Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS201094.roa
File: AS201094.roa (raw, json)
Hash identifier: jnSNI0W1XRZ5hNX/8/bknBqwj6bTX9Dk8jThFEn57k0=
Subject key identifier: 34:4E:3B:67:CC:95:93:F3:AF:A5:71:AA:33:EF:F0:2E:40:92:F7:33
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1AD47CC9750DE7A9179ADD9277EBA88C00FF56EE
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS201094.roa
Signing time: Thu 01 Oct 2026 10:10:54 +0000
ROA not before: Thu 01 Oct 2026 10:05:54 +0000
ROA not after: Thu 30 Sep 2027 10:10:54 +0000
asID: 201094
IP address blocks: 178.95.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:d4:7c:c9:75:0d:e7:a9:17:9a:dd:92:77:eb:a8:8c:00:ff:56:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 1 10:05:54 2026 GMT
Not After : Sep 30 10:10:54 2027 GMT
Subject: CN=344E3B67CC9593F3AFA571AA33EFF02E4092F733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:c5:eb:45:43:80:9c:59:83:57:45:41:de:
83:79:9b:75:ac:e2:d7:b2:08:87:bb:9c:5b:0c:1f:
73:45:7a:3f:dc:5a:66:ad:47:35:ff:5e:9b:cc:38:
08:9e:26:af:7b:c8:cf:71:f6:f4:11:22:f5:63:f9:
76:a1:96:d8:28:82:76:46:e9:fe:90:d5:2e:37:19:
b2:0f:e3:cd:9e:52:4f:3f:0a:ed:20:c1:85:87:fe:
3a:54:46:49:44:06:76:75:66:ad:6a:39:72:c3:bb:
2c:ac:9c:79:db:8c:95:6f:17:d0:81:de:29:fa:57:
b2:7f:ab:f4:b3:f7:39:21:fd:15:7c:c7:16:a0:dc:
5c:8a:b9:17:d6:d5:71:25:89:5a:d1:ba:76:89:ae:
d2:04:38:cf:7e:a2:9b:df:5e:67:70:e6:23:02:b2:
42:b1:03:6e:96:b9:1e:0f:69:b8:62:00:7e:50:13:
0b:86:be:ab:1a:c6:ad:d6:fa:f4:3d:f1:89:84:ed:
40:e4:49:1f:a3:de:d5:1c:33:95:4c:ed:6c:ac:bd:
21:ed:45:de:f3:aa:dc:ce:c1:73:55:f2:c4:29:52:
04:82:5b:8d:e8:80:7b:19:95:87:bc:96:a9:3a:11:
6c:94:bb:12:11:23:73:7f:b8:dc:07:eb:5f:d1:0f:
53:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4E:3B:67:CC:95:93:F3:AF:A5:71:AA:33:EF:F0:2E:40:92:F7:33
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS201094.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.95.129.0/24
Signature Algorithm: sha256WithRSAEncryption
55:9b:13:a6:3a:40:b5:79:75:4b:87:bc:4e:97:57:db:08:50:
7d:cf:c7:2d:4c:bf:d1:9d:a0:96:d8:6e:17:79:c1:17:3e:a7:
48:76:f6:9e:cf:ae:d8:f2:6a:da:ef:b0:88:fa:19:53:ea:d8:
35:7b:01:05:62:b0:23:21:66:88:5a:86:fa:fb:ee:d8:a1:aa:
d2:9b:4e:54:ea:dc:c7:6f:6d:a8:b7:61:ab:47:5d:8a:92:77:
83:bc:5f:24:21:09:b7:59:ce:31:a4:91:86:9b:b9:df:54:0c:
ef:b7:d6:6c:f7:f8:9b:6a:8d:55:1a:89:ef:49:f5:ec:66:f8:
cd:3c:dc:cc:5b:06:bd:4f:28:3e:94:81:72:41:44:a7:0b:91:
4f:84:9d:75:7d:18:67:2c:37:2c:1c:b0:78:13:a6:a6:0f:fc:
27:8e:1b:fa:ba:4d:4f:f3:9e:0a:8e:9a:04:d5:82:b3:5b:2b:
16:85:db:96:70:14:bc:f8:69:b2:1b:8f:cf:a5:5e:09:78:b8:
ad:53:3f:b1:28:13:84:63:b0:87:c5:27:8e:a6:19:26:e5:23:
d0:83:b4:4e:4a:49:ea:39:2a:de:5a:72:6b:a9:90:7d:f5:43:
b0:c7:0f:7b:1f:7f:91:14:b2:f1:d1:26:f9:34:3a:1b:c3:bc:
34:d8:ef:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:22:19 2026 by rpki-client