Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS397630.roa
File: AS397630.roa (raw, json)
Hash identifier: Q59qfDwj4ODYUfw0VavOgChfobxYGiUwy7Xh+hXb29s=
Subject key identifier: 27:12:64:38:E8:FE:04:71:88:FC:E6:D8:E9:7B:76:84:B1:2A:1C:DA
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 02C643A83C0742E9179B2C374A74ACB4035C69C7
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS397630.roa
Signing time: Sat 15 Aug 2026 00:06:30 +0000
ROA not before: Sat 15 Aug 2026 00:01:30 +0000
ROA not after: Sat 14 Aug 2027 00:06:30 +0000
asID: 397630
IP address blocks: 92.112.141.0/24 maxlen: 24
95.135.12.0/24 maxlen: 24
95.135.19.0/24 maxlen: 24
95.135.25.0/24 maxlen: 24
95.135.183.0/24 maxlen: 24
178.92.158.0/24 maxlen: 24
178.92.195.0/24 maxlen: 24
178.92.219.0/24 maxlen: 24
178.92.246.0/24 maxlen: 24
178.93.30.0/24 maxlen: 24
178.95.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 14:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:c6:43:a8:3c:07:42:e9:17:9b:2c:37:4a:74:ac:b4:03:5c:69:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 15 00:01:30 2026 GMT
Not After : Aug 14 00:06:30 2027 GMT
Subject: CN=27126438E8FE047188FCE6D8E97B7684B12A1CDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:75:1b:7e:5f:25:7f:ab:4c:aa:b4:9a:4a:10:
57:5c:89:e7:2b:0c:83:fa:d3:30:b8:88:19:14:b3:
83:ff:1f:e2:64:ed:43:dc:9d:b5:1b:1d:d8:35:36:
b4:90:83:00:71:0a:3e:a9:79:d1:dd:a4:a5:91:26:
a7:61:15:c6:fc:7c:ee:03:32:b7:15:81:54:38:2c:
f4:b2:b3:c7:b9:43:41:37:84:ea:2e:c8:a9:58:f1:
07:37:4f:a5:b2:c2:45:5f:bd:b0:1d:fc:d0:6e:8e:
b2:d2:b6:a3:16:45:8a:d4:33:f7:0f:0c:65:62:0b:
8e:28:92:53:ee:5c:34:31:58:21:f3:f9:4c:96:35:
d4:e6:d0:92:df:0e:ad:5e:cf:e9:d1:d3:13:53:ed:
30:cf:58:a1:04:ee:63:97:dc:08:02:b6:7e:48:cf:
ce:ab:46:f5:29:f3:b7:b6:c2:7b:b7:4d:6f:be:2f:
53:47:d4:29:63:ea:f6:e7:e4:d3:7b:fd:8d:4a:d6:
58:60:14:19:9b:6b:44:31:c7:a1:ff:0f:49:38:b7:
ba:de:16:6f:40:ad:f6:02:04:b1:6d:36:0c:4a:57:
2e:0d:40:f5:01:c1:e3:d5:81:d4:5e:f0:1f:bf:8f:
37:b2:f9:08:41:17:b2:a7:59:f8:a0:f7:5d:92:d8:
cd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:12:64:38:E8:FE:04:71:88:FC:E6:D8:E9:7B:76:84:B1:2A:1C:DA
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS397630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.141.0/24
95.135.12.0/24
95.135.19.0/24
95.135.25.0/24
95.135.183.0/24
178.92.158.0/24
178.92.195.0/24
178.92.219.0/24
178.92.246.0/24
178.93.30.0/24
178.95.225.0/24
Signature Algorithm: sha256WithRSAEncryption
52:d5:f2:0f:93:47:5e:5a:d0:f9:41:38:5d:40:b4:48:72:a3:
22:76:df:7a:d0:79:9f:bc:55:6a:f6:6c:01:1c:37:d1:03:5e:
bb:7e:fa:84:89:26:86:de:6d:77:23:6f:1b:4e:8a:3a:aa:09:
2e:c9:b8:42:42:49:cf:38:52:4f:c3:a1:c0:8c:93:42:7e:63:
36:8e:48:d7:06:ca:c6:37:4b:dc:12:01:7b:4f:a2:37:e8:fd:
46:d7:db:69:7c:41:00:dd:b8:3e:48:25:fa:f7:f4:5a:46:ae:
40:50:7b:a8:f2:3e:26:ce:1e:cf:62:8f:93:f6:c5:c3:99:e9:
c4:b3:c6:95:c3:3a:da:b0:62:a6:3d:15:90:d6:2a:4c:56:66:
99:d6:0f:24:7d:45:70:c4:65:1b:1c:9f:d4:1e:e7:13:d4:1e:
37:80:c7:a2:e5:ec:61:9a:f8:38:b1:73:4b:59:8a:88:35:69:
df:b4:5f:34:64:15:d9:73:ab:62:74:19:ec:94:f4:a2:ef:a2:
e2:97:07:f9:39:8b:55:0e:d0:70:a1:c9:eb:06:0d:a0:2b:8f:
89:20:d8:0d:9c:89:e1:37:e7:9b:50:d9:2b:24:4b:1c:d5:df:
48:97:c1:8f:ef:b9:07:98:f4:32:7f:21:fb:78:69:73:2f:bd:
41:31:5a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 16:25:48 2026 by rpki-client