Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401476.roa
File: AS401476.roa (raw, json)
Hash identifier: y0lpYFhXw/uohW7ofFoNBAgAI5pT4WZ94MRmWIUQjHs=
Subject key identifier: E3:D0:CE:A6:ED:FC:88:F8:D6:41:67:26:DF:F3:23:34:70:E5:DE:81
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3DBFADF15DEE334289660C22039A10A1C977D301
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401476.roa
Signing time: Thu 01 Oct 2026 16:49:35 +0000
ROA not before: Thu 01 Oct 2026 16:44:35 +0000
ROA not after: Thu 30 Sep 2027 16:49:35 +0000
asID: 401476
IP address blocks: 92.113.214.0/24 maxlen: 24
95.134.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:bf:ad:f1:5d:ee:33:42:89:66:0c:22:03:9a:10:a1:c9:77:d3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 1 16:44:35 2026 GMT
Not After : Sep 30 16:49:35 2027 GMT
Subject: CN=E3D0CEA6EDFC88F8D6416726DFF3233470E5DE81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:8c:48:d6:75:38:64:4e:2a:14:32:79:26:
b5:17:34:b3:76:0c:49:91:98:c9:e3:f5:f5:7d:bb:
92:8e:3d:dd:aa:72:ab:06:55:cd:bf:61:60:c1:8f:
87:d9:ba:6c:34:66:ef:44:dc:e4:8c:ca:05:5f:1d:
22:00:b0:7c:2d:35:b9:98:df:1e:93:e2:05:fa:22:
42:b2:fc:10:ce:34:b2:57:7c:f3:a1:c3:06:eb:6d:
aa:96:33:cf:6f:93:59:e7:d2:a1:20:c4:12:73:c1:
a8:a9:65:87:b6:2e:af:66:ac:56:15:99:d8:81:7f:
10:61:ee:ae:08:63:e6:5d:03:c7:ef:2c:63:ca:20:
59:cb:d4:c6:f7:f6:ea:84:f2:3a:85:64:02:76:e2:
43:99:70:5d:6f:bc:0f:5b:b4:bb:1a:f6:b6:52:e4:
e2:03:08:ae:7d:9a:ce:b5:b2:c9:cf:1b:f0:64:bf:
cf:a4:54:41:8e:a1:c0:b7:a5:f8:f6:16:67:1f:98:
7e:0d:9b:9f:68:77:70:73:2c:1d:c6:95:09:8f:62:
5d:f5:c3:cc:93:06:2d:5c:9e:09:4d:19:c2:2c:5d:
a0:f1:6f:1d:12:e4:a1:37:bb:9b:77:51:fc:f1:84:
31:39:3f:88:79:59:bd:89:9e:5b:73:21:5e:78:8c:
c3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D0:CE:A6:ED:FC:88:F8:D6:41:67:26:DF:F3:23:34:70:E5:DE:81
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401476.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.214.0/24
95.134.55.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e4:7f:62:dd:3e:24:b9:3e:aa:a6:9f:e4:b3:f1:83:39:02:
bf:46:17:7f:12:a2:8c:eb:c9:fb:d0:ba:8e:60:91:b6:b0:52:
03:b8:25:f3:ba:cb:2d:3d:1f:23:e9:62:a1:8c:14:11:35:6a:
a2:6f:e9:51:ee:88:52:10:bf:8a:72:a5:47:3c:44:07:c9:d1:
b4:71:45:8b:a0:cc:b2:fe:98:f2:7b:d9:d6:0d:fb:66:b8:19:
90:0e:b7:52:5d:85:1b:b5:95:aa:fe:73:0d:b4:da:0b:89:c2:
70:3d:21:66:8f:03:b9:87:a6:94:bd:b7:28:28:b6:e8:65:12:
9f:76:9c:0d:6d:ca:48:8d:74:6c:06:3f:5d:7c:37:ca:4f:d2:
92:3c:38:b3:49:35:32:b8:8f:9e:94:f2:cc:49:4d:02:3a:a3:
8f:69:36:85:07:22:24:77:74:fa:ae:34:4a:48:6f:a7:5f:9f:
09:eb:08:67:bd:cc:6f:01:b4:92:00:2a:27:2a:a1:87:64:e7:
be:4b:3e:44:91:98:7e:0c:62:9c:17:05:30:4d:65:6c:e5:34:
db:c5:27:84:c1:a6:bb:6f:67:9d:7e:ba:b1:f8:6c:26:b4:27:
53:86:09:84:a7:d5:09:63:60:b2:2d:dc:99:e8:8f:fe:58:b6:
74:bd:7b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 08:11:05 2026 by rpki-client