Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202792.roa
File: AS202792.roa (raw, json)
Hash identifier: D/b5iXyYVFqh/WLOOUDEltR/O0QXPqcOQgWLDWSsK2s=
Subject key identifier: EF:3A:F6:1F:1B:CD:92:14:F9:58:71:FC:00:B2:87:E5:25:BE:1B:FB
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4470045FF63B13797BC88C0A091B12E452FC4E8E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202792.roa
Signing time: Wed 26 Aug 2026 11:32:09 +0000
ROA not before: Wed 26 Aug 2026 11:27:09 +0000
ROA not after: Wed 25 Aug 2027 11:32:09 +0000
asID: 202792
IP address blocks: 95.134.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:70:04:5f:f6:3b:13:79:7b:c8:8c:0a:09:1b:12:e4:52:fc:4e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 26 11:27:09 2026 GMT
Not After : Aug 25 11:32:09 2027 GMT
Subject: CN=EF3AF61F1BCD9214F95871FC00B287E525BE1BFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c1:f6:fd:f8:e1:fd:75:ed:07:8f:77:cf:a9:
e3:9a:a3:f5:57:0e:ae:7a:2d:a8:66:07:7a:96:32:
b2:15:bb:a4:4b:67:d5:aa:8a:90:79:e5:3a:27:4e:
19:47:db:89:85:41:84:4c:e0:60:9c:83:95:c9:28:
e8:49:a6:c7:59:19:1e:59:49:3b:ae:b1:56:5e:7b:
d8:b4:9d:5b:2c:ac:05:7f:73:36:5e:17:4e:e9:60:
2f:c6:42:9d:60:6d:e9:d3:c3:b7:48:26:aa:cb:9e:
8c:4e:61:4a:81:33:51:4d:8e:7d:2e:f8:bb:ce:b6:
87:cd:af:54:22:71:8c:59:b7:e5:0e:a3:86:45:48:
5e:11:78:51:9d:57:74:2d:3a:b7:e7:3f:e4:f8:50:
0e:0c:34:d4:ff:df:ea:9f:e8:cc:a6:57:2d:cb:0c:
46:fc:78:b5:30:3d:12:9a:46:44:5c:4c:f5:91:be:
e5:39:e8:58:3d:e6:96:15:20:79:81:b6:fd:f0:be:
09:b9:63:b0:f1:19:f1:52:5c:ca:af:c1:11:e9:42:
d1:42:70:e4:30:5a:5a:d6:3b:01:c0:21:8b:30:f3:
96:eb:47:c9:fa:33:e9:e1:66:1d:2f:04:a0:36:65:
7d:8f:33:75:26:80:c7:7b:9e:c6:6a:b2:90:51:76:
79:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3A:F6:1F:1B:CD:92:14:F9:58:71:FC:00:B2:87:E5:25:BE:1B:FB
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202792.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.132.0/24
Signature Algorithm: sha256WithRSAEncryption
42:5b:cb:2a:69:5b:79:0d:8f:7c:f0:cd:46:22:24:57:31:40:
60:b5:cc:82:64:20:3a:7f:ad:9f:61:3e:03:9c:9b:4f:bd:28:
74:5f:9a:d4:df:50:0a:a3:f7:24:24:ab:16:d9:1b:4f:67:55:
54:4d:98:f2:7d:f8:ae:a0:c7:b9:9e:6e:80:e7:63:fe:22:01:
17:08:1d:ad:f9:b6:30:97:37:c9:de:f1:7d:a5:a5:3d:24:9c:
39:40:0e:e7:88:f0:7b:53:60:d2:a4:43:94:aa:98:46:a3:b3:
6c:ce:e2:c7:71:65:4d:ac:c5:85:53:80:84:23:06:4f:58:0f:
1b:9a:b8:41:6f:1c:42:47:b6:52:be:90:52:64:a0:a3:12:c5:
ff:b3:79:ab:80:70:04:7a:e2:d5:42:e6:74:dd:af:09:b1:d9:
38:be:33:0b:80:8c:3d:e6:df:07:58:30:61:20:2f:3d:d8:45:
0b:6e:ef:68:4c:67:94:95:8a:04:27:fd:d0:ff:2f:68:2b:7e:
ff:44:4f:2b:7c:b9:70:b6:82:7b:19:9e:a1:20:de:d5:03:e1:
01:13:9b:2f:37:cf:72:ce:e8:1e:d7:af:d2:fd:da:a3:21:06:
77:12:e3:a3:c6:e0:37:c6:30:e6:a5:fc:44:49:a2:95:dc:b9:
c1:d5:9b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 00:34:39 2026 by rpki-client