Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS395793.roa
File: AS395793.roa (raw, json)
Hash identifier: UO7BOaNRrHyPxJMu4OcEWNu2Im2XniLh3xbNZWFdB04=
Subject key identifier: 8A:1E:02:2D:D9:CC:2F:ED:F9:5E:6A:EF:B3:0F:1C:05:9E:85:4A:78
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 27B2ED13F22818D8B0BC0ED2F2BC31AA7FDF4F87
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS395793.roa
Signing time: Tue 27 May 2025 08:01:30 +0000
ROA not before: Tue 27 May 2025 07:56:30 +0000
ROA not after: Tue 26 May 2026 08:01:30 +0000
asID: 395793
IP address blocks: 95.134.78.0/24 maxlen: 24
95.134.81.0/24 maxlen: 24
95.134.82.0/24 maxlen: 24
95.134.131.0/24 maxlen: 24
95.134.148.0/24 maxlen: 24
95.134.150.0/24 maxlen: 24
95.134.202.0/24 maxlen: 24
95.135.102.0/24 maxlen: 24
95.135.194.0/24 maxlen: 24
95.135.223.0/24 maxlen: 24
178.93.122.0/24 maxlen: 24
178.94.170.0/24 maxlen: 24
178.94.171.0/24 maxlen: 24
178.95.229.0/24 maxlen: 24
178.95.245.0/24 maxlen: 24
178.95.246.0/24 maxlen: 24
178.95.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 20:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:b2:ed:13:f2:28:18:d8:b0:bc:0e:d2:f2:bc:31:aa:7f:df:4f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 27 07:56:30 2025 GMT
Not After : May 26 08:01:30 2026 GMT
Subject: CN=8A1E022DD9CC2FEDF95E6AEFB30F1C059E854A78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:15:20:a3:4a:8e:8e:88:9f:00:47:88:6f:f7:
88:56:d1:df:ea:a7:3a:e5:f2:59:49:d8:a4:d1:31:
f7:63:3d:67:48:a0:bb:f5:d6:f3:0d:3b:dc:cf:21:
a8:74:0e:fe:7c:e4:a1:04:e1:94:ad:9a:35:be:0f:
e0:a6:d0:0a:c5:cb:d9:34:ea:c0:27:1d:32:0d:53:
49:2a:11:3f:49:49:38:d8:e3:55:10:42:ab:71:8d:
9f:5c:40:8c:ee:cd:2e:ff:29:4c:31:06:da:1c:ad:
58:e5:d6:7d:e2:4c:86:6f:1b:84:57:86:9d:ab:9a:
27:1a:29:22:89:b6:9f:2a:d8:cb:0a:a3:05:7d:a4:
2e:8a:58:99:09:50:87:19:29:9b:12:51:4d:e4:a6:
fe:28:a4:e8:e7:18:52:0e:9d:dc:f2:67:f2:d2:52:
bb:43:f4:07:61:49:88:d1:aa:d6:7d:e2:53:31:f2:
cc:c0:62:b1:b7:40:21:4b:4e:4d:f1:55:df:56:3c:
10:8e:20:40:09:32:89:33:1d:8e:a8:39:6b:e9:b1:
63:b0:4b:4b:a7:27:e0:48:5c:e8:35:2d:78:2a:be:
3f:4e:ba:03:1c:89:68:f7:be:6c:b4:e8:f0:a9:50:
5d:4d:6f:a1:8e:c8:ae:93:59:3a:f7:52:fe:cc:a3:
fd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1E:02:2D:D9:CC:2F:ED:F9:5E:6A:EF:B3:0F:1C:05:9E:85:4A:78
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS395793.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.78.0/24
95.134.81.0-95.134.82.255
95.134.131.0/24
95.134.148.0/24
95.134.150.0/24
95.134.202.0/24
95.135.102.0/24
95.135.194.0/24
95.135.223.0/24
178.93.122.0/24
178.94.170.0/23
178.95.229.0/24
178.95.245.0-178.95.247.255
Signature Algorithm: sha256WithRSAEncryption
7c:32:df:7c:e7:8a:41:48:8b:53:05:c5:73:37:a1:7c:b9:23:
df:3f:a8:2b:7d:91:e2:06:ab:21:e9:c3:8a:13:6d:00:73:85:
cd:b0:e8:e2:2a:3a:81:3e:4a:63:f3:f1:a5:16:a6:4e:0c:a9:
a0:37:3e:52:44:23:9e:b5:7d:3c:13:52:59:0e:d9:a3:c7:38:
db:e9:63:f7:fe:f6:a1:1f:b0:66:d1:f7:64:78:8c:ce:b4:7b:
80:e6:c7:3c:af:ea:4a:5c:a3:0e:ac:1d:38:09:04:62:d4:39:
ef:0d:ab:4a:6c:1d:e5:73:77:65:6d:c0:71:a4:3b:60:f2:68:
e6:4f:e7:d9:56:bb:22:24:3e:6c:83:89:d8:79:5f:95:8b:27:
40:8e:4a:c2:31:9f:3a:00:a7:36:de:a4:c9:8a:55:06:1d:78:
b1:31:98:42:04:0f:93:d2:ef:57:41:8e:61:64:38:20:6a:4c:
8b:70:83:5c:2f:4a:89:39:ed:4b:79:55:d8:4c:6c:89:14:9b:
fe:52:94:50:6a:c7:80:24:74:90:55:9c:71:be:2d:1e:dd:e5:
1c:9d:43:69:7a:37:a8:e5:bf:5d:d0:67:a1:bf:e0:65:63:1a:
70:a2:cf:54:b6:7b:81:6d:45:b8:e7:1e:75:c7:71:3a:9d:20:
73:5d:26:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:14:27 2025 by rpki-client