Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS400342.roa
File: AS400342.roa (raw, json)
Hash identifier: Nh6gNitiS3lmnHdWWGMbFJxB2QPLq6uizlOZf3vOvW8=
Subject key identifier: 55:DE:05:8F:AF:3A:CC:49:17:7A:73:E5:ED:02:13:0D:4E:1A:1F:ED
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0252BABF739C25752A71E8F0C654FDB808B5CBB7
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS400342.roa
Signing time: Sat 16 Aug 2025 14:14:52 +0000
ROA not before: Sat 16 Aug 2025 14:09:52 +0000
ROA not after: Sat 15 Aug 2026 14:14:52 +0000
asID: 400342
IP address blocks: 178.92.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 16:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:52:ba:bf:73:9c:25:75:2a:71:e8:f0:c6:54:fd:b8:08:b5:cb:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 16 14:09:52 2025 GMT
Not After : Aug 15 14:14:52 2026 GMT
Subject: CN=55DE058FAF3ACC49177A73E5ED02130D4E1A1FED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c3:11:0f:68:0f:6f:2e:4b:50:bb:c3:22:02:
28:e5:a5:1d:dd:7b:06:37:82:74:c2:c2:1c:13:67:
87:bf:62:67:e9:52:9e:39:83:c2:0d:2d:60:8d:ce:
5d:7c:3d:e3:ae:83:e2:b9:59:3a:44:3f:e7:6c:fb:
d2:54:fd:56:0d:d8:25:05:9c:a9:3a:7b:63:bc:34:
c5:27:9c:b0:a8:72:b8:bf:de:f0:01:05:b2:e1:7e:
84:94:8c:8f:f4:31:34:ea:0b:2a:23:39:19:34:6b:
12:8d:a0:18:a6:ab:b5:68:45:10:94:27:8e:8f:ba:
38:ae:28:c9:46:fc:a1:2b:af:3d:97:8a:77:39:1d:
30:21:1c:e2:e2:a9:f7:d9:fb:52:8c:f3:5a:a2:eb:
de:e2:35:1b:85:39:88:98:0d:3c:06:1e:d1:d2:8d:
79:14:56:5b:db:1b:3e:19:2f:0c:5a:dd:47:5e:bf:
5d:3b:b0:aa:bc:f1:7a:08:20:7d:db:e2:e6:b9:6f:
9a:67:2b:36:14:a5:b6:27:34:a8:c5:3e:ae:a3:9c:
c2:82:59:e5:9a:0e:6d:9f:4c:b7:db:67:63:96:75:
b5:89:f5:b3:72:80:b7:bd:50:63:86:65:83:99:5c:
a4:5e:72:b6:8d:0a:d2:97:48:51:30:75:7c:e4:1d:
c7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DE:05:8F:AF:3A:CC:49:17:7A:73:E5:ED:02:13:0D:4E:1A:1F:ED
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS400342.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.101.0/24
Signature Algorithm: sha256WithRSAEncryption
07:24:8b:b2:58:93:ea:9a:6d:0e:dc:67:ae:0b:ff:51:74:15:
9f:6e:8b:ad:f3:8c:cf:e6:2f:5f:43:c5:32:30:54:2c:ab:64:
44:ba:b4:64:a8:01:be:cf:9a:06:73:d8:dc:ac:19:d1:39:d2:
04:3c:3e:22:be:51:51:b8:6a:15:d3:be:5c:8c:02:62:9a:8d:
1d:3a:f4:aa:1d:01:d4:aa:52:b8:eb:62:5f:db:68:11:7b:4b:
2a:47:31:25:32:d0:34:84:46:b2:b3:46:b9:c1:ee:eb:75:b9:
77:53:b1:da:53:80:41:bf:6f:2a:e8:41:0e:9d:d9:ea:ef:b7:
ae:7e:80:cd:3b:18:35:49:1e:8b:b7:fd:d1:a3:ef:2f:e8:53:
cc:36:27:aa:a3:54:71:06:b7:d4:67:e1:70:4a:5b:00:a0:37:
cb:e3:51:e6:21:59:d3:c9:4a:6a:ad:f5:c8:29:c3:f8:21:29:
79:de:98:0d:2c:eb:29:e6:ff:4b:96:fa:cf:ba:f4:02:45:72:
d7:49:39:d7:16:2c:01:8f:25:cc:14:2c:9f:4a:d4:75:78:10:
ad:b6:73:a1:78:13:30:f4:00:f9:96:8b:d0:3d:61:ce:2a:c7:
ec:bb:f7:8d:a6:f5:2d:f5:56:01:74:ca:6b:85:b1:db:6f:75:
5b:88:78:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 06:05:20 2025 by rpki-client