Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS395793.roa
File: AS395793.roa (raw, json)
Hash identifier: AQdcIdzmKl8R6xr/pU09Z2XrhroiearSD79AYcHX06A=
Subject key identifier: 4A:F0:88:D3:21:03:2C:D1:9F:16:42:9F:EA:F5:C1:7D:E9:CB:B0:5F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 219A8DA5FF26F04244778D4C833E22AC869D290A
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS395793.roa
Signing time: Tue 25 Mar 2025 02:33:21 +0000
ROA not before: Tue 25 Mar 2025 02:28:21 +0000
ROA not after: Tue 24 Mar 2026 02:33:21 +0000
asID: 395793
IP address blocks: 95.134.81.0/24 maxlen: 24
95.134.82.0/24 maxlen: 24
95.134.131.0/24 maxlen: 24
95.134.148.0/24 maxlen: 24
95.134.150.0/24 maxlen: 24
95.135.102.0/24 maxlen: 24
95.135.194.0/24 maxlen: 24
95.135.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:24:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:9a:8d:a5:ff:26:f0:42:44:77:8d:4c:83:3e:22:ac:86:9d:29:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 25 02:28:21 2025 GMT
Not After : Mar 24 02:33:21 2026 GMT
Subject: CN=4AF088D321032CD19F16429FEAF5C17DE9CBB05F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:29:a5:9c:ee:8e:aa:66:db:fd:c2:ba:c6:13:
89:e7:84:c5:56:5b:7a:87:c9:b8:b3:1c:ef:cc:74:
04:5e:eb:65:7c:89:f8:44:fe:d6:74:7e:a1:8a:f7:
3a:7e:23:42:63:a6:cb:15:d6:02:80:1d:01:3b:d0:
da:0c:f0:82:b6:80:e4:7d:82:49:da:1c:0d:2e:d1:
b1:74:40:ee:a5:34:8e:ed:bf:3a:f2:df:72:c8:50:
97:6b:39:0d:5f:bf:c1:c1:0e:28:16:28:a0:01:2f:
c7:09:b0:3f:9c:6e:a0:e4:96:33:25:24:24:64:b3:
9e:02:d4:7a:57:ec:08:b4:80:4e:96:c0:ed:9b:f2:
4a:2e:03:74:c9:f1:86:1e:22:bd:ca:f0:c3:97:2e:
af:12:4c:93:8e:11:22:5e:0a:a2:c7:d5:d2:86:89:
95:b3:01:75:2c:0d:05:0a:cf:3c:53:d9:2f:e1:f4:
57:48:10:d0:49:30:18:58:3f:98:29:d8:5d:45:df:
9f:fa:b0:db:59:3b:60:05:8e:1b:b3:14:ba:0a:e0:
b2:fc:44:67:ee:4e:b1:79:bd:ed:e7:43:f1:a0:89:
4c:2e:04:b5:df:59:c0:8b:51:d6:7e:be:fb:4e:a4:
b4:8f:a5:c2:fb:15:35:63:cb:50:7c:ab:32:f8:cb:
fd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F0:88:D3:21:03:2C:D1:9F:16:42:9F:EA:F5:C1:7D:E9:CB:B0:5F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS395793.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.81.0-95.134.82.255
95.134.131.0/24
95.134.148.0/24
95.134.150.0/24
95.135.102.0/24
95.135.194.0/24
95.135.223.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:81:9c:c5:cb:8b:93:cd:20:0b:28:74:cb:d9:23:8a:3a:47:
1d:69:d8:65:f1:89:92:25:85:2f:d9:2e:8f:87:88:ad:f8:7a:
85:8e:ac:8a:01:76:a4:da:45:e6:2b:5a:4b:d8:62:ac:dc:b7:
10:80:27:a4:6a:54:f4:95:a5:61:52:63:5d:6b:09:9f:42:be:
af:d8:68:67:a5:53:17:16:ab:08:47:55:19:92:e7:3f:85:f9:
fd:53:30:fa:a9:2c:09:f6:9e:e3:d1:42:0b:a3:85:c3:ee:cd:
d9:3b:4c:1a:86:ac:ca:9d:f5:36:f2:91:02:0a:c5:09:d3:81:
d6:a6:84:fa:4b:a6:75:a6:3b:ce:40:db:d7:2c:04:de:eb:3a:
d4:54:39:e3:61:81:4b:c9:2c:60:2a:20:2c:cb:ee:26:f1:3f:
3b:a3:a7:3b:5d:27:56:84:37:49:2a:90:97:e2:c4:cd:91:67:
47:9a:a8:0e:6d:d8:48:b6:39:62:d4:7d:74:77:17:19:8e:f4:
1f:81:f8:7b:be:3f:99:1e:ad:3e:d5:fa:e4:19:ba:2c:1b:a9:
e8:a8:c2:c0:28:f9:ec:24:96:7a:ed:12:fc:5b:68:99:d9:83:
1c:2d:d3:b1:1b:fa:93:d3:dc:5b:2e:7e:06:05:f2:ec:49:00:
e3:47:6f:db
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUIZqNpf8m8EJEd41Mgz4irIadKQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTAzMjUwMjI4MjFaFw0yNjAzMjQwMjMzMjFaMDMxMTAvBgNV
BAMTKDRBRjA4OEQzMjEwMzJDRDE5RjE2NDI5RkVBRjVDMTdERTlDQkIwNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuKaWc7o6qZtv9wrrGE4nnhMVW
W3qHybizHO/MdARe62V8ifhE/tZ0fqGK9zp+I0JjpssV1gKAHQE70NoM8IK2gOR9
gknaHA0u0bF0QO6lNI7tvzry33LIUJdrOQ1fv8HBDigWKKABL8cJsD+cbqDkljMl
JCRks54C1HpX7Ai0gE6WwO2b8kouA3TJ8YYeIr3K8MOXLq8STJOOESJeCqLH1dKG
iZWzAXUsDQUKzzxT2S/h9FdIENBJMBhYP5gp2F1F35/6sNtZO2AFjhuzFLoK4LL8
RGfuTrF5ve3nQ/GgiUwuBLXfWcCLUdZ+vvtOpLSPpcL7FTVjy1B8qzL4y/09AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUSvCI0yEDLNGfFkKf6vXBfenLsF8wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMzk1NzkzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyMAwDBABf
hlEDBABfhlIDBABfhoMDBABfhpQDBABfhpYDBABfh2YDBABfh8IDBABfh98wDQYJ
KoZIhvcNAQELBQADggEBAFyBnMXLi5PNIAsodMvZI4o6Rx1p2GXxiZIlhS/ZLo+H
iK34eoWOrIoBdqTaReYrWkvYYqzctxCAJ6RqVPSVpWFSY11rCZ9Cvq/YaGelUxcW
qwhHVRmS5z+F+f1TMPqpLAn2nuPRQgujhcPuzdk7TBqGrMqd9TbykQIKxQnTgdam
hPpLpnWmO85A29csBN7rOtRUOeNhgUvJLGAqICzL7ibxPzujpztdJ1aEN0kqkJfi
xM2RZ0eaqA5t2Ei2OWLUfXR3FxmO9B+B+Hu+P5kerT7V+uQZuiwbqeiowsAo+ewk
lnrtEvxbaJnZgxwt07Eb+pPT3FsufgYF8uxJAONHb9s=
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:57 2025 by rpki-client