Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS402047.roa
File: AS402047.roa (raw, json)
Hash identifier: 778JvHccT8DsC3ZE4I0t6n0RvoVQ2OE3BsXknVCeWTs=
Subject key identifier: 80:C5:52:24:01:A1:80:56:99:11:E0:A9:BB:8B:5A:8A:87:78:14:3B
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 78CD422D5028674695D828D3EE58998B90D18BEE
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS402047.roa
Signing time: Fri 27 Mar 2026 09:13:10 +0000
ROA not before: Fri 27 Mar 2026 09:08:10 +0000
ROA not after: Fri 26 Mar 2027 09:13:10 +0000
asID: 402047
IP address blocks: 193.187.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:cd:42:2d:50:28:67:46:95:d8:28:d3:ee:58:99:8b:90:d1:8b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Mar 27 09:08:10 2026 GMT
Not After : Mar 26 09:13:10 2027 GMT
Subject: CN=80C5522401A180569911E0A9BB8B5A8A8778143B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e1:09:41:9e:b3:1c:8e:15:63:56:50:19:4f:
f7:71:db:c7:ac:77:9f:0f:17:31:6f:36:30:7e:51:
0e:55:d3:13:c5:1e:fa:ab:48:6c:4f:ec:4c:87:24:
ef:10:e7:9c:38:64:a7:87:11:66:75:4f:db:67:ab:
18:eb:c7:ac:e3:86:0f:b8:b2:60:db:5c:c4:21:80:
0c:32:1e:94:2e:e5:64:0c:42:e2:e6:20:7c:97:b3:
b9:59:37:14:70:04:90:f1:c6:29:87:ec:dc:a2:3d:
e6:73:fb:1b:97:0f:d6:8b:e3:c9:fc:7b:a0:7c:b0:
b7:3d:c5:27:85:31:f3:0f:f6:12:c6:46:1d:fd:40:
e6:d2:1c:db:da:ee:e1:b9:7e:14:c4:cb:df:93:d9:
ee:8a:3f:4c:5b:0f:06:9f:c9:c9:9d:e0:97:c3:ab:
91:a7:2e:51:a8:dc:8c:67:0d:43:2b:ed:42:8c:a0:
71:4d:bd:98:13:c5:0d:26:c4:1a:d8:e8:10:84:fa:
d6:01:e8:d0:41:1f:e6:d5:13:49:15:55:3e:b8:f2:
6a:aa:01:cc:2c:38:d2:5e:f4:e4:2e:7e:e4:ec:7f:
89:f8:55:e3:d2:30:d8:de:f5:48:9b:c2:e5:5a:73:
99:d5:2a:ee:f1:0f:ae:5c:a0:e1:1c:48:6d:ce:5f:
5f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C5:52:24:01:A1:80:56:99:11:E0:A9:BB:8B:5A:8A:87:78:14:3B
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS402047.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.111.0/24
Signature Algorithm: sha256WithRSAEncryption
91:1f:1b:c9:35:e7:8c:54:db:b4:d0:57:10:53:92:cd:d9:cc:
f9:b5:25:23:be:43:b1:72:a0:0e:11:b3:21:c1:f0:bb:54:b1:
16:b2:c1:1f:4b:2b:af:58:07:e1:f5:01:3f:e5:c9:53:63:55:
dc:60:4a:c7:ce:6a:e8:d4:60:03:56:1d:9d:84:1d:7e:d9:fe:
5b:22:c9:2c:dc:5b:7a:01:be:2a:4f:72:3a:0e:bb:6d:1e:80:
65:a8:02:21:b2:14:08:ce:60:4d:c7:52:86:9c:dd:0a:25:90:
4d:20:33:d6:36:78:3f:c2:88:de:1e:06:db:50:88:b5:74:9b:
62:f3:a2:9b:e6:f9:c0:dd:1f:f9:7a:06:05:5f:cd:11:38:ee:
5f:f9:fb:20:db:56:ac:11:68:5d:8b:5a:19:a0:84:3e:37:91:
a2:4c:91:b2:2d:77:f4:fa:50:83:37:7a:0c:49:09:c0:0f:5e:
43:b4:e0:4d:bb:ee:1c:8e:d7:53:51:e1:7d:48:1f:94:67:2e:
b6:0b:6b:e1:36:d8:52:d7:61:7c:b3:f5:0e:70:6e:7c:30:29:
e8:b5:9e:79:de:bc:12:42:fe:bb:e1:62:e4:e7:b6:a3:33:a2:
20:c8:c7:29:25:9f:e4:4e:31:28:14:fc:90:c8:d2:43:ca:5e:
23:1e:82:d3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUeM1CLVAoZ0aV2CjT7liZi5DRi+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0
MDg0ZDIwYzAeFw0yNjAzMjcwOTA4MTBaFw0yNzAzMjYwOTEzMTBaMDMxMTAvBgNV
BAMTKDgwQzU1MjI0MDFBMTgwNTY5OTExRTBBOUJCOEI1QThBODc3ODE0M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ4QlBnrMcjhVjVlAZT/dx28es
d58PFzFvNjB+UQ5V0xPFHvqrSGxP7EyHJO8Q55w4ZKeHEWZ1T9tnqxjrx6zjhg+4
smDbXMQhgAwyHpQu5WQMQuLmIHyXs7lZNxRwBJDxximH7NyiPeZz+xuXD9aL48n8
e6B8sLc9xSeFMfMP9hLGRh39QObSHNva7uG5fhTEy9+T2e6KP0xbDwafycmd4JfD
q5GnLlGo3IxnDUMr7UKMoHFNvZgTxQ0mxBrY6BCE+tYB6NBBH+bVE0kVVT648mqq
AcwsONJe9OQufuTsf4n4VePSMNje9UibwuVac5nVKu7xD65coOEcSG3OX1/ZAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUgMVSJAGhgFaZEeCpu4taiod4FDswHwYDVR0j
BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm
YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD
RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt
NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTNDAyMDQ3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbtv
MA0GCSqGSIb3DQEBCwUAA4IBAQCRHxvJNeeMVNu00FcQU5LN2cz5tSUjvkOxcqAO
EbMhwfC7VLEWssEfSyuvWAfh9QE/5clTY1XcYErHzmro1GADVh2dhB1+2f5bIsks
3Ft6Ab4qT3I6DrttHoBlqAIhshQIzmBNx1KGnN0KJZBNIDPWNng/wojeHgbbUIi1
dJti86Kb5vnA3R/5egYFX80ROO5f+fsg21asEWhdi1oZoIQ+N5GiTJGyLXf0+lCD
N3oMSQnAD15DtOBNu+4cjtdTUeF9SB+UZy62C2vhNthS12F8s/UOcG58MCnotZ55
3rwSQv674WLk57ajM6IgyMcpJZ/kTjEoFPyQyNJDyl4jHoLT
-----END CERTIFICATE-----
Generated at Sat Mar 28 06:26:41 2026 by rpki-client