Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202791.roa
File: AS202791.roa (raw, json)
Hash identifier: ZVTpqmTYBSDkL+9QqXiGJbWTQzL/FHo5vVxPUddgS8M=
Subject key identifier: E2:4C:2E:35:0E:8A:91:71:B1:23:56:23:3D:C3:19:BE:E9:8A:0B:85
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 295E8512A43283255D4E51BAAAB6226FD3166945
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202791.roa
Signing time: Wed 26 Aug 2026 11:32:04 +0000
ROA not before: Wed 26 Aug 2026 11:27:04 +0000
ROA not after: Wed 25 Aug 2027 11:32:04 +0000
asID: 202791
IP address blocks: 95.134.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 19:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:5e:85:12:a4:32:83:25:5d:4e:51:ba:aa:b6:22:6f:d3:16:69:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 26 11:27:04 2026 GMT
Not After : Aug 25 11:32:04 2027 GMT
Subject: CN=E24C2E350E8A9171B12356233DC319BEE98A0B85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8c:3e:dc:b0:aa:b4:b7:eb:c7:db:32:5a:45:
48:ce:04:e8:92:aa:df:ff:33:70:9f:9a:e2:bc:3d:
0a:59:8a:0d:89:9e:f1:09:6f:50:57:41:63:76:24:
68:0d:e6:f0:20:5c:af:75:69:40:98:5b:5d:b8:b8:
27:a4:f5:a7:d8:5c:00:94:d9:7e:6f:9d:fe:53:ca:
e4:bc:1b:46:c1:9f:fd:be:29:4e:d3:ec:f6:b6:c6:
28:39:8e:bc:f7:47:69:87:92:c0:c3:8f:92:f2:39:
ad:80:bf:c7:50:11:88:68:78:a4:96:ae:59:e0:ef:
61:5a:02:bf:84:e1:ea:23:c8:fc:5b:5c:19:9e:4d:
e3:af:53:7e:aa:2f:58:05:0e:f4:7a:46:15:25:6a:
96:87:31:49:22:c7:2f:d1:53:5c:38:f0:d4:ab:f1:
2a:84:a7:ce:07:54:9f:6d:21:aa:e4:a4:4a:dc:46:
e8:87:39:45:59:9f:90:2c:a4:43:b6:97:9b:7f:ef:
37:2f:d3:fc:86:9a:fd:1c:d1:62:5f:4f:d9:b0:c0:
d8:6b:af:1c:92:2b:a8:1b:ad:7f:12:26:7c:0a:a5:
89:a9:be:e6:bd:d8:49:c7:2f:b8:a2:2d:d8:f6:af:
78:c1:5d:f0:87:fa:05:02:f1:c5:4c:92:f7:c0:55:
cb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4C:2E:35:0E:8A:91:71:B1:23:56:23:3D:C3:19:BE:E9:8A:0B:85
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202791.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.183.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:53:3e:21:cd:f4:a0:b3:37:29:9b:28:6d:b2:9b:66:ce:c4:
cc:d3:a8:2d:ac:01:33:d5:4b:86:25:a8:4b:f1:16:2b:9b:d3:
e6:2c:36:7b:82:78:aa:39:93:84:92:86:5d:87:46:29:c0:08:
23:0f:c7:19:9d:9b:df:95:26:4d:49:c4:ca:8b:3f:9a:3e:09:
52:a0:21:04:87:aa:1b:05:2d:70:79:57:f4:a5:a9:d4:32:84:
66:fe:82:d9:a3:99:b5:be:fb:01:fc:70:44:bd:52:c7:83:8e:
60:2d:ea:6e:85:e0:9b:81:59:96:1b:9e:85:fa:3b:3b:a1:7b:
98:76:8f:35:ba:99:7e:e4:6b:02:37:02:4f:2c:5d:90:f1:f4:
a6:d7:03:a2:74:0f:7b:80:1d:2b:36:dd:fe:f8:54:ef:65:4a:
89:47:47:f9:3c:cb:f3:42:eb:67:c2:1f:2f:22:65:8a:01:3e:
8d:f4:89:96:4f:e2:94:ce:eb:9a:fd:3a:66:20:86:b8:d2:24:
ad:6b:e4:7d:38:59:6e:6c:17:d7:fc:85:ca:e5:8a:6f:54:a4:
63:97:b3:01:79:46:30:81:dc:4a:02:c2:e1:71:4b:d3:bf:c2:
dc:b0:19:71:69:86:a1:0c:3e:4d:32:1a:e0:1b:b0:43:21:23:
52:7d:3c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:05 2026 by rpki-client