Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS399359.roa
File: AS399359.roa (raw, json)
Hash identifier: 6GA830inX21y/mAJmUnu2603E2axCnlEqo39w3fNb8M=
Subject key identifier: 9A:FC:A4:52:21:A0:59:23:09:93:28:90:16:87:51:C9:84:35:95:92
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 300E7A5C90BA59B4B4F88F7576396805B47D0F38
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS399359.roa
Signing time: Wed 12 Aug 2026 14:42:00 +0000
ROA not before: Wed 12 Aug 2026 14:37:00 +0000
ROA not after: Wed 11 Aug 2027 14:42:00 +0000
asID: 399359
IP address blocks: 92.112.105.0/24 maxlen: 24
178.93.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 15:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:0e:7a:5c:90:ba:59:b4:b4:f8:8f:75:76:39:68:05:b4:7d:0f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 12 14:37:00 2026 GMT
Not After : Aug 11 14:42:00 2027 GMT
Subject: CN=9AFCA45221A0592309932890168751C984359592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:df:bf:8e:b3:8e:ea:38:79:9a:19:01:a9:05:
33:26:5c:98:06:2f:d0:a8:8b:ca:d4:d5:0c:6d:77:
5e:48:be:c8:06:dd:4d:7c:6c:81:c4:1c:54:6f:06:
01:5f:88:f2:f5:c7:24:75:37:97:59:04:3f:47:9e:
04:ad:18:89:ae:d7:c0:c4:38:32:8e:93:2a:ff:ff:
47:da:7e:09:14:69:3c:04:cc:59:13:4c:67:0d:2f:
2d:bf:8d:9e:76:7c:5e:01:7e:d9:17:06:51:4a:55:
63:a7:4d:ce:ac:c4:cf:21:21:d1:e4:00:5c:6f:f7:
85:e3:cf:97:e0:ff:c0:20:b8:77:ff:7b:89:49:ce:
73:53:dd:c0:97:c4:13:56:51:f2:46:29:db:82:05:
da:1e:42:9d:28:b0:b8:d0:13:c0:eb:8a:e5:9e:9c:
af:74:d0:55:f9:69:3d:fc:68:f7:e1:d4:02:47:6d:
1a:86:70:da:80:f2:1b:c0:86:e5:dd:57:e3:5a:f6:
f6:98:72:f4:18:06:8b:fb:a2:87:0b:42:93:d0:a4:
b0:da:59:8b:b9:d3:8c:2d:7c:4e:d2:4c:b8:84:5e:
f4:fc:07:d3:af:2f:78:54:74:ab:6b:02:49:b0:68:
63:a1:5e:c7:42:49:d1:93:35:65:70:3f:97:de:14:
74:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FC:A4:52:21:A0:59:23:09:93:28:90:16:87:51:C9:84:35:95:92
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS399359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.105.0/24
178.93.80.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:2f:bb:ae:a7:a7:74:e5:69:28:4d:cd:c0:25:76:95:83:e3:
e7:a8:95:aa:40:88:04:18:27:f2:a8:27:30:3e:57:77:00:f9:
c6:20:3b:0d:82:64:ee:03:c9:bc:3b:c9:bd:7b:1f:ed:aa:7a:
a8:77:ed:77:8e:80:5a:6a:14:a0:91:4a:39:e6:35:91:45:25:
da:57:7b:5f:66:8c:7c:d1:a9:33:0b:19:61:e8:13:77:ef:66:
36:7a:cf:e5:49:0e:65:dd:38:bb:d0:bc:66:69:27:a1:6a:15:
c2:31:68:34:d7:5e:f0:68:b8:5f:e6:10:db:5d:f8:02:dd:c8:
e4:72:dc:be:b6:51:13:d3:fd:78:22:5c:da:4b:96:9e:bb:b1:
31:f6:e5:b0:31:98:d0:5c:29:8a:80:d5:b0:cd:35:dd:cf:fc:
2a:d3:dc:1a:c0:78:12:2a:a1:02:5b:24:6f:2c:dc:30:41:aa:
28:f9:50:68:51:cd:4c:45:0e:8b:34:5d:70:ce:9e:c3:80:f9:
68:04:41:ef:63:e7:09:5f:c3:78:75:88:6e:c4:0e:5f:3c:ec:
64:f3:0e:1f:de:20:cc:09:84:57:d1:31:53:7a:d0:44:36:c5:
60:92:30:fa:ae:03:f4:11:5d:21:eb:73:0f:ff:03:84:fc:22:
b6:cf:7c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:29:56 2026 by rpki-client