Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS35793.roa
File: AS35793.roa (raw, json)
Hash identifier: 6NMIU4u+b2J+LY4Ce+BZMup0iQfphHtUovbLD5/VjcU=
Subject key identifier: A1:E0:E0:BD:E3:73:04:E9:70:B4:48:81:A6:5A:0D:88:A2:C1:94:62
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5D2043E2C464C0C3EC0A78E1E18EA13EA2CF3E29
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS35793.roa
Signing time: Tue 24 Mar 2026 10:56:12 +0000
ROA not before: Tue 24 Mar 2026 10:51:12 +0000
ROA not after: Tue 23 Mar 2027 10:56:12 +0000
asID: 35793
IP address blocks: 178.92.44.0/24 maxlen: 24
178.93.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 15:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:20:43:e2:c4:64:c0:c3:ec:0a:78:e1:e1:8e:a1:3e:a2:cf:3e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 24 10:51:12 2026 GMT
Not After : Mar 23 10:56:12 2027 GMT
Subject: CN=A1E0E0BDE37304E970B44881A65A0D88A2C19462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:96:68:a2:16:57:87:4e:ae:8a:73:a6:d3:0f:
f4:94:99:3e:69:62:7a:48:54:88:ab:f5:96:8e:f9:
a7:6b:e8:bd:17:72:16:d8:9e:c5:69:da:bd:53:a3:
60:eb:9a:a5:a3:ba:dc:a7:d9:c6:c8:67:07:7e:df:
d7:2f:9e:fb:46:e7:9b:26:ca:00:c0:b6:f6:b4:a1:
b3:14:58:a8:da:8b:16:de:c8:56:6e:c9:40:dc:ef:
df:fa:9f:d5:08:94:a0:51:7e:69:99:f1:ed:7e:a8:
29:ad:db:af:ea:00:62:8d:81:34:84:0e:30:eb:d7:
9e:8d:cb:1f:09:e2:0f:0c:bd:d8:f9:92:9a:4a:5e:
5f:46:e2:9f:f1:db:ca:4c:78:89:e9:49:63:2a:fe:
14:ad:11:79:be:6e:b9:31:c0:85:88:3f:33:f1:fb:
9d:72:3b:e5:0d:1b:7f:ab:8d:29:de:3c:51:1d:30:
3f:95:1c:cf:29:62:19:f9:61:f3:9a:4f:8b:1d:4e:
37:68:da:73:54:01:8f:e9:3b:af:cb:90:21:1b:e8:
16:6b:6f:17:f6:13:da:43:34:22:fd:28:bc:e9:13:
88:e6:01:db:28:08:47:b0:77:c1:ac:25:4e:95:0c:
0b:8f:b3:2a:77:86:90:f7:86:c7:8f:9b:dd:2c:40:
44:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E0:E0:BD:E3:73:04:E9:70:B4:48:81:A6:5A:0D:88:A2:C1:94:62
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS35793.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.44.0/24
178.93.123.0/24
Signature Algorithm: sha256WithRSAEncryption
61:53:74:34:a1:fd:73:e2:06:1a:c7:aa:cc:68:bf:4d:46:08:
a0:8d:ad:8b:10:76:ca:37:13:a3:0e:7d:a3:89:c1:82:1f:64:
b4:00:8f:b8:30:44:f3:ad:d9:fd:e9:14:ce:9a:10:76:3a:d5:
7e:96:3f:ac:3f:8c:fa:67:4a:73:00:de:fb:21:04:7f:4d:39:
08:43:83:79:52:70:ee:7d:36:08:83:59:48:6e:ef:9d:ec:ff:
b7:51:9c:3d:87:92:47:45:ee:cb:cc:56:1d:9b:b9:c5:e9:c6:
80:10:25:71:7a:67:5f:2a:b7:ee:0b:6f:17:3e:3b:9d:a1:4e:
a6:23:e0:96:17:99:54:d3:7f:f1:bd:dd:a6:b0:8c:cb:0b:69:
55:2c:9f:1c:1a:1b:20:d3:3b:ec:0d:ee:78:4c:c1:72:e9:2d:
24:91:dc:38:17:f5:e6:da:62:b0:4c:43:f1:28:ff:4a:2f:45:
81:fd:95:35:9c:f0:90:14:22:7d:f5:07:b3:ff:6d:e7:c4:53:
3c:43:cd:d0:1f:12:84:19:7f:77:86:85:44:7a:69:1c:29:a0:
59:60:93:02:3d:4f:74:90:69:d4:61:81:3e:d3:43:58:08:08:
d5:df:ea:8d:f0:32:a0:5c:97:14:02:97:b4:38:c5:2e:de:b0:
2c:94:fa:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 18:19:26 2026 by rpki-client