Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401190.roa
File: AS401190.roa (raw, json)
Hash identifier: UtMjbztd5yytO89HfyDOCkcS8109UYme17S8LNaLaXI=
Subject key identifier: 87:A2:9F:E0:9E:63:83:9A:19:3F:8C:B4:F2:4D:20:BA:62:10:8F:4D
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 11FCA25AEA4D37D0B179445E5D3B72C0FE5FEB7C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401190.roa
Signing time: Fri 12 Sep 2025 11:59:56 +0000
ROA not before: Fri 12 Sep 2025 11:54:56 +0000
ROA not after: Fri 11 Sep 2026 11:59:56 +0000
asID: 401190
IP address blocks: 91.124.26.0/23 maxlen: 24
91.124.28.0/23 maxlen: 24
178.95.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:fc:a2:5a:ea:4d:37:d0:b1:79:44:5e:5d:3b:72:c0:fe:5f:eb:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 12 11:54:56 2025 GMT
Not After : Sep 11 11:59:56 2026 GMT
Subject: CN=87A29FE09E63839A193F8CB4F24D20BA62108F4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d0:d9:94:0d:19:2f:a9:09:ff:2d:65:f4:4f:
1f:7d:3e:f0:ac:48:54:49:4d:f0:20:f3:5e:b8:96:
3e:da:2e:fc:c3:f2:53:f6:33:9a:6b:36:f6:40:f1:
a3:01:6c:96:c7:34:a6:61:b5:a8:ae:dc:82:a9:4d:
4f:6f:f9:bb:77:13:87:52:f4:32:3f:af:cd:83:11:
01:45:75:51:a7:d6:08:df:82:08:b0:ba:d6:54:f5:
2c:4e:52:d8:10:4c:b4:b8:39:41:0a:fe:70:a8:81:
9f:26:9c:5b:1e:e3:7b:be:3b:f1:ff:c4:ae:17:3e:
bf:05:1f:3a:de:3e:36:c8:e9:eb:83:f6:32:c1:fa:
c6:ac:4d:7e:8e:68:7c:95:ff:51:f4:58:c8:7f:4b:
92:48:da:3d:cd:7f:81:0e:b1:38:8b:75:c7:55:3c:
2a:94:f0:60:2a:92:d3:fb:05:26:05:01:c5:d3:2a:
20:5d:8e:5e:3b:28:f6:06:3e:e0:a6:82:24:5b:1c:
c6:37:95:24:b0:60:da:7e:b1:28:ca:99:32:66:2d:
0e:f2:5c:e3:96:37:96:c4:51:5e:6c:79:e7:2c:05:
59:d7:0b:d6:dc:5b:57:06:59:4d:e4:1a:65:cb:ed:
d9:40:1e:34:7b:79:6e:6e:eb:89:52:da:01:93:df:
5b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A2:9F:E0:9E:63:83:9A:19:3F:8C:B4:F2:4D:20:BA:62:10:8F:4D
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401190.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.26.0-91.124.29.255
178.95.202.0/23
Signature Algorithm: sha256WithRSAEncryption
24:52:b4:a9:45:c0:33:c7:89:de:2c:be:47:02:3c:b3:65:d0:
c5:c7:5e:56:a0:09:37:aa:f4:91:8c:1d:b6:92:05:c2:e5:3e:
82:08:09:11:fb:2c:ce:5a:3f:aa:f2:c4:a9:8b:e5:a8:c3:ea:
53:32:30:e9:1d:9a:59:97:82:99:3e:6b:c6:2b:e3:2b:ef:a1:
a8:4e:b3:da:67:6c:26:43:72:9f:2d:24:41:a0:d5:5e:50:01:
8f:47:73:72:89:dd:2a:90:8e:16:a1:06:7c:1d:7a:6e:88:f4:
69:94:a1:c3:70:d7:b0:61:e0:8c:a1:1f:db:ef:1a:b7:43:13:
25:88:57:ff:3b:5d:67:52:bf:65:13:61:cf:6a:14:57:0f:21:
a3:a8:1f:3a:87:e4:84:b9:a6:76:23:53:6a:2b:45:2b:c5:a5:
34:3a:4f:f6:ad:c8:e7:fe:a1:84:5c:51:6a:33:70:78:39:db:
6b:e0:e3:2b:13:8d:33:23:ac:21:2d:f6:52:c1:0a:af:41:62:
ad:36:c5:c1:e8:36:15:9b:5b:fe:98:7d:b2:61:b2:ae:a5:63:
68:0e:0e:b5:66:b0:69:2b:f5:f2:01:0e:37:be:00:a3:0b:70:
2e:23:2c:4b:3b:cb:d1:eb:58:5d:6e:2d:47:26:56:28:c7:66:
cc:f1:f8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 20:32:25 2025 by rpki-client