Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS199301.roa
File: AS199301.roa (raw, json)
Hash identifier: Nmkx64s3bYJHKuSWZtVWR4ZjxNQO2gCPokhdf3P74+U=
Subject key identifier: B3:05:E8:E8:47:D1:11:F2:74:DA:07:AB:14:A7:01:40:F9:5F:4C:72
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 472A6B2AF192AE94D25D1157FA7D99F74C0645AB
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS199301.roa
Signing time: Thu 23 Apr 2026 19:26:04 +0000
ROA not before: Thu 23 Apr 2026 19:21:04 +0000
ROA not after: Thu 22 Apr 2027 19:26:04 +0000
asID: 199301
IP address blocks: 178.93.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Apr 2026 14:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:2a:6b:2a:f1:92:ae:94:d2:5d:11:57:fa:7d:99:f7:4c:06:45:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 23 19:21:04 2026 GMT
Not After : Apr 22 19:26:04 2027 GMT
Subject: CN=B305E8E847D111F274DA07AB14A70140F95F4C72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:42:61:58:74:00:76:5e:ef:18:95:aa:d7:62:
65:5e:08:48:11:a6:b6:93:12:18:46:73:55:ca:b2:
3f:30:f2:f0:be:17:bd:56:b2:51:b8:89:2a:e7:c5:
44:5f:fb:b0:e8:f7:d5:45:93:93:87:ab:46:e2:87:
57:63:75:97:29:72:e3:bf:3f:93:ad:34:75:3d:0a:
6d:67:a5:a3:b7:3f:56:e7:68:c4:00:d8:7c:50:f6:
b5:01:a3:6c:38:03:e1:31:46:d8:8b:a7:cd:14:8e:
0c:cb:4e:c7:e4:13:9a:2d:5c:66:ee:e1:82:a8:5e:
ca:21:48:48:32:08:89:11:a5:5b:75:56:98:71:8f:
de:99:2a:55:18:26:f4:cd:66:f9:df:e0:4f:33:ba:
48:40:93:2f:c2:89:73:79:f9:37:ca:35:bd:00:c2:
50:82:97:c6:4d:78:82:ea:86:39:dd:a4:3c:0d:54:
33:9e:c7:07:1b:52:f4:5c:ce:c2:d4:d4:e2:49:e4:
4e:a6:00:3b:bd:70:8f:ff:1d:e0:b7:64:0f:fa:46:
50:49:89:ba:e2:02:40:e4:e3:40:18:41:34:69:1e:
9b:ce:22:df:0f:87:58:e7:f9:68:2c:f1:d1:21:6a:
8e:c5:42:11:5c:92:c7:6e:ae:e0:23:b8:95:4b:c6:
af:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:05:E8:E8:47:D1:11:F2:74:DA:07:AB:14:A7:01:40:F9:5F:4C:72
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS199301.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.93.64.0/24
Signature Algorithm: sha256WithRSAEncryption
25:6f:ad:27:08:fb:68:0e:c3:1f:13:ba:b0:3d:27:c6:2a:b9:
b8:b2:99:31:af:35:fd:bd:2f:bf:a2:1e:c0:3d:7d:26:91:a2:
a4:9c:81:d1:c6:98:b4:07:cd:46:17:af:7e:be:1e:f6:8e:d4:
43:ab:0f:13:2e:29:4d:b5:64:65:c7:57:99:43:de:e6:d5:a2:
3c:e9:df:88:c0:ea:4c:e5:a8:b1:a5:4f:36:a3:1a:43:e8:ea:
15:6a:7d:07:9b:64:58:4d:bc:61:01:45:24:89:09:50:4e:e2:
ee:87:eb:c8:93:4f:12:b2:6a:bf:03:02:72:ef:84:eb:4d:bd:
9c:81:63:b0:71:d0:37:c2:db:6e:e1:28:8c:0a:e2:7e:55:88:
45:12:15:8b:e6:ff:cf:e6:31:ab:bf:24:1a:29:22:c4:9b:41:
17:6e:6f:9f:7b:be:d5:8f:09:ca:f2:cb:4c:c9:d7:2a:41:57:
c5:4d:03:d0:cd:1f:4e:ff:7b:e2:f8:b9:5b:ad:44:8f:a3:91:
cc:d5:02:fd:40:8b:02:1f:a4:43:3a:97:24:87:c2:d0:72:1c:
fd:53:26:fe:98:ce:76:06:9f:b6:b0:58:12:4f:78:03:c8:6f:
55:e0:69:71:c7:77:27:e3:25:c5:4a:ac:49:89:1b:9d:56:08:
b0:58:5e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 23 23:09:53 2026 by rpki-client