Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401776.roa
File: AS401776.roa (raw, json)
Hash identifier: UTymRM90vPmHn34T1ChYGHE100bGii8gFeeJjurprAw=
Subject key identifier: 00:48:AF:90:62:7E:E4:E3:99:31:BE:DC:BC:B3:10:3C:14:99:99:F6
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 420526FC938992BCF1EBEE73C9403864BA99C3D2
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401776.roa
Signing time: Mon 28 Sep 2026 08:35:03 +0000
ROA not before: Mon 28 Sep 2026 08:30:03 +0000
ROA not after: Mon 27 Sep 2027 08:35:03 +0000
asID: 401776
IP address blocks: 178.94.200.0/24 maxlen: 24
178.94.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:05:26:fc:93:89:92:bc:f1:eb:ee:73:c9:40:38:64:ba:99:c3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 28 08:30:03 2026 GMT
Not After : Sep 27 08:35:03 2027 GMT
Subject: CN=0048AF90627EE4E39931BEDCBCB3103C149999F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:56:fb:b5:b5:2e:b0:b9:fb:a9:97:07:7a:
88:c0:4d:77:56:aa:27:ef:67:cc:f1:31:14:a4:69:
3b:de:c8:f9:9f:ff:31:f6:6f:97:cf:c4:4f:40:43:
23:11:f0:77:c7:f5:f2:8c:58:7f:2c:16:b3:52:cc:
8f:97:59:42:bc:3b:4e:fa:cd:5b:03:6c:3a:2a:48:
01:3e:97:8c:25:a4:d5:1b:89:61:e1:45:be:a3:82:
c0:dd:a7:d4:45:3a:f1:e9:89:65:3e:40:ba:05:58:
13:88:a5:fb:fc:11:d9:7c:3c:50:84:5a:01:82:e7:
44:ce:9c:6b:66:a6:42:5a:f1:25:82:b6:2e:e0:72:
62:80:34:77:14:dc:5e:06:f8:80:65:13:b1:ca:af:
93:89:45:36:e4:71:09:b1:b3:ae:f0:40:4d:e3:d6:
6a:c7:e0:31:ec:a9:6a:3b:44:eb:fb:bb:0d:21:d5:
23:ee:d2:5f:ac:04:e6:6e:05:35:e4:e2:d8:fa:4e:
55:36:42:18:80:55:ae:5c:70:6e:3a:ce:39:3c:61:
79:d0:40:e9:1b:83:49:02:21:34:f2:a3:b3:c4:ce:
1d:f2:45:54:50:90:26:ef:df:35:6f:5f:0e:0b:fa:
a0:09:ba:ed:42:bc:ee:8e:a7:fa:ed:a5:94:79:f0:
a7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:48:AF:90:62:7E:E4:E3:99:31:BE:DC:BC:B3:10:3C:14:99:99:F6
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.94.200.0/24
178.94.205.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:3e:58:f7:9a:dc:68:c3:a9:d2:d5:85:52:e5:de:39:64:93:
9b:13:68:1f:24:00:6a:ec:db:0a:b8:d6:94:d1:23:0d:81:9c:
e4:7e:19:56:e5:e2:7b:fc:36:3a:1f:ad:40:11:ea:70:60:99:
83:d3:66:0e:4e:f6:43:5b:a8:f2:58:17:e1:d4:e5:10:b9:d2:
39:87:60:90:b7:50:be:5e:e9:3c:17:44:a2:42:11:a3:b7:00:
12:2f:c9:7a:84:b1:aa:a8:b7:73:89:2e:65:cd:ff:55:83:e1:
79:1e:7a:6f:34:6e:2a:0e:d4:30:20:1c:41:92:ab:3d:3f:2a:
14:71:b2:02:d0:20:46:ed:33:e9:5a:1d:ce:18:b5:1b:87:36:
bb:72:80:7f:fd:b3:2a:17:f1:d9:e4:7f:da:77:ca:4e:b6:a6:
c2:ff:80:df:a6:9a:e5:a3:ed:92:a8:af:95:b0:01:4a:70:8a:
5e:b1:a1:20:d0:b5:4d:12:74:c9:41:44:91:96:8a:ea:44:2b:
c5:c7:e2:33:c3:80:96:7c:eb:c6:4a:b9:80:6f:91:13:bc:c3:
38:76:05:95:b9:e2:86:7b:ff:46:37:29:36:96:24:77:a9:48:
d0:8a:ee:56:ff:ea:85:20:86:66:7b:86:2f:39:5d:7b:52:8d:
87:4f:ea:3d
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUQgUm/JOJkrzx6+5zyUA4ZLqZw9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA5MjgwODMwMDNaFw0yNzA5MjcwODM1MDNaMDMxMTAvBgNV
BAMTKDAwNDhBRjkwNjI3RUU0RTM5OTMxQkVEQ0JDQjMxMDNDMTQ5OTk5RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqGlb7tbUusLn7qZcHeojATXdW
qifvZ8zxMRSkaTveyPmf/zH2b5fPxE9AQyMR8HfH9fKMWH8sFrNSzI+XWUK8O076
zVsDbDoqSAE+l4wlpNUbiWHhRb6jgsDdp9RFOvHpiWU+QLoFWBOIpfv8Edl8PFCE
WgGC50TOnGtmpkJa8SWCti7gcmKANHcU3F4G+IBlE7HKr5OJRTbkcQmxs67wQE3j
1mrH4DHsqWo7ROv7uw0h1SPu0l+sBOZuBTXk4tj6TlU2QhiAVa5ccG46zjk8YXnQ
QOkbg0kCITTyo7PEzh3yRVRQkCbv3zVvXw4L+qAJuu1CvO6Op/rtpZR58Kd5AgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUAEivkGJ+5OOZMb7cvLMQPBSZmfYwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNDAxNzc2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsl7I
AwQAsl7NMA0GCSqGSIb3DQEBCwUAA4IBAQCqPlj3mtxow6nS1YVS5d45ZJObE2gf
JABq7NsKuNaU0SMNgZzkfhlW5eJ7/DY6H61AEepwYJmD02YOTvZDW6jyWBfh1OUQ
udI5h2CQt1C+Xuk8F0SiQhGjtwASL8l6hLGqqLdziS5lzf9Vg+F5HnpvNG4qDtQw
IBxBkqs9PyoUcbIC0CBG7TPpWh3OGLUbhza7coB//bMqF/HZ5H/ad8pOtqbC/4Df
pprlo+2SqK+VsAFKcIpesaEg0LVNEnTJQUSRlorqRCvFx+Izw4CWfOvGSrmAb5ET
vMM4dgWVueKGe/9GNyk2liR3qUjQiu5W/+qFIIZme4YvOV17Uo2HT+o9
-----END CERTIFICATE-----
Generated at Fri Oct 2 16:22:49 2026 by rpki-client