Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202828.roa
File: AS202828.roa (raw, json)
Hash identifier: m9rSnR6zvpBxKEpFEfrez338viDGGpCeX28BHDfVc1c=
Subject key identifier: 07:58:8C:D1:5E:03:9A:5D:1B:B9:93:67:23:E3:07:91:DE:2B:F8:F5
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 688A1330A8A4A7F30278B93DF52B627FEBE56A54
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202828.roa
Signing time: Thu 27 Aug 2026 03:39:07 +0000
ROA not before: Thu 27 Aug 2026 03:34:07 +0000
ROA not after: Thu 26 Aug 2027 03:39:07 +0000
asID: 202828
IP address blocks: 178.94.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 08:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:8a:13:30:a8:a4:a7:f3:02:78:b9:3d:f5:2b:62:7f:eb:e5:6a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 27 03:34:07 2026 GMT
Not After : Aug 26 03:39:07 2027 GMT
Subject: CN=07588CD15E039A5D1BB9936723E30791DE2BF8F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f0:ce:12:5f:7d:31:32:ad:11:36:22:1a:7d:
d0:eb:59:b5:22:52:66:c6:93:a7:89:23:ef:6a:6a:
c6:bb:5e:8e:95:c1:c7:20:a0:df:b5:e4:47:bb:29:
6b:36:f5:f0:f9:e4:1e:79:3a:6a:9f:8c:2a:dc:7f:
d8:51:a3:6d:60:d1:42:c4:8a:e5:07:24:b9:2c:a0:
6b:26:64:c8:4c:1d:6f:f7:da:a3:5b:db:29:d2:8a:
be:de:4d:cc:af:b7:58:f4:70:d6:0f:0e:2e:90:22:
e6:79:d8:07:d9:48:64:e5:28:bd:56:59:3c:4a:0c:
09:cd:c4:7f:0a:91:09:ad:fe:6f:3f:78:51:f5:8e:
e8:52:1b:ef:73:5b:50:4d:6c:0c:60:1c:5a:9f:3a:
07:1e:30:68:b3:fc:cb:ff:b4:32:44:a0:37:29:64:
56:b3:49:0f:e3:63:85:1f:97:2f:3c:10:83:0e:22:
04:3e:8c:7f:4f:79:aa:4c:e1:d2:8b:5b:28:e5:ab:
a6:ac:e1:8e:5f:49:3c:c8:81:12:ef:d5:dc:29:87:
e4:a0:fd:45:89:b5:fc:27:02:52:4e:5c:6c:ef:cf:
50:56:22:d3:a6:23:d1:aa:db:5b:68:76:fc:f7:e7:
53:68:12:2b:81:df:31:47:95:47:06:cd:bd:7e:b8:
bf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:58:8C:D1:5E:03:9A:5D:1B:B9:93:67:23:E3:07:91:DE:2B:F8:F5
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202828.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.94.43.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:9e:30:9b:11:1f:64:35:67:7a:c7:da:84:1d:b9:86:67:0e:
e0:87:04:11:21:f4:27:5b:10:b4:60:75:52:4e:e1:8c:c1:50:
f1:33:60:06:85:69:64:ee:0e:5b:e9:8d:22:98:dc:fb:0d:a2:
82:4a:ed:26:a3:da:33:af:01:b2:d2:10:43:48:7f:64:5b:0a:
8b:7c:da:1c:d9:9d:39:d0:3d:c2:8f:8f:4a:30:aa:d5:77:67:
c2:9e:15:c5:e5:75:ad:71:b4:75:56:0d:15:8c:15:fa:21:ff:
2d:b8:93:d2:30:cd:9b:64:e8:e4:a0:09:9d:9d:f8:3e:1b:3f:
76:06:1d:e6:cc:6e:89:55:c1:7d:28:75:73:31:27:c5:36:41:
fd:df:9f:50:a6:1a:88:f0:d6:7f:1c:22:82:1d:3a:09:60:29:
6d:cb:51:fd:5b:6a:ef:f5:61:38:82:6e:3a:47:3b:21:e0:44:
60:31:af:2e:d0:90:4b:c6:53:77:c7:2e:15:98:16:b6:82:87:
5c:b5:1d:a6:0b:be:97:85:33:c0:a4:91:e8:c2:a4:9e:dd:99:
40:60:a7:52:93:ba:92:91:a6:5a:3d:b6:5d:fb:6f:ef:8a:92:
03:9f:68:84:8d:ac:88:86:c8:4c:7c:8f:d8:08:82:a3:92:1f:
4f:e2:0f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 11:27:36 2026 by rpki-client