Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS393406.roa
File: AS393406.roa (raw, json)
Hash identifier: 1nji0QI/BbQjZUdHDeOtrOOEi5f/NFpkuSkI35/HFvQ=
Subject key identifier: 42:DF:BC:8F:41:4E:12:B7:9A:83:C2:EA:28:F1:6B:54:60:23:15:E2
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 0A1B460C4D8B4BAFACD09768CA8BE9BD85BCFEE3
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS393406.roa
Signing time: Mon 22 Sep 2025 18:47:35 +0000
ROA not before: Mon 22 Sep 2025 18:42:35 +0000
ROA not after: Mon 21 Sep 2026 18:47:35 +0000
asID: 393406
IP address blocks: 193.187.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:54:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:1b:46:0c:4d:8b:4b:af:ac:d0:97:68:ca:8b:e9:bd:85:bc:fe:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Sep 22 18:42:35 2025 GMT
Not After : Sep 21 18:47:35 2026 GMT
Subject: CN=42DFBC8F414E12B79A83C2EA28F16B54602315E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5f:6e:b5:0a:5d:90:9a:58:f1:2d:7c:16:27:
26:23:d9:55:6a:f0:43:e4:dc:55:3e:70:4b:d9:6d:
78:1b:13:07:06:76:ae:1f:2c:36:1b:fb:b3:39:64:
fc:a0:36:5d:51:d8:57:94:ff:f4:0a:ad:cb:2a:bd:
51:00:76:ab:75:e1:b3:44:a9:37:19:6e:ca:c6:d3:
25:b6:d7:3c:52:71:0e:73:d9:12:ad:17:34:23:46:
00:59:78:13:3c:4a:99:1c:50:9a:74:2d:e8:35:35:
06:ba:0c:2d:17:76:6b:6c:98:43:dd:18:64:e2:e8:
a2:bc:1a:5b:26:17:64:04:d6:65:65:29:26:20:e0:
b3:01:df:19:37:c1:6b:61:ad:e2:6e:ed:85:9a:db:
09:5e:a6:0a:70:98:76:ec:1e:ac:f4:9a:9b:cd:01:
56:c1:4e:78:20:1d:0a:0f:62:85:49:12:87:20:ce:
ec:c3:31:45:04:25:67:5b:a2:cb:fc:33:7a:25:8b:
39:2c:f7:10:7d:27:38:2d:0d:ce:67:85:10:0e:5e:
ed:3f:5b:e2:40:97:57:f6:d0:4d:96:95:c9:32:85:
37:34:58:0a:71:89:49:cc:2d:4e:a2:06:1b:bc:da:
71:b3:c5:46:1c:af:7c:9f:c9:b4:14:37:33:50:01:
75:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DF:BC:8F:41:4E:12:B7:9A:83:C2:EA:28:F1:6B:54:60:23:15:E2
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS393406.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.110.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e3:11:45:ac:03:57:30:91:47:d5:f5:86:e0:b6:15:15:b6:
88:77:62:d8:df:14:e0:2f:1f:2d:36:a8:62:29:f2:f1:6f:3a:
6a:b8:72:f4:12:8f:99:b4:f4:db:f1:99:a1:3b:53:9b:de:fa:
48:3a:4e:44:4b:e3:c1:e6:3b:ac:be:42:25:f0:4c:df:7e:97:
eb:d8:f4:76:dc:a3:8c:f9:49:d5:45:9a:d1:0f:5a:5e:ba:18:
1b:de:6f:c4:9e:99:e3:dd:16:17:b5:8e:af:c4:f0:fc:20:dd:
e4:98:fe:c0:dd:8b:93:f4:e0:ed:73:5a:00:d1:20:42:27:94:
45:54:7e:5e:66:6a:a9:98:33:df:0c:88:63:91:44:22:27:de:
c7:b1:36:15:d9:ea:4c:bc:2f:98:09:80:87:29:5a:09:bd:ef:
af:bb:17:2f:85:f8:63:39:83:2b:08:99:db:a5:28:66:51:8d:
8f:58:66:11:8e:89:88:ba:65:fc:a7:ff:49:c2:73:f2:d2:f2:
ba:ca:d4:58:1e:5b:d0:f8:9e:db:7d:79:05:8f:79:67:ab:4f:
61:cf:6b:58:4d:f6:b3:1a:1d:47:75:0b:00:93:03:8d:b6:61:
fc:65:2b:14:79:bb:9a:35:7c:af:97:f9:17:74:fb:6a:41:81:
c2:76:63:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:18:25 2025 by rpki-client