Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS400342.roa
File: AS400342.roa (raw, json)
Hash identifier: J3W6EhhvtriDM+vgExlrD6h3y5b/y0dLR82KwRWpchs=
Subject key identifier: 68:35:20:FE:FC:65:C5:59:A0:59:E4:F4:38:AA:9B:45:69:7D:67:A5
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2B199F02C90CC46D80DA049473803B3A4F8F0E2E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS400342.roa
Signing time: Wed 24 Sep 2025 10:36:20 +0000
ROA not before: Wed 24 Sep 2025 10:31:20 +0000
ROA not after: Wed 23 Sep 2026 10:36:20 +0000
asID: 400342
IP address blocks: 178.92.101.0/24 maxlen: 24
178.95.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Oct 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:19:9f:02:c9:0c:c4:6d:80:da:04:94:73:80:3b:3a:4f:8f:0e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 24 10:31:20 2025 GMT
Not After : Sep 23 10:36:20 2026 GMT
Subject: CN=683520FEFC65C559A059E4F438AA9B45697D67A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:27:1b:bd:cc:cc:11:37:ef:31:1d:be:48:
94:f7:57:3e:e3:3d:c5:66:9d:84:81:2f:25:d3:e4:
03:55:9d:be:c2:a1:a0:d2:2e:05:d6:03:57:e1:de:
8d:3d:5a:9e:b8:84:bf:7f:8d:f3:9f:4b:c0:a6:88:
b3:43:45:82:0b:4a:dd:16:47:56:c3:0b:d9:e3:6f:
ff:cb:be:d2:70:c6:82:d9:c7:e9:0c:5f:8b:42:6f:
db:45:c7:c1:3f:73:ff:ff:fa:f1:79:1e:be:06:74:
00:7c:d6:24:2b:89:5f:68:4a:cf:94:05:27:c7:27:
d8:f3:dd:e6:b9:f1:08:04:9a:45:2e:b2:bf:bb:e3:
0c:d8:c4:46:5b:c2:04:1c:1a:69:c3:af:73:69:fb:
bd:b7:a8:4d:43:2d:8a:ab:5f:97:a4:6a:73:f3:b4:
fc:34:ae:6f:97:88:0a:93:b6:d2:5e:88:cf:1e:7e:
b3:69:82:1f:38:d7:87:a7:af:70:f9:ce:f7:21:13:
9b:b2:e0:bc:68:7d:f7:a1:d0:36:5f:d8:a9:b9:9e:
f0:7b:15:7b:3f:43:2b:c5:85:c1:e0:b2:cb:4d:72:
9a:f7:62:1d:56:85:c9:b7:05:ea:bc:6f:9f:13:77:
ec:fc:10:87:5a:3f:bd:24:6a:fd:05:c3:39:18:8a:
20:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:35:20:FE:FC:65:C5:59:A0:59:E4:F4:38:AA:9B:45:69:7D:67:A5
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS400342.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.101.0/24
178.95.166.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:b8:bc:05:3e:09:e1:f1:d8:3f:26:50:bd:41:da:09:61:3c:
17:5b:47:56:37:e7:45:8d:67:8a:06:4c:e3:c6:c3:9a:f8:2c:
22:e9:5f:18:bd:20:2d:5f:4d:6a:14:57:a8:49:45:72:d5:94:
ac:36:92:25:77:f2:09:53:9b:4e:54:15:de:e3:e6:de:36:26:
20:15:83:62:af:ff:fd:39:00:0b:49:7e:17:a1:da:88:71:7c:
7e:77:98:7e:fc:31:b0:40:9e:9b:5d:f5:21:26:2f:fb:42:d6:
cd:3e:21:6b:07:be:45:ee:cf:4d:9b:75:c3:18:21:a5:4c:95:
0e:5d:38:e5:c8:de:6a:f3:bc:2d:01:79:19:17:eb:0d:c0:ad:
cd:50:c2:37:55:71:7a:8b:ce:a3:27:49:bc:34:a9:48:81:e7:
4d:9b:86:1a:71:3d:da:62:af:77:cf:0b:4c:b0:f8:fa:5d:ab:
a7:cf:aa:99:fe:f9:b1:2a:a4:f3:ef:8c:41:e7:b8:a7:84:76:
b2:9b:9e:3a:5e:7e:93:0d:9c:96:69:c2:33:5e:2c:96:0d:f3:
bf:a9:7b:ca:51:cf:53:e1:23:ac:3e:94:15:a2:51:97:7b:1b:
67:e2:eb:59:ed:20:20:3d:20:21:44:05:c9:1f:14:e7:dd:b8:
27:c3:5d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 21:31:15 2025 by rpki-client