Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS44589.roa
File: AS44589.roa (raw, json)
Hash identifier: 0oCKEeDef64BW89l4cSV+5/i4y2aVoFEK6ryaGJcrU4=
Subject key identifier: 7F:89:CD:3A:74:1D:42:BC:C9:C7:66:A9:4F:65:E3:34:67:7A:15:FC
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1098D22DF7CF223803CD9398A48AA0725677CE6A
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS44589.roa
Signing time: Wed 10 Jun 2026 09:54:04 +0000
ROA not before: Wed 10 Jun 2026 09:49:04 +0000
ROA not after: Wed 09 Jun 2027 09:54:04 +0000
asID: 44589
IP address blocks: 95.134.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:98:d2:2d:f7:cf:22:38:03:cd:93:98:a4:8a:a0:72:56:77:ce:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 10 09:49:04 2026 GMT
Not After : Jun 9 09:54:04 2027 GMT
Subject: CN=7F89CD3A741D42BCC9C766A94F65E334677A15FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cf:32:88:cf:55:19:c1:6f:35:78:31:82:90:
9a:19:25:c5:35:64:f6:54:cd:83:11:f7:fc:a3:be:
7b:11:c2:19:ed:ea:29:f6:e4:6a:77:5b:84:7f:61:
a8:e9:cd:8f:8b:47:6d:a8:a8:89:f3:88:4e:0b:33:
44:e2:ac:db:82:0b:78:e7:9b:1b:ca:89:54:7d:d4:
54:3e:60:2a:53:f6:e3:ae:3f:0b:6a:14:be:35:f3:
81:32:9e:56:71:06:69:a8:2a:66:d1:ff:2d:1e:aa:
1c:a5:00:d7:40:e3:cd:d9:03:52:5f:1f:bd:69:c7:
57:86:c1:5d:14:62:c4:25:a4:fc:54:5e:97:d9:b2:
18:a6:0c:1e:89:2b:9c:8e:42:ce:a0:80:51:d9:16:
20:c9:dd:07:f0:ad:94:e7:0c:a8:16:45:5a:88:53:
48:54:09:21:f2:d0:1a:c4:e2:4a:9e:05:2a:fe:3d:
c0:48:78:80:d1:9d:b0:c7:d7:ba:65:9f:05:9d:5d:
9a:ae:61:73:04:75:8e:5e:dd:04:13:7b:11:55:14:
b9:84:93:04:63:8e:3a:2b:aa:4c:ea:13:b3:81:12:
a0:8b:ad:de:e9:13:9e:8f:9f:3e:c6:5e:3a:36:d7:
79:fa:44:17:13:d3:81:88:7c:21:97:97:ca:4e:a5:
17:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:89:CD:3A:74:1D:42:BC:C9:C7:66:A9:4F:65:E3:34:67:7A:15:FC
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS44589.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.20.0/24
Signature Algorithm: sha256WithRSAEncryption
92:a8:4e:42:c8:ab:79:2c:e3:ca:f8:f6:6a:a4:10:d1:ae:c5:
a6:7b:07:a3:85:ec:83:64:65:77:f3:d2:f6:df:68:3c:4a:62:
f6:72:6b:ea:08:87:03:b9:2b:00:83:ac:fb:e7:d6:60:df:b6:
e4:cb:e7:e5:bc:fe:5f:a7:2e:e1:1c:8e:aa:24:58:37:b2:d3:
30:15:f0:10:c0:d3:7d:ba:1e:aa:0e:73:2e:71:6f:c7:9f:ec:
9f:c3:7e:6d:55:5b:73:66:e3:1b:ac:ec:e5:93:c6:f1:80:55:
26:75:49:03:47:9c:d6:25:bc:77:50:01:7b:3c:41:c4:00:b2:
62:ed:73:08:88:9d:49:36:68:e0:fb:05:bc:30:22:ff:16:a2:
02:73:b9:49:4a:7b:8e:0d:d4:59:55:82:1e:da:4b:57:69:e1:
49:52:40:26:ef:12:28:c2:ae:17:34:a1:e8:d2:35:ac:28:61:
ab:a9:9d:32:29:d7:d4:34:32:79:19:c4:06:28:4d:8e:65:e7:
b5:75:10:70:7b:70:63:1d:ca:2e:89:c4:db:a1:54:3b:f9:29:
80:bb:0e:88:61:95:64:47:8c:be:36:c1:bd:34:5a:f1:36:f5:
b5:47:90:d0:22:5a:3a:1b:97:1e:2a:60:1d:bb:0a:2d:ac:7e:
b6:fe:1a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 09:43:43 2026 by rpki-client