Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS984.roa
File: AS984.roa (raw, json)
Hash identifier: JJbrZYHmL0phOw5Q3KXcwwhL9Yq/00IK//oTEbghLE4=
Subject key identifier: B9:D1:8D:D2:BE:10:31:D5:84:7B:0E:B1:85:C7:28:B1:94:BE:65:B5
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 108D4F3E2C317FB571D14C6C118EA3463CA0D9E5
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS984.roa
Signing time: Thu 05 Mar 2026 08:54:12 +0000
ROA not before: Thu 05 Mar 2026 08:49:12 +0000
ROA not after: Thu 04 Mar 2027 08:54:12 +0000
asID: 984
IP address blocks: 95.134.61.0/24 maxlen: 24
95.134.112.0/24 maxlen: 24
178.92.199.0/24 maxlen: 24
178.92.207.0/24 maxlen: 24
178.93.76.0/24 maxlen: 24
178.95.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:8d:4f:3e:2c:31:7f:b5:71:d1:4c:6c:11:8e:a3:46:3c:a0:d9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 5 08:49:12 2026 GMT
Not After : Mar 4 08:54:12 2027 GMT
Subject: CN=B9D18DD2BE1031D5847B0EB185C728B194BE65B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f0:5f:77:d2:56:48:14:a6:b5:8b:6d:9f:fa:
f3:23:63:a4:0d:84:7e:2b:b1:c3:46:9b:f3:ef:00:
e7:da:fc:e9:fa:5b:1d:70:86:73:ac:fb:39:15:9f:
b6:e0:f3:fa:c9:be:a6:58:e7:19:7d:e2:6b:03:0e:
25:38:d0:d6:43:73:bd:ec:79:f8:92:e4:9b:c2:86:
08:59:ca:04:f4:86:23:65:c6:bd:a5:b0:dc:2b:df:
0f:45:e0:f6:b0:cf:e9:9b:2f:83:c9:02:37:d2:48:
74:87:16:4f:c1:08:5c:64:1e:e1:1d:04:30:7a:b8:
40:9c:6d:00:54:c0:f6:64:c1:e0:b4:16:e5:8a:38:
27:3b:25:a3:1b:90:e3:7a:94:62:da:21:df:57:67:
08:90:a9:6c:8e:82:dd:bb:e9:d2:27:47:e5:61:ca:
e7:4b:69:87:32:85:8e:4b:ce:47:c8:ac:c3:7f:26:
24:3b:45:05:4b:05:b4:2a:93:51:02:1b:4b:56:0c:
d8:80:0c:18:58:b7:a0:a5:bf:3e:76:f0:da:d3:2e:
6b:4f:1f:23:0d:e8:a6:36:fd:d4:9c:d2:f7:26:f4:
f4:78:62:de:27:34:e8:a0:2d:1f:d1:9d:7b:04:71:
4b:57:f0:94:81:c3:88:b6:36:6d:5d:d7:36:16:1f:
87:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D1:8D:D2:BE:10:31:D5:84:7B:0E:B1:85:C7:28:B1:94:BE:65:B5
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS984.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.61.0/24
95.134.112.0/24
178.92.199.0/24
178.92.207.0/24
178.93.76.0/24
178.95.140.0/22
Signature Algorithm: sha256WithRSAEncryption
49:3e:3e:68:bd:0d:9a:ac:96:97:38:bd:e6:25:29:9f:22:58:
f6:3a:6a:c9:df:e7:1e:b4:b0:54:b6:68:8b:65:d0:19:fa:05:
05:1d:82:d8:ee:72:32:2a:6e:14:de:67:1e:87:a5:0c:d2:a4:
47:28:cd:4d:e1:eb:3c:df:76:5b:33:e8:62:0f:20:0c:22:75:
9f:31:e2:65:0a:35:2b:17:67:e4:72:b9:58:07:ea:da:14:f0:
60:bb:f2:80:b8:44:b5:25:7c:6f:b5:d1:5a:05:19:14:c2:a1:
af:5f:b0:7a:31:e8:9b:31:82:fc:26:f1:26:39:34:5e:24:00:
a7:cd:d5:3d:fb:84:4f:bd:67:51:f3:b8:24:07:d3:60:73:50:
13:7e:ef:32:86:7a:88:73:a5:da:d6:e0:73:0d:57:06:43:d5:
de:57:a5:92:91:9f:84:45:6c:31:26:50:8d:53:b7:ea:94:ad:
6f:e6:c2:d1:e1:a5:06:b5:66:1f:70:f1:3b:ae:8d:11:f1:e3:
63:89:51:e0:4d:e6:b8:f1:46:33:2d:ea:85:50:d1:f3:b3:c5:
b2:54:ef:bd:10:29:57:53:bb:0c:6d:b1:e0:0e:92:6b:6b:47:
4a:99:52:17:2c:92:2f:ab:eb:e4:0a:ea:20:48:d5:c1:c9:49:
51:6c:93:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:31:31 2026 by rpki-client