Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401163.roa
File: AS401163.roa (raw, json)
Hash identifier: zTsEHqaHlPPwdGu/uv2uVxPps++bTY0uUtC+x4arYE4=
Subject key identifier: F6:0B:77:EF:15:AC:8C:34:41:83:92:13:B2:B8:58:0B:17:29:BE:DA
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2ED7CDF0C7FD605E149C477CB41C376810D2CA9E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401163.roa
Signing time: Sun 24 Aug 2025 00:05:12 +0000
ROA not before: Sun 24 Aug 2025 00:00:12 +0000
ROA not after: Sun 23 Aug 2026 00:05:12 +0000
asID: 401163
IP address blocks: 95.134.112.0/24 maxlen: 24
95.134.122.0/24 maxlen: 24
95.134.132.0/24 maxlen: 24
95.134.180.0/24 maxlen: 24
95.134.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:d7:cd:f0:c7:fd:60:5e:14:9c:47:7c:b4:1c:37:68:10:d2:ca:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 24 00:00:12 2025 GMT
Not After : Aug 23 00:05:12 2026 GMT
Subject: CN=F60B77EF15AC8C3441839213B2B8580B1729BEDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:14:cc:fc:07:7d:86:a9:e2:7e:d9:26:c9:60:
a5:48:75:67:7b:cf:32:06:79:d1:b2:c5:47:54:fe:
98:7d:1c:03:b0:04:87:a4:af:50:2f:54:00:09:28:
7a:6a:c7:11:b5:2b:34:06:fe:ff:8d:7e:b4:6e:fc:
05:c3:cd:c2:c8:be:3f:51:d7:af:bb:de:65:ce:ae:
a6:77:aa:d2:35:8e:7d:44:7c:dd:6b:65:4f:c0:21:
c9:50:10:35:c0:eb:c8:90:d3:cb:e3:9d:a2:c6:23:
1d:ea:cc:59:b6:ce:0f:f4:76:13:ba:22:b7:11:e6:
40:6c:97:60:97:33:2c:ea:0c:cc:d4:c8:28:a2:62:
8e:02:bb:66:09:24:52:b6:79:05:94:7b:d6:18:44:
e2:ed:85:88:6e:24:a7:ab:76:71:89:28:90:50:ee:
dc:a4:20:cb:bf:03:90:19:b2:11:d8:b9:33:da:7c:
09:76:4e:ff:24:92:12:df:e5:ac:26:5f:91:fc:92:
11:dd:36:7d:11:62:8f:ed:a3:36:95:e4:da:b9:33:
6e:1c:9e:12:f8:4a:43:ab:f1:3b:6e:c4:fc:28:d0:
28:9f:46:c4:21:1f:c7:82:a2:b1:bd:ea:81:c3:69:
d9:48:11:05:6a:d8:9d:7d:07:2c:21:a7:98:f8:ca:
d3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0B:77:EF:15:AC:8C:34:41:83:92:13:B2:B8:58:0B:17:29:BE:DA
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401163.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.112.0/24
95.134.122.0/24
95.134.132.0/24
95.134.180.0/24
95.134.192.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e9:a4:34:a5:90:26:f5:b0:02:8a:3c:33:bb:0a:3e:28:b6:
9d:2a:29:af:f0:d0:6f:25:57:10:23:e4:c7:67:c9:ca:3d:92:
83:62:01:76:39:7b:6d:3c:56:59:de:3a:fd:6e:87:7d:72:23:
0e:c9:12:e7:df:6e:6e:2d:9c:d6:f9:fd:65:96:36:3d:9e:be:
d9:5e:1a:6e:5e:79:7a:31:65:7d:42:06:ba:60:76:c1:8d:96:
d1:17:73:12:0e:98:b9:10:9e:e8:1d:f5:23:f1:41:9e:30:7e:
ab:74:7b:70:b6:4e:96:76:af:05:64:c0:8c:77:7e:cd:23:a5:
32:45:bc:53:4c:f6:81:8b:7a:5d:17:ff:83:6f:cd:84:22:8d:
c3:f3:3c:11:3a:2b:35:a0:f9:06:b6:be:41:bf:b3:86:36:b4:
48:69:16:95:a4:53:fb:aa:f3:8b:92:98:3f:db:35:3e:a0:a0:
32:b0:9e:82:4c:6b:43:dd:83:3b:7c:43:58:96:63:0b:d7:d4:
c9:34:47:20:f6:17:46:57:1c:60:dc:7e:f5:1c:eb:dc:ff:ea:
4e:27:f9:3e:51:ef:3e:41:d2:c4:b6:c1:d2:7f:bf:45:0b:9d:
f3:86:99:14:a9:74:ed:24:38:84:20:ba:8f:8b:54:62:28:3c:
01:ab:fe:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:41:19 2025 by rpki-client