Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS399359.roa
File: AS399359.roa (raw, json)
Hash identifier: NhXS0JFXfDIqFnQ61tdpjDfc/5aog6z+ziKHmKj6ppU=
Subject key identifier: 74:27:20:ED:62:88:69:AA:92:FD:7D:12:E3:79:3D:31:DF:58:BD:C8
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2A812894038DA2CF17508AADF5A0C6A8FBDCDA19
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS399359.roa
Signing time: Sun 04 Oct 2026 14:22:45 +0000
ROA not before: Sun 04 Oct 2026 14:17:45 +0000
ROA not after: Sun 03 Oct 2027 14:22:45 +0000
asID: 399359
IP address blocks: 46.203.37.0/24 maxlen: 24
91.124.174.0/24 maxlen: 24
91.124.219.0/24 maxlen: 24
92.112.38.0/24 maxlen: 24
92.113.14.0/24 maxlen: 24
95.134.124.0/24 maxlen: 24
95.134.177.0/24 maxlen: 24
95.135.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:81:28:94:03:8d:a2:cf:17:50:8a:ad:f5:a0:c6:a8:fb:dc:da:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 4 14:17:45 2026 GMT
Not After : Oct 3 14:22:45 2027 GMT
Subject: CN=742720ED628869AA92FD7D12E3793D31DF58BDC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c2:71:6a:5e:d2:5e:62:b4:6f:01:7b:ee:ac:
6a:0c:d7:5f:4a:3b:c9:03:2e:6e:f1:dd:e4:3f:7c:
32:87:20:eb:3b:03:68:46:3e:fb:98:df:a6:f9:39:
6b:cb:16:62:64:72:8a:06:29:8d:5c:41:f8:63:60:
ef:40:39:66:3c:15:fa:3e:aa:70:e5:df:61:40:6d:
d7:e8:3f:43:9e:40:dc:18:80:45:40:2e:34:f6:ca:
00:3c:25:c5:b8:39:d9:1e:31:44:71:f3:4e:02:fd:
c5:23:9f:b6:06:99:3d:40:92:a7:f7:0e:71:18:36:
43:84:42:27:51:da:1d:59:84:6f:e0:fe:54:98:2b:
0e:4a:46:1c:c0:f6:63:d5:68:fa:63:1d:23:81:a6:
19:c9:f3:7b:2c:a8:00:82:cc:37:79:c7:2e:03:11:
1a:24:a6:78:a0:ee:ac:aa:fe:01:cc:f4:b1:2a:fc:
da:a3:b6:1d:ef:de:c0:06:98:c3:04:e4:fa:e2:fc:
7e:cb:26:0c:7d:6b:61:b7:86:ec:62:55:7b:2c:42:
5a:b1:48:b7:e5:29:83:2f:b5:53:39:68:19:62:03:
17:b6:de:70:10:83:19:e4:5f:85:84:0a:96:13:d4:
f8:a0:53:22:b8:28:6a:b4:74:c7:a3:ce:e8:67:39:
b7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:27:20:ED:62:88:69:AA:92:FD:7D:12:E3:79:3D:31:DF:58:BD:C8
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS399359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.37.0/24
91.124.174.0/24
91.124.219.0/24
92.112.38.0/24
92.113.14.0/24
95.134.124.0/24
95.134.177.0/24
95.135.179.0/24
Signature Algorithm: sha256WithRSAEncryption
06:d9:a4:9d:e8:7e:75:ae:ed:4b:51:5a:39:bd:10:e3:d2:93:
58:62:b1:a3:a1:5d:b7:71:ae:f5:65:99:3d:47:3d:71:5d:c4:
ac:4a:7f:a2:a7:d6:e4:05:9f:fa:88:fd:d1:1f:a2:1d:5c:72:
aa:fd:dd:4b:b9:bd:b0:48:ae:d9:3c:db:c9:d8:2b:fa:45:a9:
78:0c:62:98:ca:b2:63:4e:f3:c5:09:d1:3c:75:5c:9d:00:bd:
ff:b0:43:24:65:2d:77:d7:80:50:13:1b:a4:f6:f1:1a:ad:2e:
37:d9:5b:1d:d5:00:a8:f5:83:88:18:0f:8d:53:b4:38:b9:90:
fa:5e:e5:77:b5:8b:38:05:0e:1d:0c:fc:05:cc:95:3f:9a:b0:
52:60:ae:8c:38:fc:3a:89:28:40:dc:39:96:ad:ef:ca:83:e9:
87:52:67:9c:0f:87:fe:52:8f:bc:ec:5b:94:b0:37:de:8e:c1:
75:f9:9b:d9:e6:5a:8c:51:55:9d:8d:bc:ca:43:d6:a0:9b:3a:
84:82:87:82:7f:a8:64:72:97:e9:ca:25:d5:1a:16:09:52:83:
0e:86:d6:0b:a1:af:b1:ca:3b:3c:b2:1c:48:19:5a:8f:d8:76:
be:b1:de:48:8a:cb:85:fe:2a:49:c5:98:66:83:dc:82:3c:cb:
ba:a7:cd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:22:41 2026 by rpki-client