Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS395954.roa
File: AS395954.roa (raw, json)
Hash identifier: qpJnOKlx2JsSV2pN1Y3JKvyzN3SP5RoWp2ky1F3Qg4E=
Subject key identifier: 04:77:CC:28:02:F7:35:3E:95:B8:A3:0B:09:07:35:A8:32:6F:87:28
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 216C63896EF1BD74D4087DAAC2D74BB34DFBE86C
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS395954.roa
Signing time: Fri 24 Jul 2026 16:42:41 +0000
ROA not before: Fri 24 Jul 2026 16:37:41 +0000
ROA not after: Fri 23 Jul 2027 16:42:41 +0000
asID: 395954
IP address blocks: 177.28.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:6c:63:89:6e:f1:bd:74:d4:08:7d:aa:c2:d7:4b:b3:4d:fb:e8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Jul 24 16:37:41 2026 GMT
Not After : Jul 23 16:42:41 2027 GMT
Subject: CN=0477CC2802F7353E95B8A30B090735A8326F8728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:14:e5:55:33:19:70:51:6e:8d:8c:ab:1b:39:
d1:88:bc:8f:59:1d:e8:09:b7:a7:79:64:28:26:a4:
4e:e7:ea:a6:74:5d:82:70:ab:27:f5:8b:e0:53:68:
c4:d5:84:00:63:09:91:68:c2:50:1f:31:e7:05:07:
64:a5:dd:d1:c4:08:1e:71:f4:f5:03:25:8a:05:f1:
97:ec:f4:4a:44:8c:eb:38:3c:dd:25:d0:f1:71:74:
5f:ad:1a:c3:3e:29:20:39:b3:bf:20:ac:58:93:36:
2a:85:e7:66:34:e3:e8:75:3e:24:eb:91:f6:a6:7a:
14:5a:23:c8:9e:2e:f6:09:03:38:8e:4d:ef:33:06:
2d:55:b6:33:20:98:b3:a9:d2:24:79:66:8c:4f:ee:
20:dc:c5:04:c2:3e:aa:84:91:6d:cd:64:f2:2a:41:
19:2b:92:04:77:4a:04:54:0d:d9:2f:6a:36:ca:d2:
e0:37:2d:46:03:59:2a:0e:fd:f0:85:51:3a:e7:7a:
42:42:c0:ee:b5:d1:7c:e2:e8:60:ef:f9:2d:3d:9b:
43:30:bb:fe:91:38:ab:17:93:17:1d:37:5c:cf:34:
ae:61:a3:1a:ce:90:98:dd:52:dd:25:aa:90:14:8d:
a3:a0:34:75:99:db:6b:c6:c3:5b:cc:d0:24:83:4a:
98:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:77:CC:28:02:F7:35:3E:95:B8:A3:0B:09:07:35:A8:32:6F:87:28
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS395954.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.28.2.0/24
Signature Algorithm: sha256WithRSAEncryption
71:75:41:d3:ed:5e:0e:c1:94:38:ef:30:cb:e1:6a:cd:ae:10:
60:8b:9f:8e:5e:88:36:0a:c4:a9:f0:42:ab:ee:23:46:c1:31:
00:75:fd:84:17:5d:d6:df:54:0d:80:fb:82:ef:6e:4a:63:39:
11:21:af:c7:7a:43:76:23:e2:56:f8:7b:51:2a:e4:ef:88:80:
ff:4e:79:74:b6:aa:76:1d:a3:96:18:b6:62:93:56:ab:cd:d5:
4e:5a:10:cd:a9:d1:47:43:ef:4e:56:c1:56:06:62:70:99:59:
6c:fc:3f:a9:29:5e:97:2d:0b:4f:ea:ea:08:b1:cd:a8:a1:e6:
8c:5b:f4:78:1e:ef:52:b3:22:b4:74:49:d6:c6:2e:d0:ab:9d:
78:92:08:1f:15:52:65:1e:df:91:c0:b4:80:f6:7c:87:56:2a:
ec:2d:35:e1:80:27:32:d4:66:6c:d9:db:dc:4c:59:88:0a:3c:
1b:06:fa:52:36:01:12:d1:14:e3:74:d3:83:2b:d5:8d:72:1a:
37:19:62:d4:d2:0f:25:c2:a9:93:db:92:70:78:ff:4c:a7:97:
59:82:bf:e7:c9:14:fd:93:fb:90:68:1e:d7:1e:30:60:70:6b:
24:b5:1f:00:82:fc:5a:3c:30:89:ca:9d:43:53:01:b0:af:51:
3c:b4:e5:e1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUIWxjiW7xvXTUCH2qwtdLs0376GwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk5YTdiZjJiOTBhYjhjYmZkMjRjYzRmOGJhZGVhNzg3
N2Y4ZTQ5NTAeFw0yNjA3MjQxNjM3NDFaFw0yNzA3MjMxNjQyNDFaMDMxMTAvBgNV
BAMTKDA0NzdDQzI4MDJGNzM1M0U5NUI4QTMwQjA5MDczNUE4MzI2Rjg3MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0FOVVMxlwUW6NjKsbOdGIvI9Z
HegJt6d5ZCgmpE7n6qZ0XYJwqyf1i+BTaMTVhABjCZFowlAfMecFB2Sl3dHECB5x
9PUDJYoF8Zfs9EpEjOs4PN0l0PFxdF+tGsM+KSA5s78grFiTNiqF52Y04+h1PiTr
kfamehRaI8ieLvYJAziOTe8zBi1VtjMgmLOp0iR5ZoxP7iDcxQTCPqqEkW3NZPIq
QRkrkgR3SgRUDdkvajbK0uA3LUYDWSoO/fCFUTrnekJCwO610Xzi6GDv+S09m0Mw
u/6ROKsXkxcdN1zPNK5hoxrOkJjdUt0lqpAUjaOgNHWZ22vGw1vM0CSDSpirAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUBHfMKAL3NT6VuKMLCQc1qDJvhygwHwYDVR0j
BBgwFoAUOZp78rkKuMv9JMxPi63qeHf45JUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1
NmI2LzQvMzk5QTdCRjJCOTBBQjhDQkZEMjRDQzRGOEJBREVBNzg3N0Y4RTQ5NS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09acDc4cmtLdU12OUpNeFBpNjNxZUhm
NDVKVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2JlNDE3MDRmLTc4MTUt
NGYyYy1hNTAzLTU4YWUwOGU1NTZiNi80L0FTMzk1OTU0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsRwC
MA0GCSqGSIb3DQEBCwUAA4IBAQBxdUHT7V4OwZQ47zDL4WrNrhBgi5+OXog2CsSp
8EKr7iNGwTEAdf2EF13W31QNgPuC725KYzkRIa/HekN2I+JW+HtRKuTviID/Tnl0
tqp2HaOWGLZik1arzdVOWhDNqdFHQ+9OVsFWBmJwmVls/D+pKV6XLQtP6uoIsc2o
oeaMW/R4Hu9SsyK0dEnWxi7Qq514kggfFVJlHt+RwLSA9nyHVirsLTXhgCcy1GZs
2dvcTFmICjwbBvpSNgES0RTjdNODK9WNcho3GWLU0g8lwqmT25JweP9Mp5dZgr/n
yRT9k/uQaB7XHjBgcGsktR8AgvxaPDCJyp1DUwGwr1E8tOXh
-----END CERTIFICATE-----
Generated at Sun Jul 26 23:51:22 2026 by rpki-client