Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402866.roa
File: AS402866.roa (raw, json)
Hash identifier: kLSLHJl2peSTHRlKmI1pbFXDpSo/khzxJdnbWCUx2FQ=
Subject key identifier: 78:10:47:3A:55:39:AE:C7:72:B0:97:6E:0D:4E:32:9E:8B:CF:D6:25
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 04097518F9BF02411D583EDF96972BC8913B242B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402866.roa
Signing time: Fri 18 Sep 2026 18:50:16 +0000
ROA not before: Fri 18 Sep 2026 18:45:16 +0000
ROA not after: Fri 17 Sep 2027 18:50:16 +0000
asID: 402866
IP address blocks: 95.135.165.0/24 maxlen: 24
178.95.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:09:75:18:f9:bf:02:41:1d:58:3e:df:96:97:2b:c8:91:3b:24:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 18 18:45:16 2026 GMT
Not After : Sep 17 18:50:16 2027 GMT
Subject: CN=7810473A5539AEC772B0976E0D4E329E8BCFD625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:36:c0:87:a8:fe:a0:54:ab:2d:fc:a0:f4:
3f:9d:56:bd:88:69:7a:68:cf:4c:1d:43:51:6e:f9:
af:28:51:f6:cf:5d:1e:35:e9:8d:19:b2:63:b0:d8:
49:8c:3f:09:86:7d:06:57:96:99:bb:81:37:20:cc:
79:a9:8a:51:d6:07:3d:74:b5:95:59:90:34:c3:62:
01:ac:b8:1b:78:5f:ad:22:12:88:b3:fc:77:a9:77:
aa:b9:f0:65:ff:eb:13:4b:67:9b:18:48:45:62:de:
c9:66:66:24:ed:18:dd:f5:68:1a:d2:79:81:82:84:
09:6f:30:96:5b:14:bf:bf:21:63:3c:f2:63:d0:50:
b4:53:fa:5f:a7:13:0b:83:97:3a:4e:47:37:cc:e6:
b9:a7:36:05:32:47:75:6e:f6:73:fa:9d:b6:a9:c5:
b2:f6:8d:1e:c8:5e:8c:80:8b:d8:f5:94:2e:5e:6b:
f1:32:d6:c8:5c:ae:f8:2f:93:e0:36:79:a3:08:dd:
d3:68:63:70:d6:ab:0d:b1:12:cc:35:6e:e1:c3:c3:
11:ae:3c:49:f2:07:db:e4:ab:c2:6d:6e:32:19:fd:
b1:f3:e9:3d:39:07:04:1f:bf:22:67:a0:84:94:c6:
f3:1f:1b:c1:32:e0:69:18:5f:83:e1:be:56:b1:eb:
40:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:10:47:3A:55:39:AE:C7:72:B0:97:6E:0D:4E:32:9E:8B:CF:D6:25
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402866.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.165.0/24
178.95.194.0/24
Signature Algorithm: sha256WithRSAEncryption
36:00:7e:db:a9:8b:ad:89:30:bc:df:4f:3a:4b:0d:6c:cd:d6:
d7:fd:ff:ce:c1:94:6b:e6:87:e4:52:2b:b7:37:8f:04:53:d9:
64:02:70:dc:59:7d:09:fd:28:ef:97:2d:0a:5b:cd:6b:6d:08:
6e:bc:c0:13:fd:cd:47:5f:b9:5a:bc:a6:7d:f3:00:e7:ac:d4:
30:fc:03:37:e0:47:a2:f9:60:c5:e2:ba:12:4f:66:3e:89:d0:
00:ce:06:3f:51:e1:58:72:da:c5:ec:fb:4c:7a:ab:80:af:92:
82:45:72:c6:0a:c6:bb:25:71:79:3c:a2:77:ec:74:f7:ac:75:
1f:37:42:72:19:01:95:87:69:e4:58:fc:0c:01:a4:d1:5c:c4:
2c:46:fe:01:6b:1a:ae:56:c1:27:b9:26:bb:2e:db:f6:94:4a:
2f:e2:c0:e6:62:52:93:27:bf:e6:50:ca:f3:2f:fd:ea:d3:6f:
0a:80:5e:ef:f4:e6:3b:8a:0f:3b:6f:a2:be:39:d0:1d:f1:66:
e7:9d:4c:aa:8a:ec:94:2f:6c:35:78:12:ae:a8:e2:6b:eb:60:
fc:cd:c3:76:3e:9c:72:51:ca:22:12:79:83:5a:bd:be:c9:78:
ae:a7:8f:de:00:9e:fe:44:be:70:63:11:a7:f4:03:e9:7d:5f:
7d:d4:f6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:55:57 2026 by rpki-client