Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402671.roa
File: AS402671.roa (raw, json)
Hash identifier: rxxkMTiiKRcGwMdcfqtLbLbBthnuTPxsJYHg3T+9nqg=
Subject key identifier: 4C:B5:8C:62:BD:26:AC:F0:A5:1C:2A:B0:76:9B:2A:70:53:F9:29:5E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 54685C77AABCC53EBFC570D6C3E2167D044A56F7
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402671.roa
Signing time: Tue 10 Nov 2026 08:50:33 +0000
ROA not before: Tue 10 Nov 2026 08:45:33 +0000
ROA not after: Tue 09 Nov 2027 08:50:33 +0000
asID: 402671
IP address blocks: 178.93.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:68:5c:77:aa:bc:c5:3e:bf:c5:70:d6:c3:e2:16:7d:04:4a:56:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 10 08:45:33 2026 GMT
Not After : Nov 9 08:50:33 2027 GMT
Subject: CN=4CB58C62BD26ACF0A51C2AB0769B2A7053F9295E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f6:14:d3:2a:9b:4e:ec:b3:cf:c7:2b:88:7c:
f8:5f:38:4c:6a:95:b6:c4:74:47:6e:2a:bf:33:9b:
1a:de:d7:09:88:bf:54:47:75:27:47:6d:8e:33:63:
08:5f:a8:81:3c:eb:4c:12:3f:76:6d:7c:38:87:b3:
6b:3f:28:d4:a7:52:04:c8:43:c8:96:b8:af:02:89:
97:37:3b:a5:3b:67:f9:b9:8a:c4:b4:79:50:51:82:
be:cb:69:a5:a1:86:20:d3:b5:a1:12:94:27:60:58:
b6:a2:ab:72:46:f5:f9:97:ab:23:21:27:60:c3:3d:
33:ee:77:7c:c1:c0:f5:5a:0f:4f:0a:b6:a7:91:ac:
7a:ce:ac:40:0c:66:cd:34:57:02:2d:2b:19:e5:e6:
34:4b:45:8f:aa:de:e0:ee:16:9d:78:b8:21:2a:16:
2c:9b:0b:e1:dd:f2:e7:2d:18:4c:45:ae:ed:2f:90:
bb:e9:f8:3a:16:b5:8c:15:89:27:72:99:7a:b6:15:
9e:17:57:96:df:57:3f:2b:f7:37:21:51:be:85:05:
98:8f:d9:f4:70:47:a4:ac:e5:09:04:46:5e:12:b3:
0b:84:e6:19:84:36:a1:0d:cf:24:28:da:d0:99:2c:
ff:b5:e2:5c:bc:d2:cc:01:a3:ae:3d:43:f2:4b:9c:
16:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B5:8C:62:BD:26:AC:F0:A5:1C:2A:B0:76:9B:2A:70:53:F9:29:5E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402671.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.93.221.0/24
Signature Algorithm: sha256WithRSAEncryption
91:96:8d:4f:4d:01:51:bc:8f:f8:2c:a3:c9:43:48:3f:11:72:
d1:28:94:65:f5:f3:15:f6:d5:6f:44:83:24:02:99:17:6b:90:
5f:76:ed:43:30:93:44:2b:d5:4d:15:92:b1:bc:cf:4f:e1:c6:
bd:e7:cb:c5:6c:a6:2f:0e:a5:5f:d8:07:d6:10:7e:58:e7:19:
fe:d5:0a:c0:17:fc:da:d2:b9:e5:42:4d:26:54:fe:b0:de:1e:
7c:30:fc:fa:98:42:fc:c2:5e:7d:07:e7:26:ef:17:6b:27:57:
d4:73:b6:b3:8e:29:68:9e:76:4c:e7:3d:bb:2f:41:3d:1d:0b:
61:c9:86:ff:02:55:f0:74:47:3e:f9:c2:41:00:b9:1e:52:1c:
5e:82:ff:68:d0:d7:47:1b:f2:ba:27:18:89:bb:80:d2:30:34:
3a:b6:a1:fe:72:d5:fa:d1:90:46:b1:ca:2a:db:cb:d6:e4:b5:
33:99:5c:1d:1e:9f:dd:1d:f1:d3:f1:1d:2a:19:2e:0b:08:6b:
40:67:d3:61:f9:da:db:4d:53:38:ac:c2:56:d7:e1:1b:41:1c:
ca:57:8b:bf:ac:42:96:a6:8e:ee:96:3f:d1:35:10:65:2b:74:
9b:bc:74:4b:ae:f2:b9:d4:a4:ac:4a:26:51:62:83:06:03:ad:
1a:be:cd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 15:11:13 2026 by rpki-client