Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS4593.roa
File: AS4593.roa (raw, json)
Hash identifier: DxQhKV2El15C4KC4Ox3MHEwqLiBMpMbznCHSvECRFsk=
Subject key identifier: 52:01:F0:CD:E5:A0:AE:A9:F3:A9:13:24:64:D3:6F:51:5F:BA:E3:9C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 356750B8AB0165A6A4B846F5716E625CE42EE412
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS4593.roa
Signing time: Thu 09 Apr 2026 08:20:33 +0000
ROA not before: Thu 09 Apr 2026 08:15:33 +0000
ROA not after: Thu 08 Apr 2027 08:20:33 +0000
asID: 4593
IP address blocks: 95.134.103.0/24 maxlen: 24
95.134.106.0/24 maxlen: 24
95.134.108.0/24 maxlen: 24
95.134.110.0/24 maxlen: 24
95.134.124.0/24 maxlen: 24
178.92.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Apr 2026 08:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:67:50:b8:ab:01:65:a6:a4:b8:46:f5:71:6e:62:5c:e4:2e:e4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 9 08:15:33 2026 GMT
Not After : Apr 8 08:20:33 2027 GMT
Subject: CN=5201F0CDE5A0AEA9F3A9132464D36F515FBAE39C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ca:d5:3c:f3:cb:41:2b:f3:39:cc:eb:6b:fd:
24:80:02:b3:4c:81:46:11:6f:6e:9e:75:28:4b:c7:
b5:d2:7b:e5:58:0f:9d:54:8d:8f:30:54:6b:ce:7c:
7e:e0:21:43:6c:6d:02:77:de:70:e4:da:2b:10:f7:
e1:24:18:2d:2f:0d:0a:bd:20:19:28:59:17:6c:76:
6e:a7:cc:62:9c:75:d8:be:ad:55:3c:e9:91:e0:75:
7f:22:ad:f0:c6:db:84:61:ab:a5:3f:74:23:3d:a0:
14:88:b0:de:c4:7e:35:ac:d0:2b:8b:6b:a1:34:6a:
96:01:cf:c9:4f:e9:69:44:8a:c4:ae:ab:96:56:af:
35:0f:37:7f:7c:35:e9:b3:b7:df:33:b2:4d:2e:de:
fa:78:95:71:8c:f0:99:43:47:90:b7:6f:f3:26:96:
cb:08:46:39:61:85:86:d6:b9:c9:c5:d8:0b:5b:11:
50:72:3c:8e:b5:57:fa:76:36:e6:a8:28:c5:38:63:
a7:7a:d2:84:52:04:ef:71:0a:7f:4c:13:b4:7e:fa:
06:96:c1:15:eb:11:a5:19:2e:63:0b:d0:4d:c5:5f:
fe:43:ca:65:00:85:2d:ed:0b:df:5b:b6:7f:83:05:
a5:3f:e9:53:76:60:85:ef:b8:c7:a2:4f:35:26:b7:
ea:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:01:F0:CD:E5:A0:AE:A9:F3:A9:13:24:64:D3:6F:51:5F:BA:E3:9C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS4593.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.103.0/24
95.134.106.0/24
95.134.108.0/24
95.134.110.0/24
95.134.124.0/24
178.92.144.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:99:ff:e4:a6:c3:3d:09:7d:4b:01:fb:9a:51:9d:83:07:2f:
ef:04:cf:5c:96:ca:e3:e6:64:01:43:51:ed:c1:59:76:b8:df:
23:b9:46:aa:0e:7c:5a:1e:f8:de:66:c2:91:49:fa:5c:11:30:
15:06:51:bf:2d:2f:06:08:4d:c3:09:2c:aa:ab:5d:84:27:75:
ef:02:1e:d6:5c:3a:82:74:eb:24:5c:f5:20:9b:8b:a0:50:a5:
77:9a:73:4f:38:58:de:48:b1:0c:0c:a7:65:1f:6b:dc:c8:ac:
e6:6b:52:b5:ce:dc:1c:f3:8f:cd:c3:26:05:fb:7c:e9:d1:3e:
5a:1e:b3:18:ba:27:ec:cc:fc:23:3a:5e:9f:85:eb:fd:8a:5e:
79:44:c5:0e:1f:b4:4a:64:4b:03:5f:f2:8f:ec:48:49:f4:f9:
b4:39:5e:10:2d:94:f6:98:db:79:da:4e:75:2b:61:0a:9f:be:
de:7f:b3:a2:b3:bf:ae:9d:12:d1:38:7a:08:13:b9:be:12:32:
c2:06:ab:81:45:6e:84:23:c8:36:c0:8b:68:a3:7b:9d:0b:c6:
52:15:2e:96:bf:93:1f:68:ad:e8:69:06:2f:e5:b0:fb:e9:2d:
9e:05:8c:92:0f:be:f9:5c:4b:71:54:d3:5c:d3:c9:f8:ca:13:
c0:b9:2c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 19:00:21 2026 by rpki-client