Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7922.roa
File: AS7922.roa (raw, json)
Hash identifier: k3WS8GUpxvAisNU8JnlfkRHbmmrqF9Hj2HFzG7vNBWY=
Subject key identifier: 76:4F:A8:9E:54:2C:6F:1D:F5:E7:BB:0E:D4:3C:ED:5E:FB:DF:F7:35
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1FCF0892A7D92DA92613C3849C73CD2EC08235A7
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7922.roa
Signing time: Sun 01 Nov 2026 00:08:42 +0000
ROA not before: Sun 01 Nov 2026 00:03:42 +0000
ROA not after: Sun 31 Oct 2027 00:08:42 +0000
asID: 7922
IP address blocks: 178.93.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:cf:08:92:a7:d9:2d:a9:26:13:c3:84:9c:73:cd:2e:c0:82:35:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 1 00:03:42 2026 GMT
Not After : Oct 31 00:08:42 2027 GMT
Subject: CN=764FA89E542C6F1DF5E7BB0ED43CED5EFBDFF735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:7e:7c:70:62:ba:71:c8:11:e4:fb:f8:72:6b:
5f:b3:61:a5:71:38:39:11:fb:9a:a8:37:b7:52:43:
ad:cc:0e:74:0f:d6:b2:3f:ea:bd:c9:4b:eb:1f:29:
3d:53:0a:6c:5e:49:cc:f5:4a:4b:14:dd:80:d7:c2:
09:ab:f9:79:7f:9f:c9:95:d7:4c:aa:66:5b:4e:cf:
41:7f:62:76:2a:c8:9f:1b:79:a6:32:05:dd:70:b3:
d8:c3:1c:53:7c:78:ce:a2:dc:b6:f4:f6:f2:94:09:
26:8d:fb:97:9a:ad:64:d5:16:6b:01:d3:a5:4a:1f:
7d:f1:10:4b:e9:be:eb:ba:99:52:8b:12:58:95:fc:
76:8f:18:32:be:11:30:9d:fe:74:a0:29:7f:33:ca:
ac:73:bc:e5:1b:d5:e6:8b:74:14:46:25:fa:fa:ab:
48:13:26:d3:fa:62:4a:45:3b:02:29:cf:cc:c3:7a:
f3:b2:de:92:41:f3:90:f3:dd:ee:21:10:8a:c7:ff:
4d:ab:bd:3c:f8:98:3d:c8:4c:b2:a7:e9:64:5a:4c:
0f:43:ec:b6:d5:7f:26:88:ad:79:9f:e5:fd:fe:1d:
c7:ea:e9:2b:a6:6b:b9:21:ee:b4:64:6f:32:12:f1:
37:17:71:bf:ae:ce:4a:d4:35:14:26:99:88:7d:4c:
99:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4F:A8:9E:54:2C:6F:1D:F5:E7:BB:0E:D4:3C:ED:5E:FB:DF:F7:35
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7922.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.93.115.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:9c:5d:75:a0:fc:7c:dc:83:bc:a8:ff:44:66:18:7b:ba:5b:
29:21:8b:5f:11:79:ac:88:6c:dd:27:d9:06:35:ec:45:0f:02:
55:6b:35:02:bf:16:38:43:62:c5:37:0b:98:7e:ac:0a:8a:4a:
ee:2f:17:85:93:9c:9a:3b:1a:f0:03:77:9e:af:3e:61:d1:36:
70:82:da:89:1a:0a:9c:0e:c3:54:7d:e9:43:c4:50:13:c6:cf:
76:1f:8c:26:25:fc:33:5b:d4:bd:2a:4b:b2:7b:51:a5:89:c8:
43:9e:99:51:a4:95:33:f4:21:a8:8e:d7:a3:a4:0a:78:ae:d7:
d3:3f:35:70:c1:4d:b8:70:90:af:c7:2f:7a:59:39:cf:6a:24:
08:f8:42:04:e6:03:7c:74:c0:07:ea:46:a4:95:91:c8:a0:22:
f9:2d:c3:57:dd:59:c2:65:2d:d3:4d:ba:9b:b7:45:4d:9c:60:
0b:2f:f4:0a:cb:de:e0:6b:a4:82:c4:51:51:e0:be:e8:0b:0e:
ee:39:2b:0d:e2:d7:0b:99:b6:1f:e2:77:69:fe:5b:d9:23:25:
68:73:09:ec:b5:42:18:d2:ca:64:ea:4b:dc:da:ba:22:65:aa:
97:e0:bf:10:3b:c7:a5:20:96:d7:47:e3:15:5c:99:5e:16:48:
b2:63:c7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:29:40 2026 by rpki-client