Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401838.roa
File: AS401838.roa (raw, json)
Hash identifier: OZ935CI/ekMPY7c4ZZu5cU2bzEZyi6HV8eQT2Ci8hec=
Subject key identifier: 79:55:E9:D3:1A:F1:49:C6:30:A3:9F:04:23:EF:57:88:1F:EA:25:95
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 369F0FBBB488D37EA1C0B18DB2974D163D71E2A1
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401838.roa
Signing time: Sun 20 Jul 2025 04:40:36 +0000
ROA not before: Sun 20 Jul 2025 04:35:36 +0000
ROA not after: Sun 19 Jul 2026 04:40:36 +0000
asID: 401838
IP address blocks: 95.134.204.0/24 maxlen: 24
178.95.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:9f:0f:bb:b4:88:d3:7e:a1:c0:b1:8d:b2:97:4d:16:3d:71:e2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 20 04:35:36 2025 GMT
Not After : Jul 19 04:40:36 2026 GMT
Subject: CN=7955E9D31AF149C630A39F0423EF57881FEA2595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:2f:7e:f3:76:8d:83:22:4c:1c:26:58:45:
e8:81:cd:42:37:85:69:03:fa:b3:32:3a:46:b8:fd:
76:c4:dd:23:0f:39:16:19:16:d6:46:9f:1c:55:55:
41:98:44:6d:ec:50:b0:cd:f7:83:76:de:7d:d6:1b:
64:b0:1e:49:aa:5d:dc:3d:c5:dc:df:e6:37:27:d4:
a3:a7:d1:9d:41:3a:f9:fb:45:6c:ac:05:7a:23:c5:
a0:c7:ff:3d:60:cd:4e:77:f3:d3:e8:70:1d:1f:e8:
82:aa:12:44:74:65:81:7c:52:06:3a:e6:59:b9:67:
4c:b8:f5:bd:3e:e3:99:7c:82:b5:c7:81:48:13:0d:
e9:dc:ed:bb:5d:5f:d7:c8:8f:93:29:8d:c4:d4:8a:
47:ab:2e:7b:80:a1:12:70:7d:a9:ce:c0:95:dd:1d:
d4:47:81:29:dc:31:0d:99:f8:ec:14:bc:3d:c3:26:
e5:41:ed:1a:85:cb:32:5f:d3:0d:42:5b:d5:ff:4d:
38:7e:c0:cb:2d:5a:08:60:db:57:34:dc:97:c9:32:
30:e7:a8:88:c5:e9:82:f6:7b:65:46:bf:66:0e:db:
0f:6f:05:e3:12:f2:95:2e:27:88:c2:a4:79:ff:a8:
de:8f:cf:ff:d6:a7:b2:b5:03:1b:d3:c7:e7:bd:42:
2a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:55:E9:D3:1A:F1:49:C6:30:A3:9F:04:23:EF:57:88:1F:EA:25:95
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.204.0/24
178.95.230.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ea:1f:56:24:26:15:6f:16:e2:db:20:f3:2d:c0:ab:13:9b:
c9:73:8f:63:49:7c:00:a3:a4:12:ed:81:ad:05:87:f3:2e:81:
8f:ba:1f:f9:db:64:e7:33:35:59:cc:d1:d9:ed:e8:56:0b:37:
28:58:d5:61:19:e8:18:1c:eb:8e:02:00:1d:06:b3:56:55:00:
99:6e:f2:dd:92:47:db:15:bc:68:59:29:e0:f9:7d:ac:52:26:
ac:2e:19:f4:5a:97:be:e3:5d:b4:61:d7:4a:a0:94:84:d9:16:
ce:ea:a3:5d:89:7f:51:65:6d:28:68:a7:07:43:29:2a:77:3a:
16:48:b6:d7:a7:7c:22:e5:50:a6:46:bc:ce:92:17:39:b7:c3:
46:f4:31:b2:f4:01:59:5e:da:5a:fe:c4:47:a7:ff:5c:5b:6c:
e5:04:ee:b6:06:56:b1:aa:6c:9c:1b:d9:06:42:5d:c8:33:2b:
f7:36:b9:c7:08:47:fb:60:b9:3c:e9:e5:02:c4:20:dc:1e:da:
e0:58:ea:29:d4:1b:0f:16:8e:d2:4a:d5:05:6d:d5:e2:c5:3c:
11:50:89:c6:95:e2:94:da:d5:9e:92:2c:2e:7a:89:62:df:7b:
fd:ff:fc:8a:fc:c5:17:66:ac:ca:7e:f5:1e:bf:4a:74:8a:4a:
0f:3b:9a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 03:49:26 2025 by rpki-client