocks: 213.139.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:29:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:09:07:61:1e:b4:62:fe:f6:a1:00:a8:de:b2:65:33:a4:d1:b6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Mar 9 08:16:50 2026 GMT
Not After : Mar 8 08:21:50 2027 GMT
Subject: CN=0891CB078E2A72CAE784E1D061C086CE793B7FBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:f0:45:c1:5d:64:13:0c:8f:91:29:16:3e:
8b:fd:7f:01:7f:ce:11:fa:f0:3d:5b:5a:f3:91:1f:
74:f4:ce:05:d2:bc:ef:66:19:cb:1b:fe:dd:fa:cc:
c0:d6:c0:b9:c7:32:c1:27:1f:79:26:b2:8a:eb:93:
86:1a:d6:94:bf:93:0e:95:60:ff:99:08:0c:09:80:
3f:65:49:bb:46:17:df:e1:be:fb:18:87:d2:07:52:
82:65:71:13:51:d7:1e:06:a4:0b:3b:21:f8:d5:c6:
4d:07:10:86:7b:1a:2a:b4:74:54:76:68:46:34:13:
77:a4:44:bf:b8:2c:21:98:e2:40:78:be:26:92:90:
5e:0b:27:5d:c0:76:2c:a4:2c:de:1b:39:27:41:52:
e9:e4:85:9b:bc:3d:cd:09:4c:98:88:51:e3:ee:5e:
83:d2:eb:c5:e9:ae:9f:04:ae:db:d2:70:7f:20:c2:
6e:48:65:fb:90:2b:a6:bb:9f:21:14:ac:81:53:c1:
3b:23:ea:ae:e0:0a:29:89:ce:86:20:87:ad:5a:be:
4f:31:b6:f2:bf:73:a9:77:6b:db:8e:df:96:e0:5d:
ae:62:ca:63:c4:f1:14:c4:7d:cb:a8:12:d7:f1:7a:
84:d7:e4:d9:59:cf:d8:c0:ea:6c:cc:ea:d1:fa:88:
03:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:91:CB:07:8E:2A:72:CA:E7:84:E1:D0:61:C0:86:CE:79:3B:7F:BE
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS393942.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.225.0/24
Signature Algorithm: sha256WithRSAEncryption
97:1f:2a:7a:b2:57:bd:e1:46:24:ed:61:68:69:75:8e:2b:05:
54:91:4e:88:1d:3e:74:c7:b4:57:d0:c3:2f:91:f7:6b:aa:fe:
50:90:dd:2b:37:23:c6:6b:a8:fd:44:80:97:c1:a0:dd:ec:09:
ad:c5:4d:f2:12:f3:33:30:51:bc:61:c3:0c:57:65:62:2d:f0:
74:9e:d2:a9:27:cd:06:fa:01:08:ba:ba:be:81:2f:65:67:0c:
a5:a5:80:0f:df:d5:0a:3f:3d:b8:20:eb:af:b9:00:6f:cb:85:
32:6e:96:dc:02:1a:fc:23:5d:1c:ff:63:c6:40:84:c1:6b:c1:
e1:84:45:f9:2e:f3:64:cd:f3:eb:cc:28:3f:ba:b6:ae:3c:41:
ed:ef:7d:bd:b8:65:44:4f:bd:68:5f:f1:30:83:99:37:85:7b:
ca:bd:d3:07:4a:86:6f:12:92:4c:b8:b6:64:08:24:a7:aa:96:
0c:51:68:cd:d4:d2:9f:81:52:af:f3:91:16:cd:ed:56:61:1f:
8e:d6:76:23:bf:be:69:c9:40:58:c8:f9:c2:98:7a:7d:0e:7e:
46:e4:f0:e4:bd:36:d2:c6:b1:e7:7c:ce:43:9c:e5:d2:b2:cc:
27:ad:70:df:86:f5:17:87:d8:1b:4b:da:0b:c7:6b:d5:4c:00:
d2:8a:3b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:04:38 2026 by rpki-client