Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401362.roa
File: AS401362.roa (raw, json)
Hash identifier: UMBccL3IqvAWCpXBflZrxHNf+AKe5gql2HAdD4vzhiM=
Subject key identifier: D7:FE:C6:C0:1A:73:AA:0A:BC:B9:7F:B4:C8:FC:1B:C2:B9:E1:0C:D1
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7F5DDBE60A1E4A28D82239417C2C21DC589C2425
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401362.roa
Signing time: Wed 12 Aug 2026 07:42:59 +0000
ROA not before: Wed 12 Aug 2026 07:37:59 +0000
ROA not after: Wed 11 Aug 2027 07:42:59 +0000
asID: 401362
IP address blocks: 92.113.47.0/24 maxlen: 24
178.92.17.0/24 maxlen: 24
178.94.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 15:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:5d:db:e6:0a:1e:4a:28:d8:22:39:41:7c:2c:21:dc:58:9c:24:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 12 07:37:59 2026 GMT
Not After : Aug 11 07:42:59 2027 GMT
Subject: CN=D7FEC6C01A73AA0ABCB97FB4C8FC1BC2B9E10CD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3c:3d:74:62:9f:6d:04:8d:af:07:fe:3a:f6:
1c:61:c0:c6:22:a6:e8:a6:12:0d:a3:86:78:bd:04:
79:4c:c3:9c:2b:86:78:fd:44:1b:49:b2:f2:16:22:
2c:f2:b1:39:2b:6f:59:90:96:00:bb:0b:68:62:3d:
23:4f:e6:ef:5e:3a:32:4f:cf:6f:79:59:d4:cb:b9:
4d:b2:cf:6d:43:be:a5:bd:95:78:11:e2:b0:e4:91:
56:3b:53:3a:7d:fb:9a:00:c3:ac:f3:17:cb:e4:79:
43:df:0d:64:8b:5a:28:c3:a5:0c:bf:8c:7b:17:90:
7c:1c:86:1e:54:14:d4:a9:e5:b7:96:89:2a:d5:5e:
d1:85:af:e6:21:3e:60:78:64:d6:56:b8:87:11:06:
87:31:a8:a6:39:91:25:b6:50:b0:d7:16:60:4d:09:
27:1d:b6:9b:99:81:18:db:e9:a2:ca:26:1b:b7:e1:
9e:9f:a0:1a:cf:8d:57:08:3d:64:c7:62:b2:a4:5f:
1c:6a:ff:cc:7c:3e:f6:85:3e:ba:e6:a5:71:8d:1e:
cb:a5:eb:a9:b5:36:af:91:ec:55:f9:ed:7c:91:d7:
ae:5b:6a:71:6e:a5:cc:d8:87:99:93:03:eb:fb:d0:
a7:af:9e:80:4b:d4:67:53:cf:b0:b3:70:3d:d0:ba:
68:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FE:C6:C0:1A:73:AA:0A:BC:B9:7F:B4:C8:FC:1B:C2:B9:E1:0C:D1
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401362.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.47.0/24
178.92.17.0/24
178.94.172.0/24
Signature Algorithm: sha256WithRSAEncryption
44:cf:ef:79:a2:b2:b4:2f:58:a7:69:17:f9:4a:e0:ed:5c:8a:
fc:d4:b7:23:07:6e:58:04:90:7c:dc:d7:ff:64:ab:72:5e:4f:
df:65:aa:7d:a0:47:f7:04:bb:89:24:81:fa:4f:0d:df:da:43:
34:6d:71:3a:78:7a:b8:aa:51:57:8d:35:09:71:39:bf:a7:40:
a3:e0:4f:63:15:3b:73:f2:70:2b:2f:3f:7b:d0:5d:36:85:0d:
61:65:ba:db:d0:fc:4b:d8:2e:31:4b:f8:d2:29:5f:9e:f4:d8:
3d:6c:53:64:6d:81:39:8d:a3:f1:a6:6a:8a:75:2c:b9:eb:d9:
98:f6:0a:b3:f5:47:b3:02:2f:70:69:e5:44:31:cc:d3:63:45:
26:59:3a:7c:2d:38:e1:43:7b:b8:6e:b8:83:cc:81:54:74:9f:
f6:f8:2f:ea:9c:1e:19:f7:b2:d6:8d:62:3a:bf:46:eb:f5:67:
60:2a:aa:19:63:2a:e6:3b:da:63:c7:ef:37:e0:06:fe:ef:75:
82:d6:13:8f:ee:e1:2f:62:71:78:11:62:2b:af:df:96:13:0b:
00:93:5c:9a:74:c7:38:00:9b:1a:50:7e:77:fa:61:59:9e:2e:
c1:62:ef:22:08:73:2e:88:9d:9c:15:29:99:2d:b2:72:6b:38:
80:81:53:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:29:16 2026 by rpki-client