Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS399073.roa
File: AS399073.roa (raw, json)
Hash identifier: T4v+vll7R83i29OtmbphSJ3wE9lMcLG2PN+7W/Fv5GM=
Subject key identifier: 4A:C1:A7:62:39:73:2F:0B:F0:99:9C:D6:A9:CC:2B:86:D3:FA:DA:6F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0AC88B380A8DBF96E92C125E2DBAB50420AD55FF
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS399073.roa
Signing time: Tue 16 Sep 2025 17:39:08 +0000
ROA not before: Tue 16 Sep 2025 17:34:08 +0000
ROA not after: Tue 15 Sep 2026 17:39:08 +0000
asID: 399073
IP address blocks: 95.134.62.0/24 maxlen: 24
95.134.65.0/24 maxlen: 24
95.134.66.0/24 maxlen: 24
95.134.67.0/24 maxlen: 24
95.134.69.0/24 maxlen: 24
95.134.71.0/24 maxlen: 24
95.134.89.0/24 maxlen: 24
95.134.92.0/24 maxlen: 24
95.135.189.0/24 maxlen: 24
178.92.1.0/24 maxlen: 24
178.92.2.0/24 maxlen: 24
178.92.3.0/24 maxlen: 24
178.92.4.0/24 maxlen: 24
178.92.8.0/24 maxlen: 24
178.92.9.0/24 maxlen: 24
178.92.10.0/24 maxlen: 24
178.92.12.0/24 maxlen: 24
178.92.23.0/24 maxlen: 24
178.92.25.0/24 maxlen: 24
178.92.26.0/24 maxlen: 24
178.92.27.0/24 maxlen: 24
178.92.51.0/24 maxlen: 24
178.92.53.0/24 maxlen: 24
178.92.55.0/24 maxlen: 24
178.93.33.0/24 maxlen: 24
178.93.39.0/24 maxlen: 24
178.93.45.0/24 maxlen: 24
178.93.46.0/24 maxlen: 24
178.93.47.0/24 maxlen: 24
178.93.52.0/24 maxlen: 24
178.93.53.0/24 maxlen: 24
178.93.55.0/24 maxlen: 24
178.93.65.0/24 maxlen: 24
178.93.66.0/24 maxlen: 24
178.93.67.0/24 maxlen: 24
178.93.68.0/24 maxlen: 24
178.93.69.0/24 maxlen: 24
178.93.70.0/24 maxlen: 24
178.93.71.0/24 maxlen: 24
178.93.72.0/24 maxlen: 24
178.93.73.0/24 maxlen: 24
178.93.75.0/24 maxlen: 24
178.93.84.0/24 maxlen: 24
178.93.85.0/24 maxlen: 24
178.93.89.0/24 maxlen: 24
178.93.92.0/24 maxlen: 24
178.93.94.0/24 maxlen: 24
178.93.96.0/24 maxlen: 24
178.93.99.0/24 maxlen: 24
178.93.112.0/24 maxlen: 24
178.93.113.0/24 maxlen: 24
178.93.114.0/24 maxlen: 24
178.93.129.0/24 maxlen: 24
178.93.130.0/24 maxlen: 24
178.93.131.0/24 maxlen: 24
178.93.132.0/24 maxlen: 24
178.93.133.0/24 maxlen: 24
178.93.134.0/24 maxlen: 24
178.93.135.0/24 maxlen: 24
178.93.136.0/24 maxlen: 24
178.94.152.0/24 maxlen: 24
178.94.153.0/24 maxlen: 24
178.94.155.0/24 maxlen: 24
178.94.156.0/24 maxlen: 24
178.94.158.0/24 maxlen: 24
178.94.159.0/24 maxlen: 24
178.94.181.0/24 maxlen: 24
178.94.185.0/24 maxlen: 24
178.94.186.0/24 maxlen: 24
178.94.188.0/24 maxlen: 24
178.95.105.0/24 maxlen: 24
178.95.106.0/24 maxlen: 24
178.95.108.0/24 maxlen: 24
178.95.110.0/24 maxlen: 24
178.95.111.0/24 maxlen: 24
178.95.115.0/24 maxlen: 24
178.95.120.0/24 maxlen: 24
178.95.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Oct 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:c8:8b:38:0a:8d:bf:96:e9:2c:12:5e:2d:ba:b5:04:20:ad:55:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 16 17:34:08 2025 GMT
