Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402976.roa
File: AS402976.roa (raw, json)
Hash identifier: NnJOItDdtEPsGyh2SVzwwLJr5j0efwrlJ3Ro0HS/LY0=
Subject key identifier: 13:8E:93:8E:09:9F:39:23:E4:A4:61:7A:B1:48:F9:EA:7F:87:2B:5D
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 22DB38E058ED7E24825B2E87F5BA102B99AF15D8
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402976.roa
Signing time: Mon 09 Nov 2026 11:53:57 +0000
ROA not before: Mon 09 Nov 2026 11:48:57 +0000
ROA not after: Mon 08 Nov 2027 11:53:57 +0000
asID: 402976
IP address blocks: 91.124.216.0/24 maxlen: 24
91.124.221.0/24 maxlen: 24
92.112.22.0/24 maxlen: 24
92.112.215.0/24 maxlen: 24
92.113.184.0/24 maxlen: 24
95.134.23.0/24 maxlen: 24
95.134.125.0/24 maxlen: 24
95.135.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:db:38:e0:58:ed:7e:24:82:5b:2e:87:f5:ba:10:2b:99:af:15:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 9 11:48:57 2026 GMT
Not After : Nov 8 11:53:57 2027 GMT
Subject: CN=138E938E099F3923E4A4617AB148F9EA7F872B5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cf:06:6f:e0:91:a3:d2:75:fd:bd:33:73:8a:
6c:b4:8a:ef:bf:a5:1d:f0:78:56:2c:23:09:3f:0f:
4a:72:65:15:b8:8d:42:cb:83:e6:7a:0a:ee:5f:ff:
4c:ee:90:2d:93:29:b1:9a:21:9a:82:80:67:60:12:
a7:76:d7:e6:43:cc:53:b7:73:24:e7:20:87:d9:d5:
ce:6e:32:0d:d7:ff:fa:b4:d1:4a:ec:91:ff:83:3e:
db:ef:65:34:9f:3d:2a:04:fb:02:bc:e1:f9:1c:c4:
c9:b7:f4:79:55:a5:55:a5:04:4d:42:34:d3:02:7b:
12:6d:bf:8a:c4:a7:88:f6:66:37:5f:fc:a3:16:58:
d5:72:1c:64:01:16:ed:23:58:65:68:2a:96:66:63:
0c:42:c8:a8:3e:ee:a1:96:eb:8a:2c:f5:7a:2e:51:
12:ee:17:8a:b7:e4:74:3c:7e:61:6d:8c:0b:ae:7a:
e3:cd:9f:11:75:8f:c9:4f:3f:37:2a:62:98:e9:e0:
ac:0f:66:03:13:16:36:e7:70:68:c7:2a:75:54:3f:
d3:bf:3b:5e:0c:62:1a:3f:47:ed:a0:a4:81:c0:07:
f1:c3:8c:14:0a:1a:7e:96:51:34:2b:e9:85:49:c0:
58:e8:52:59:ac:7a:a6:9d:39:d1:24:3e:7f:a5:a0:
da:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8E:93:8E:09:9F:39:23:E4:A4:61:7A:B1:48:F9:EA:7F:87:2B:5D
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402976.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.216.0/24
91.124.221.0/24
92.112.22.0/24
92.112.215.0/24
92.113.184.0/24
95.134.23.0/24
95.134.125.0/24
95.135.193.0/24
Signature Algorithm: sha256WithRSAEncryption
07:db:4c:24:3b:6d:e0:de:6f:14:98:49:5f:f8:24:8d:e6:7d:
a1:20:6c:c9:4e:74:94:76:71:3f:56:6c:bb:51:ee:bf:e6:8c:
8c:ee:71:e8:6c:af:89:62:b4:86:4a:09:35:06:86:7c:33:a8:
bf:e9:07:2a:1f:f6:ed:1b:32:19:60:44:92:73:70:9f:a6:61:
6f:a3:b1:ca:4f:46:68:1f:74:65:12:78:bf:cc:8c:83:e0:f2:
21:b3:32:5f:11:7a:76:40:e1:f7:09:c1:cd:dd:7f:02:5f:91:
87:43:80:b3:9e:11:ca:ec:2b:54:59:75:12:a0:6f:b7:62:54:
c4:ce:85:2c:d3:a8:bd:11:38:b2:24:c3:d8:48:08:65:dc:87:
f8:5f:e3:9f:98:08:8e:c7:16:3b:14:bb:54:40:3b:17:2f:73:
4f:6c:1a:b5:a4:3a:64:58:35:ac:f8:cf:8a:d0:0c:e0:6e:23:
66:be:15:f6:59:06:a0:02:3b:6a:a0:1c:e3:5a:4b:40:e5:cd:
cf:a8:b0:91:bb:9c:4d:04:a0:25:eb:71:7d:ec:f4:3a:a6:b7:
11:c2:3c:58:59:6d:66:cf:9b:ce:c8:47:79:e8:97:e8:db:fd:
1e:44:59:2d:0b:da:a2:94:99:82:f5:64:08:30:47:fd:b3:78:
b1:e2:e0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:30:23 2026 by rpki-client