Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS393446.roa
File: AS393446.roa (raw, json)
Hash identifier: fcDHbfo1r4A9v6ZOUVFQNBZX0Qs6bKQAkg4ckWPVvtY=
Subject key identifier: 3D:D8:71:A0:15:28:F3:35:91:B2:DB:B8:1F:8A:B8:2E:C8:16:AA:AA
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1A078035A71D482C9CB753F75C04C2573C64106B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS393446.roa
Signing time: Wed 10 Jun 2026 06:27:40 +0000
ROA not before: Wed 10 Jun 2026 06:22:40 +0000
ROA not after: Wed 09 Jun 2027 06:27:40 +0000
asID: 393446
IP address blocks: 178.93.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Jun 2026 23:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:07:80:35:a7:1d:48:2c:9c:b7:53:f7:5c:04:c2:57:3c:64:10:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 10 06:22:40 2026 GMT
Not After : Jun 9 06:27:40 2027 GMT
Subject: CN=3DD871A01528F33591B2DBB81F8AB82EC816AAAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a0:30:af:2a:50:47:68:ed:6d:13:c2:2b:f2:
3b:15:53:52:92:77:73:9e:0f:66:5f:4b:2d:84:18:
f1:e9:6a:a7:b1:e9:0d:bc:5d:70:2c:2d:49:1e:17:
9c:bf:a6:42:50:fe:59:9f:1f:e6:07:a5:c7:0d:3a:
d5:99:b9:5b:a1:15:4d:93:2b:35:37:0d:24:50:67:
ce:76:5d:4f:e2:3a:65:aa:81:a4:59:f4:68:d6:13:
56:d2:23:b1:23:9e:e2:da:53:89:75:f3:cd:a0:b2:
c7:8a:af:11:e8:a4:b4:28:1e:0a:1d:dc:b9:f5:db:
17:76:7f:ef:75:40:31:57:52:2e:0a:7d:98:6b:a3:
50:aa:c9:b0:e8:11:5f:ae:3d:04:5f:de:f2:97:f1:
62:2b:78:81:33:2f:10:95:e6:1e:20:58:b6:9b:c5:
29:01:f5:62:5c:38:26:d7:6e:bb:a4:19:2d:a3:29:
ee:64:a3:82:a2:4d:33:ee:69:ff:8b:c8:3c:9b:f2:
a5:29:c3:2c:b7:ba:41:fe:a4:13:c2:7e:41:57:0d:
c3:c2:0e:00:f8:4e:43:5a:2d:e4:9f:79:f6:52:84:
25:24:d2:67:72:fa:c3:73:ec:bb:32:11:82:2b:e4:
79:ba:fa:42:92:f3:4a:f4:44:50:b1:15:21:83:3e:
1c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D8:71:A0:15:28:F3:35:91:B2:DB:B8:1F:8A:B8:2E:C8:16:AA:AA
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS393446.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.93.176.0/24
Signature Algorithm: sha256WithRSAEncryption
58:28:3a:c3:ae:54:75:d9:d8:81:c9:5c:7b:84:33:cd:f8:9b:
5e:64:aa:2a:13:56:93:a0:1f:da:d3:b8:f0:5e:79:7d:b7:27:
7c:f1:7a:b4:a6:42:c2:f1:60:ce:d9:5f:0f:d2:64:b1:3f:52:
26:b4:f7:fe:1e:24:81:a2:5a:5c:1c:18:a0:90:85:d1:93:c3:
2d:d1:4a:15:80:8d:18:36:04:04:8f:0a:ff:43:fc:41:92:58:
4c:1f:51:9f:0e:f5:13:cd:7e:ca:74:67:20:ab:ab:c1:aa:77:
4d:7f:d2:92:45:d7:b4:ef:0e:a7:8c:0a:64:16:d5:4e:cb:85:
ab:6b:30:42:e9:19:57:8c:01:48:03:d2:d7:df:e3:e8:1d:e1:
44:e3:7e:df:f0:e4:d1:18:62:9e:bd:d8:64:b5:74:3d:49:bb:
6d:47:d4:ab:38:5f:78:aa:79:13:ea:a7:69:f9:f7:aa:47:53:
7b:cd:44:24:3f:fb:98:29:eb:5b:a9:ae:ab:b7:b2:03:c8:60:
b1:81:c5:b9:01:f6:73:fe:6d:90:3c:78:9a:0d:08:7c:b9:2d:
93:dc:04:8b:af:aa:12:f5:ca:1e:08:b4:4f:fe:0c:b0:1d:7e:
03:8b:98:11:b3:e2:14:0b:94:dc:7a:7a:e2:6a:60:78:e2:11:
4f:22:07:d3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUGgeANacdSCyct1P3XATCVzxkEGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA2MTAwNjIyNDBaFw0yNzA2MDkwNjI3NDBaMDMxMTAvBgNV
BAMTKDNERDg3MUEwMTUyOEYzMzU5MUIyREJCODFGOEFCODJFQzgxNkFBQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2oDCvKlBHaO1tE8Ir8jsVU1KS
d3OeD2ZfSy2EGPHpaqex6Q28XXAsLUkeF5y/pkJQ/lmfH+YHpccNOtWZuVuhFU2T
KzU3DSRQZ852XU/iOmWqgaRZ9GjWE1bSI7EjnuLaU4l1882gsseKrxHopLQoHgod
3Ln12xd2f+91QDFXUi4KfZhro1CqybDoEV+uPQRf3vKX8WIreIEzLxCV5h4gWLab
xSkB9WJcOCbXbrukGS2jKe5ko4KiTTPuaf+LyDyb8qUpwyy3ukH+pBPCfkFXDcPC
DgD4TkNaLeSfefZShCUk0mdy+sNz7LsyEYIr5Hm6+kKS80r0RFCxFSGDPhw3AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUPdhxoBUo8zWRstu4H4q4LsgWqqowHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMzkzNDQ2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsl2w
MA0GCSqGSIb3DQEBCwUAA4IBAQBYKDrDrlR12diByVx7hDPN+JteZKoqE1aToB/a
07jwXnl9tyd88Xq0pkLC8WDO2V8P0mSxP1ImtPf+HiSBolpcHBigkIXRk8Mt0UoV
gI0YNgQEjwr/Q/xBklhMH1GfDvUTzX7KdGcgq6vBqndNf9KSRde07w6njApkFtVO
y4WrazBC6RlXjAFIA9LX3+PoHeFE437f8OTRGGKevdhktXQ9SbttR9SrOF94qnkT
6qdp+feqR1N7zUQkP/uYKetbqa6rt7IDyGCxgcW5AfZz/m2QPHiaDQh8uS2T3ASL
r6oS9coeCLRP/gywHX4Di5gRs+IUC5TcenriamB44hFPIgfT
-----END CERTIFICATE-----
Generated at Thu Jun 11 09:43:43 2026 by rpki-client