Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS400906.roa
File: AS400906.roa (raw, json)
Hash identifier: oPF9w/i6mIOXO7wQLBvFMX+39c3d6q/IBr1VEPgGvVw=
Subject key identifier: E7:EA:06:EB:B3:F9:0D:3C:F2:28:79:D4:73:8A:B7:E8:67:1C:BE:F7
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 58FD9A0CBF2B5FDAA68AE3E26AE3FB2253F9727E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS400906.roa
Signing time: Fri 08 May 2026 12:28:51 +0000
ROA not before: Fri 08 May 2026 12:23:51 +0000
ROA not after: Fri 07 May 2027 12:28:51 +0000
asID: 400906
IP address blocks: 92.113.43.0/24 maxlen: 24
95.134.20.0/24 maxlen: 24
178.92.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:fd:9a:0c:bf:2b:5f:da:a6:8a:e3:e2:6a:e3:fb:22:53:f9:72:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 8 12:23:51 2026 GMT
Not After : May 7 12:28:51 2027 GMT
Subject: CN=E7EA06EBB3F90D3CF22879D4738AB7E8671CBEF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ac:dc:59:aa:67:6c:98:8d:89:82:35:a6:bc:
a4:dd:da:ed:a4:86:af:e7:ce:c4:d7:50:c7:91:dd:
6d:d5:be:0b:7a:b7:f9:71:f3:95:d2:fb:a9:8b:f7:
89:d8:a3:c7:73:e3:d0:f4:44:3d:81:2e:29:34:59:
34:0d:e4:66:59:68:58:05:13:d3:b9:75:8b:c2:45:
9c:82:06:95:5e:88:42:b2:ec:d3:66:d4:39:37:a7:
de:c5:14:2c:8d:d7:da:20:c0:c4:92:96:14:9d:b1:
ee:d0:33:c9:08:74:fe:02:d4:60:e0:cb:98:4e:91:
66:9c:66:d1:c4:df:fa:6f:9e:f0:a6:26:4b:3d:45:
83:76:5a:2c:b1:15:3b:d7:39:9d:11:8d:bd:ad:d1:
b8:1e:4e:5f:70:a2:d2:7e:70:4a:8f:f8:4e:7a:d6:
a0:8e:62:f3:73:6d:83:04:d5:cd:5c:b0:86:60:af:
8b:7a:29:27:e9:7c:22:31:cb:08:7a:d4:ff:dd:c1:
1a:96:3a:46:ec:0a:b6:57:0f:68:ab:ce:f5:a7:e6:
1e:29:44:15:67:bb:9a:24:f4:3d:5f:59:f7:c7:28:
9e:e9:da:a5:74:59:1f:6e:dd:34:21:83:be:28:cc:
58:22:65:b0:a2:67:35:6f:5a:5c:10:75:1c:d1:8d:
5f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EA:06:EB:B3:F9:0D:3C:F2:28:79:D4:73:8A:B7:E8:67:1C:BE:F7
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS400906.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.43.0/24
95.134.20.0/24
178.92.6.0/24
Signature Algorithm: sha256WithRSAEncryption
50:0d:07:b3:d4:37:a1:5c:52:7b:2e:fc:8f:28:5a:9b:d6:36:
88:e0:0a:68:9e:6f:7a:ed:4e:37:fc:f4:43:db:4c:88:a2:62:
b0:b2:d4:7e:fb:4e:2f:b7:e7:ec:7f:e6:a1:cc:fc:26:11:92:
aa:4e:5c:14:47:9f:e4:93:67:e0:b3:dc:d1:3f:30:12:9a:f5:
33:5b:a9:1c:a9:8e:2f:92:0f:e1:fb:86:49:79:48:d0:eb:2f:
21:13:80:66:3d:bb:58:72:6e:b3:fd:82:63:73:b7:95:85:6d:
dc:6d:b2:ba:b9:a5:f6:7d:48:73:eb:ea:27:9f:9d:a5:4b:69:
6e:a6:6a:3a:7b:17:99:cf:91:ce:07:87:36:15:c6:1b:a7:dc:
91:90:b4:21:ef:70:b6:02:cf:f4:01:5f:98:a3:14:e3:01:76:
e0:3c:de:66:10:9a:48:e4:ea:21:02:f6:3d:1e:cc:3b:d9:a9:
ed:b7:8a:fe:78:37:f7:04:01:dc:e0:f8:09:8c:0e:34:eb:6d:
3b:4d:8d:ad:c1:3a:bd:8a:e7:5b:39:2d:2e:73:ba:7d:b0:81:
22:c4:e5:7e:f2:09:a8:e7:96:9b:45:25:ad:64:b0:4a:64:c0:
6c:40:9b:cc:95:da:8f:ab:ad:26:19:41:1d:d3:31:a5:59:08:
df:51:b4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:32 2026 by rpki-client