Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402865.roa
File: AS402865.roa (raw, json)
Hash identifier: ZPqFiU+CpBZtY7mhuSo05kHkeFHljFiLcdOwddoUoMo=
Subject key identifier: 6C:F1:6E:D0:4A:DD:1F:EB:B1:DA:BA:DD:B4:E5:C5:CF:05:55:42:DC
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 47278159780812E1145A1BE7BA33A73B45E87FFA
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402865.roa
Signing time: Wed 23 Sep 2026 06:07:06 +0000
ROA not before: Wed 23 Sep 2026 06:02:06 +0000
ROA not after: Wed 22 Sep 2027 06:07:06 +0000
asID: 402865
IP address blocks: 91.124.96.0/24 maxlen: 24
178.95.49.0/24 maxlen: 24
178.95.50.0/24 maxlen: 24
178.95.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:27:81:59:78:08:12:e1:14:5a:1b:e7:ba:33:a7:3b:45:e8:7f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 23 06:02:06 2026 GMT
Not After : Sep 22 06:07:06 2027 GMT
Subject: CN=6CF16ED04ADD1FEBB1DABADDB4E5C5CF055542DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:95:d5:6e:51:69:1b:eb:39:1b:dc:39:c8:
a5:27:51:9c:57:c8:36:da:7d:02:66:78:fb:31:39:
c9:4c:8a:00:df:e2:49:03:a7:fe:da:3f:c4:ee:5f:
55:b4:36:43:0c:d6:3f:53:57:dd:b1:d1:1d:62:2a:
a1:5d:43:5a:72:01:36:bb:bf:d2:ec:6a:48:68:cc:
fc:92:ec:f5:92:3c:4f:5c:45:9b:40:8b:28:e0:8b:
ca:11:4e:0b:00:68:92:04:73:f5:3f:f9:07:6e:86:
9b:2b:bd:c3:46:66:91:49:8f:b8:12:7f:76:34:c0:
b7:91:d5:64:53:92:d3:75:ad:28:eb:9c:21:ef:f9:
60:fc:9f:62:99:23:c9:fc:0d:75:d1:d0:42:f6:37:
fc:51:5f:d6:ba:77:32:6b:c9:5b:7a:c4:85:46:bd:
db:33:73:fe:ae:9b:3a:a3:2b:cf:19:59:24:4a:a0:
31:75:2a:4c:0f:9c:4b:33:6f:e0:56:a9:f5:1b:85:
89:3f:7b:6d:4f:f6:70:3e:8d:9f:c3:40:cc:fa:4a:
58:7e:03:69:55:34:a4:57:88:7a:40:53:d8:33:7c:
17:96:91:9c:ef:6f:f9:24:fb:d2:85:c4:b7:a5:e3:
2e:4d:47:cd:75:54:7c:6e:60:8b:f3:ae:69:ca:d1:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F1:6E:D0:4A:DD:1F:EB:B1:DA:BA:DD:B4:E5:C5:CF:05:55:42:DC
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402865.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.96.0/24
178.95.49.0-178.95.51.255
Signature Algorithm: sha256WithRSAEncryption
5f:c2:c5:f6:cb:8c:81:b3:25:1a:86:ff:b3:26:ec:af:9e:99:
1d:75:a4:eb:bb:18:1d:ef:c5:2e:b7:39:54:7d:44:25:18:88:
74:38:75:b6:25:ba:60:fa:61:b5:20:76:ca:1c:53:32:da:6f:
db:cc:b9:5e:9b:e6:20:02:5f:91:07:25:c5:d1:b4:91:4a:17:
23:83:92:9c:78:de:b6:9f:e5:08:13:a4:2a:5a:21:c6:f9:fc:
4f:81:6e:a3:1b:b4:50:4a:ca:88:4d:34:e4:4e:2c:5c:2d:f4:
13:b1:f7:3f:14:10:f8:68:fe:6f:00:48:5d:91:e6:4c:46:77:
63:6b:f9:00:12:04:ff:ee:e0:1c:3f:84:b3:07:77:d5:0b:a3:
d0:ad:d5:b0:0c:21:f8:10:db:18:95:5d:32:8d:d3:e3:4e:4d:
e1:5a:ad:ec:41:88:4a:f2:1b:df:55:72:5f:cb:91:c4:68:f4:
10:c7:39:00:e6:cd:58:1c:81:f7:78:5d:fa:b9:97:cd:34:0c:
5e:d6:6a:12:ab:17:05:f3:e8:42:d8:a0:a6:48:23:6d:8e:41:
19:51:fe:24:b7:3a:bb:c6:75:dc:69:92:24:9f:db:51:7e:94:
5b:8a:fc:67:96:7a:ce:f3:d5:08:35:65:a8:f1:03:28:6b:46:
b1:b5:af:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:40:37 2026 by rpki-client