Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS1.roa
File: AS1.roa (raw, json)
Hash identifier: syH8x3QFz74c2bkuNCd+NaGOxx2YB5xjVtqrJsiG5p4=
Subject key identifier: D2:B4:54:D7:81:85:E4:C3:1B:A7:57:09:A8:F2:68:DA:E8:09:3F:0F
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7097F2E1BFF78FAE530048BCDB47AA1081B6B982
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS1.roa
Signing time: Thu 14 May 2026 13:49:01 +0000
ROA not before: Thu 14 May 2026 13:44:01 +0000
ROA not after: Thu 13 May 2027 13:49:01 +0000
asID: 1
IP address blocks: 78.105.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:97:f2:e1:bf:f7:8f:ae:53:00:48:bc:db:47:aa:10:81:b6:b9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 14 13:44:01 2026 GMT
Not After : May 13 13:49:01 2027 GMT
Subject: CN=D2B454D78185E4C31BA75709A8F268DAE8093F0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fd:9e:79:1b:1f:31:b5:45:82:e1:d7:c6:ce:
08:4a:57:2e:24:66:45:7b:2b:dc:c8:4c:50:6b:d0:
1c:68:0a:a3:39:40:49:bf:51:e2:ad:83:91:e9:29:
38:9a:0f:72:98:b4:1f:34:33:80:94:e4:28:a9:80:
27:aa:3c:7f:80:38:e2:4e:8f:45:6e:db:f5:34:6b:
3f:21:22:2a:4b:bd:b6:ff:60:e1:22:51:f2:fe:2d:
04:3b:97:6d:38:85:ef:51:b0:b7:2a:ba:97:bf:87:
b1:99:82:8d:ba:01:04:98:b2:2d:a5:59:27:3a:b8:
ab:d3:be:ba:bd:70:65:56:0d:6f:62:65:63:61:cc:
9f:8b:5a:c6:4c:92:e5:aa:1b:e4:7c:ab:28:bf:ba:
3e:d0:58:d4:2b:e4:5c:4b:44:6a:fb:52:5e:10:34:
fc:4b:70:16:dd:6e:57:9c:35:6b:19:2d:bb:be:09:
56:1e:46:65:19:b3:e0:40:f4:57:8d:48:8e:93:d6:
a2:da:52:0f:27:36:22:3f:0a:d2:29:da:00:9f:da:
8e:02:96:3d:31:2e:a7:46:5c:26:82:77:a7:1c:5e:
4c:d5:44:72:85:89:58:9e:05:5f:de:a7:32:75:60:
a2:b9:35:1c:0c:94:84:14:b8:f4:4a:da:c3:a6:0b:
8f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B4:54:D7:81:85:E4:C3:1B:A7:57:09:A8:F2:68:DA:E8:09:3F:0F
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS1.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.173.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:81:05:3e:92:f3:c9:72:2f:9c:cd:67:81:3a:34:e3:4e:63:
8d:47:04:75:67:fe:e0:8a:2d:e9:9c:8a:b0:1f:75:83:d9:ef:
ff:14:8c:2a:21:1a:85:be:13:fd:4f:f3:1c:ee:20:32:87:35:
c5:a6:01:9f:81:d1:09:af:09:c5:ef:68:b7:e6:e3:4b:69:cc:
95:4b:b6:ed:a9:7e:13:c6:4d:44:ff:d7:63:67:5d:34:0d:46:
77:3e:7a:9a:79:d7:4b:60:ff:ee:ea:f5:11:13:86:5a:f0:83:
88:0a:44:84:c3:42:d7:43:aa:89:cc:66:83:48:14:07:8a:c7:
64:69:f7:0a:da:cd:c0:7d:97:b6:f4:d3:97:a4:e7:bf:0f:28:
14:e5:b2:50:71:c6:40:5a:cc:79:ca:00:f2:1d:f9:d0:73:32:
e1:d0:3e:7e:a1:de:b3:54:dd:fa:00:cc:f5:7b:6e:ce:f5:68:
a5:b6:67:e1:db:d7:23:da:42:4b:92:b3:69:0b:df:01:7a:20:
f4:71:94:9c:4d:d8:8d:59:03:c6:73:02:b5:15:f3:c6:f3:0f:
1b:ba:b0:56:6f:fa:6e:84:9f:f5:a7:b4:ac:aa:d0:19:f1:de:
c0:b1:82:ce:17:2c:50:9a:1e:6e:07:1f:49:e3:5a:6a:0f:87:
1e:96:9c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 08:31:08 2026 by rpki-client