Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS393406.roa
File: AS393406.roa (raw, json)
Hash identifier: cv/Ua5BZStLnD2pnxjbn2mE9ctcIXnZ2mHIdRsn+gz4=
Subject key identifier: 9D:6A:58:46:30:42:88:BA:3F:66:3D:5A:00:1A:B0:24:75:84:C2:D1
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 758CA36F1F531F081C61903E25A1C74E5F6B010A
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS393406.roa
Signing time: Tue 05 May 2026 21:28:00 +0000
ROA not before: Tue 05 May 2026 21:23:00 +0000
ROA not after: Tue 04 May 2027 21:28:00 +0000
asID: 393406
IP address blocks: 78.105.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:8c:a3:6f:1f:53:1f:08:1c:61:90:3e:25:a1:c7:4e:5f:6b:01:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 5 21:23:00 2026 GMT
Not After : May 4 21:28:00 2027 GMT
Subject: CN=9D6A5846304288BA3F663D5A001AB0247584C2D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:32:82:c7:3c:25:cf:f8:2a:de:a3:75:5e:39:
7f:0f:19:36:b9:43:4f:58:6d:44:c3:e1:fc:10:fd:
3f:97:af:05:85:f0:70:3a:fb:49:75:42:c9:fb:8d:
da:be:4e:c7:8f:54:32:93:69:5b:1a:1a:11:c9:47:
6a:14:49:b6:e3:d0:29:32:41:25:59:50:46:4d:b4:
fa:63:7f:2a:1d:dc:47:25:f9:3a:32:72:36:d8:5d:
51:3c:b4:d2:7d:de:66:f6:7c:c9:0c:86:9b:1d:83:
7d:d8:c6:bb:fe:d7:15:6b:51:d5:a8:2d:1d:d8:65:
1a:b5:bc:ce:6e:39:a3:fb:23:ec:ca:eb:6e:5a:0e:
f7:4d:3b:78:8e:50:f0:01:38:74:75:f2:6b:3e:66:
44:01:aa:6c:c8:48:74:62:2b:1e:17:7d:2d:97:1c:
d5:f7:98:4a:71:63:65:d6:88:d9:10:81:2c:f4:86:
e9:f3:07:19:6c:93:8c:1f:71:22:fd:26:d9:8c:7c:
7b:9a:b5:c9:36:12:db:bd:03:5f:81:35:9d:32:4e:
b2:b5:6d:14:a7:26:5f:e7:51:ea:77:09:54:68:a9:
1c:84:41:5b:23:22:fb:b3:7e:55:58:ef:84:92:2a:
7d:a4:71:4a:66:03:7f:4d:8c:56:69:e5:bb:71:b1:
ce:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6A:58:46:30:42:88:BA:3F:66:3D:5A:00:1A:B0:24:75:84:C2:D1
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS393406.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.144.0/24
Signature Algorithm: sha256WithRSAEncryption
25:e7:ba:c7:e2:40:ae:dc:2c:2b:ef:97:fe:73:03:cf:51:93:
26:e8:18:46:69:86:75:2b:2f:0e:e2:da:b3:b7:ce:81:9b:28:
5a:57:8a:34:ee:1f:94:28:92:00:16:6d:b8:c4:5e:66:7b:9b:
90:f6:66:c1:8f:08:51:d7:f5:cf:a6:b5:6d:73:6f:ac:92:c6:
e9:e1:f3:03:2d:8a:3b:5e:41:22:b3:05:df:cd:99:19:8f:06:
6c:07:3e:58:b8:0c:1d:94:21:91:ff:19:a0:7f:a1:5d:de:01:
e9:35:59:99:ee:77:84:68:1e:8b:45:6d:76:8e:0e:60:81:a7:
4d:b0:54:a6:3a:6f:10:8e:6f:da:d2:a1:33:c6:06:9e:33:2a:
e6:7f:88:0b:3c:f1:13:8c:a3:af:ee:e9:0d:67:b5:77:fd:4b:
ba:78:87:ba:08:16:45:1b:d9:9f:3c:a0:c7:de:cc:4d:74:eb:
3b:d1:0e:a2:13:79:80:e2:2b:c0:27:35:dd:bd:37:66:54:7f:
00:72:60:87:0a:09:04:d5:a2:58:9d:f3:b7:a2:66:ed:44:d3:
54:d4:6e:2a:77:c9:08:11:8d:93:0f:7c:2a:95:f1:b8:0d:5e:
4e:57:25:0f:0e:98:66:72:bb:63:2c:97:dd:ba:52:12:0f:15:
be:a0:4b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 14:58:36 2026 by rpki-client