Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS133337.roa
File: AS133337.roa (raw, json)
Hash identifier: kmaTKWx7/8y/jn1ZYsg97Z2wry2c2Xdbvq4UQhHfbMQ=
Subject key identifier: F8:B0:F4:78:8F:74:35:E9:B7:E5:28:37:94:A2:33:DF:E0:01:95:95
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 59A201354517FAB658B9A9619BD58A5B15F41D43
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS133337.roa
Signing time: Wed 08 Jul 2026 03:49:00 +0000
ROA not before: Wed 08 Jul 2026 03:44:00 +0000
ROA not after: Wed 07 Jul 2027 03:49:00 +0000
asID: 133337
IP address blocks: 178.92.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Jul 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:a2:01:35:45:17:fa:b6:58:b9:a9:61:9b:d5:8a:5b:15:f4:1d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 8 03:44:00 2026 GMT
Not After : Jul 7 03:49:00 2027 GMT
Subject: CN=F8B0F4788F7435E9B7E5283794A233DFE0019595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9c:d6:13:4b:4c:38:6e:5b:7f:52:8f:42:ee:
f1:c8:ec:61:d0:d9:c3:d7:ef:04:39:8d:9b:55:3e:
ac:61:ec:7c:1b:be:29:5b:a0:bb:6d:21:97:39:aa:
50:19:b3:11:69:fc:65:d8:f8:29:af:40:7d:1f:44:
fa:d6:f3:4d:54:bc:f6:30:59:43:99:59:a1:9b:41:
b8:42:e7:a6:c6:be:42:97:16:46:30:1e:7a:ea:bf:
48:88:43:58:d7:8b:b4:fd:df:5c:e9:b4:d7:fe:d8:
68:a0:22:00:32:8e:43:16:dd:19:78:e9:41:25:3f:
4b:2b:2f:a9:b2:43:8e:54:b3:ce:e0:7b:5a:aa:ed:
84:de:3e:a0:9a:03:97:82:85:23:81:9b:41:8b:c9:
35:c7:76:5e:78:cb:4f:6f:18:30:70:f3:7a:11:c8:
3e:50:de:aa:5d:5a:b2:d7:47:5f:29:27:e6:7f:53:
55:ca:a4:bc:ac:02:1b:e1:ec:d2:64:fd:61:ed:63:
2e:10:c1:82:b0:18:e6:d9:da:e9:ec:91:20:87:0a:
b1:ef:36:b3:e0:6e:9d:d9:90:b4:73:84:17:f1:e9:
cd:54:60:71:58:40:63:f5:f1:da:79:98:a8:0a:fb:
59:f3:fd:25:68:6d:bb:2b:18:ce:94:ea:d6:79:2e:
9f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B0:F4:78:8F:74:35:E9:B7:E5:28:37:94:A2:33:DF:E0:01:95:95
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS133337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.118.0/24
Signature Algorithm: sha256WithRSAEncryption
15:2a:12:88:3e:f4:c5:62:21:1c:b6:87:62:37:99:64:9a:b5:
f1:95:14:bf:e2:6e:46:bd:ff:73:d2:61:ef:30:69:6e:27:65:
a1:64:1c:63:19:a0:92:38:7b:03:46:fd:c0:51:5a:a2:92:80:
3d:23:e4:a1:44:2b:8e:a7:7a:9e:60:f5:2b:a8:f6:69:45:6c:
2f:90:9f:44:a9:45:c6:00:36:3c:1d:51:21:8a:57:15:f3:7e:
ae:8a:f5:88:c9:0a:ac:87:77:84:94:9f:8c:7d:a6:0f:35:9f:
b7:33:3b:a6:90:ea:ff:04:76:04:b0:07:3a:79:b5:17:65:94:
f4:40:10:6d:ee:ff:47:14:1a:5f:b0:f5:0d:61:ac:db:d9:98:
61:29:97:f3:44:dc:f8:aa:71:c5:08:73:ed:53:40:62:ac:73:
b4:a3:40:e9:9e:6d:0f:33:15:2e:eb:ad:44:5b:d7:c9:15:71:
83:c0:25:1e:cb:31:39:0e:b3:da:20:c1:ee:c4:7d:f3:47:9d:
72:6d:4d:44:76:36:1c:54:c7:9f:5b:7e:c3:63:9a:3c:da:37:
2e:af:b7:6d:d1:62:57:b0:42:ee:b6:59:6f:fa:0c:ab:b9:9d:
05:01:9b:90:b3:e0:2c:ce:1c:90:67:82:98:d1:d1:20:25:a6:
1c:b8:a8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 06:46:26 2026 by rpki-client