Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS9312.roa
File: AS9312.roa (raw, json)
Hash identifier: YB1fIs8eTcn3mIWmKjflaTCn6PwYZj0OjmJQwuSeN1I=
Subject key identifier: C0:0C:22:82:C2:C6:70:D1:B9:87:BE:57:C2:C3:55:61:4D:14:82:81
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 64AFFF04B8727C681D3C40EF0757F45C3F12C51C
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS9312.roa
Signing time: Wed 29 Jul 2026 15:25:09 +0000
ROA not before: Wed 29 Jul 2026 15:20:09 +0000
ROA not after: Wed 28 Jul 2027 15:25:09 +0000
asID: 9312
IP address blocks: 201.4.32.0/19 maxlen: 24
201.50.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:af:ff:04:b8:72:7c:68:1d:3c:40:ef:07:57:f4:5c:3f:12:c5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 29 15:20:09 2026 GMT
Not After : Jul 28 15:25:09 2027 GMT
Subject: CN=C00C2282C2C670D1B987BE57C2C355614D148281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:af:be:5d:1b:ea:11:1c:f1:9a:39:68:d6:
8e:7c:55:1b:2a:02:54:5e:08:47:f2:5f:57:05:71:
11:6e:10:75:4a:8e:5c:ae:90:5f:5c:5a:28:19:6e:
e0:70:87:33:cf:89:46:8b:7a:fa:f6:cf:6a:9e:46:
09:65:5a:3e:d1:1b:f5:65:9b:ab:77:47:1e:a7:d8:
52:75:80:95:99:9c:de:de:30:c4:2b:35:12:08:07:
c8:1e:5d:0e:76:b8:ff:31:16:ca:a7:26:ff:cb:95:
a9:e0:55:82:df:b4:5e:9b:e6:5d:fe:55:77:39:de:
22:af:d1:15:ea:86:cd:e5:41:45:5e:d6:6a:d8:c8:
b3:6c:c4:94:17:e6:c9:b4:b1:62:8c:87:06:1f:e4:
d0:3e:d6:e3:29:f4:65:ef:f7:78:39:c6:f2:73:e0:
9f:be:03:6d:85:a0:65:47:ce:13:95:f5:e4:29:70:
ac:9e:ff:c4:82:51:1a:7c:2f:2f:b1:1a:90:6f:e1:
45:5a:02:f2:fa:38:67:ef:6a:9c:4f:88:7e:0c:1f:
bd:6a:76:3c:b7:68:86:4d:23:e6:a3:6d:1a:e0:f2:
40:fd:49:16:5a:68:ee:a5:7e:07:fc:92:c2:09:cd:
cc:84:e6:3a:0b:89:d0:1d:10:14:77:8d:ed:95:6c:
8f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0C:22:82:C2:C6:70:D1:B9:87:BE:57:C2:C3:55:61:4D:14:82:81
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS9312.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.32.0/19
201.50.32.0/19
Signature Algorithm: sha256WithRSAEncryption
21:ef:5e:3c:21:ba:60:49:b6:6a:5c:db:ac:a4:d8:d5:10:4b:
86:71:af:0f:94:d3:6b:97:49:d2:c3:2a:5f:72:17:63:90:db:
2b:f0:3e:ee:0c:8f:e2:fe:f8:06:f4:70:c2:e2:d5:e5:24:9d:
b3:08:80:be:bf:46:03:29:96:a4:a3:0b:98:34:7e:9b:2c:e7:
e1:57:ae:9f:51:0b:64:40:7b:34:c1:e0:af:62:24:9a:de:90:
29:02:89:7e:50:41:67:52:fa:70:52:0c:7b:4f:b7:1e:bb:be:
84:b5:62:94:50:d0:11:f2:7d:bb:19:3a:78:70:c7:f6:72:34:
9e:10:37:16:8a:69:30:e9:35:04:db:ca:e7:f8:33:ec:62:5d:
3e:29:39:b4:d2:89:e1:f9:3c:b7:16:f2:9f:e0:29:89:e2:c3:
21:d0:c2:b2:16:89:ed:0f:9b:f2:c3:b1:dd:ee:21:0d:f3:f0:
91:9b:a2:2b:fd:20:09:61:a0:f8:25:78:47:4c:02:a8:41:2a:
e1:4e:6d:7f:ae:6d:ec:53:d0:f6:48:25:65:4f:6d:a8:5e:6b:
83:ad:06:85:0b:c0:46:10:bd:da:82:5f:d6:f6:bb:fb:7e:36:
70:22:17:ae:eb:1f:e5:c8:5c:03:d1:d0:25:51:7d:99:f4:5c:
e4:99:04:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:33:18 2026 by rpki-client