Not After : Sep 15 17:39:08 2026 GMT
Subject: CN=4AC1A76239732F0BF0999CD6A9CC2B86D3FADA6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:64:ab:e9:e6:a0:fd:dd:fd:b2:8e:db:05:49:
5a:85:6e:61:70:01:90:83:2f:52:0e:c6:0b:3d:32:
51:0e:bc:c3:6c:25:b6:b5:cc:15:cc:fa:35:98:3a:
d9:9e:d1:92:70:01:f8:d4:76:0c:6d:df:b4:93:6f:
ac:1d:dd:3f:2f:60:97:90:5c:2a:5c:c9:de:0a:ef:
02:3b:d3:fd:b2:7e:b6:e0:65:c8:8c:03:6c:45:d9:
65:ff:f6:88:7d:8f:05:7e:11:22:9d:b1:d2:46:09:
e0:c1:0b:5d:ab:fe:6e:dc:c8:bd:5c:bf:6f:7c:3c:
1d:63:a3:09:84:3b:ee:16:35:24:c6:5a:f8:09:0a:
86:7e:c6:52:fd:c9:4b:41:2d:85:26:58:be:37:b0:
9d:ef:37:38:25:9e:62:a5:7a:5c:e6:88:96:07:23:
24:d7:72:69:7c:cc:20:2d:e1:ad:15:ae:60:9c:dc:
77:bb:a3:78:fa:c9:0f:d9:d3:c4:ac:50:fa:30:86:
20:8c:ae:77:29:c8:d0:4f:e4:2a:6f:9c:f4:1b:79:
56:b8:e2:ca:ec:8d:b5:96:dd:e9:68:b9:b6:ca:d9:
57:f9:5e:19:c8:82:64:40:d8:ae:f2:01:6b:52:5b:
9d:ca:25:33:c7:28:ff:db:67:25:4f:25:51:6e:92:
07:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C1:A7:62:39:73:2F:0B:F0:99:9C:D6:A9:CC:2B:86:D3:FA:DA:6F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS399073.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.62.0/24
95.134.65.0-95.134.67.255
95.134.69.0/24
95.134.71.0/24
95.134.89.0/24
95.134.92.0/24
95.135.189.0/24
178.92.1.0-178.92.4.255
178.92.8.0-178.92.10.255
178.92.12.0/24
178.92.23.0/24
178.92.25.0-178.92.27.255
178.92.51.0/24
178.92.53.0/24
178.92.55.0/24
178.93.33.0/24
178.93.39.0/24
178.93.45.0-178.93.47.255
178.93.52.0/23
178.93.55.0/24
178.93.65.0-178.93.73.255
178.93.75.0/24
178.93.84.0/23
178.93.89.0/24
178.93.92.0/24
178.93.94.0/24
178.93.96.0/24
178.93.99.0/24
178.93.112.0-178.93.114.255
178.93.129.0-178.93.136.255
178.94.152.0/23
178.94.155.0-178.94.156.255
178.94.158.0/23
178.94.181.0/24
178.94.185.0-178.94.186.255
178.94.188.0/24
178.95.105.0-178.95.106.255
178.95.108.0/24
178.95.110.0/23
178.95.115.0/24
178.95.120.0/23
Signature Algorithm: sha256WithRSAEncryption
52:60:bc:d7:bf:c7:47:43:e0:e2:07:06:56:65:22:60:e6:58:
66:86:f0:de:a2:8c:54:22:5e:09:03:fc:39:86:0e:38:c5:5e:
5c:fd:ba:a3:2f:01:6d:ac:04:86:bf:76:1b:d2:ab:49:48:79:
43:86:7e:89:d4:c3:12:c4:92:08:39:22:f3:4a:25:11:4d:93:
28:ce:4b:f3:15:77:22:19:00:4a:85:d5:15:d4:ba:fe:be:83:
3d:45:93:33:bb:87:8f:b0:58:42:98:c9:02:cb:7b:b2:e8:97:
1f:83:07:2a:9f:27:6f:bf:1c:90:20:0d:47:1e:fc:50:a2:a2:
de:68:c6:e9:f8:11:84:6e:fc:4f:24:9d:ed:c8:90:3b:78:8c:
a3:14:00:31:d3:8e:65:9e:39:d5:6a:ed:79:a2:db:f1:7a:b2:
dc:e0:af:3d:74:15:49:8c:8c:40:ee:4f:94:d6:16:da:42:b6:
06:ac:16:7a:2e:cf:46:72:a5:7b:78:b6:00:ad:7b:eb:c1:f1:
9c:90:e4:7b:78:34:48:04:00:bf:ab:72:83:d4:3b:df:01:c8:
96:4c:49:46:22:97:a5:bd:e3:0f:13:67:9e:c2:41:ea:fc:cf:
59:bb:7b:b2:88:a5:0e:d2:af:84:14:27:4d:a7:e0:e9:78:fd:
af:e2:a7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 21:33:34 2025 by rpki-client