Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS63793.roa
File: AS63793.roa (raw, json)
Hash identifier: 6nlabB7DviNzUXMI+oJQCmEXkSDLh581yk6W2ZrkYUo=
Subject key identifier: 2D:B1:BE:AD:58:B1:EE:76:E9:65:B5:EC:19:AD:84:4A:5D:62:E2:64
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 773ABF421ACE0DA411D489803985039E77A8F843
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS63793.roa
Signing time: Thu 07 May 2026 14:03:40 +0000
ROA not before: Thu 07 May 2026 13:58:40 +0000
ROA not after: Thu 06 May 2027 14:03:40 +0000
asID: 63793
IP address blocks: 95.134.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:3a:bf:42:1a:ce:0d:a4:11:d4:89:80:39:85:03:9e:77:a8:f8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 7 13:58:40 2026 GMT
Not After : May 6 14:03:40 2027 GMT
Subject: CN=2DB1BEAD58B1EE76E965B5EC19AD844A5D62E264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e9:1d:6e:93:97:eb:d5:c8:7d:41:90:ee:90:
68:19:9c:02:d0:ea:42:4a:79:6a:8d:4f:30:52:e0:
c5:dd:17:88:20:1d:5b:d6:b5:c6:13:7b:ce:75:3c:
19:25:88:30:74:39:6c:46:1b:7b:ca:34:75:8e:4e:
bf:f6:1f:3f:48:69:65:80:bb:db:88:11:47:a5:b6:
6b:7e:c8:a2:5f:a5:dd:a9:e2:a8:72:82:e0:8b:f1:
af:0f:48:a5:81:60:47:d1:b8:e4:51:6b:77:aa:82:
60:6f:05:6d:21:07:40:63:c2:18:6d:8a:fa:c0:fe:
cf:b7:4e:63:8f:4c:45:fa:b2:4e:87:fb:e2:cf:36:
d5:eb:62:5c:bd:49:77:94:cc:a6:9c:db:ad:46:51:
17:99:a2:17:4f:c1:0d:b0:d5:1a:44:53:34:21:88:
6c:f8:7f:03:97:01:51:e9:1d:8f:4f:f4:a6:b1:29:
0c:43:79:2d:56:d5:cc:58:ac:1a:55:a1:c0:54:9e:
e4:05:af:e3:c2:ba:46:11:89:83:63:2c:10:42:f3:
11:ab:8e:7d:81:8c:d2:79:6c:ec:8a:d3:c9:93:e7:
c3:00:f9:09:eb:ec:91:16:81:92:24:46:ce:30:13:
b7:44:3f:16:81:9e:61:70:dd:2a:7c:26:92:87:d7:
40:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B1:BE:AD:58:B1:EE:76:E9:65:B5:EC:19:AD:84:4A:5D:62:E2:64
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS63793.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.53.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:86:31:e4:23:94:91:e2:66:86:11:36:c5:4b:a0:9f:35:92:
f2:9e:da:ab:c8:c2:fb:fe:e1:d8:4a:8a:95:ef:a6:86:31:56:
d8:60:3e:5d:c2:77:d4:34:31:22:92:30:43:c1:83:8a:53:61:
33:c1:90:ab:b5:dd:4b:24:f4:2a:4e:29:9f:f3:60:cb:db:db:
82:9f:30:d4:0b:c6:97:61:5a:06:d4:38:eb:0a:3c:1c:58:ad:
bb:cf:20:91:39:bf:c2:6b:a6:af:38:68:c2:fa:5d:98:74:35:
cb:03:4a:e2:e9:3a:62:fd:72:04:7f:73:73:95:19:00:38:39:
94:8a:d5:27:7f:26:aa:90:06:c4:86:c4:38:d4:31:96:34:f5:
95:f4:28:4a:02:8f:de:e5:01:8d:c7:4b:ee:08:2c:d4:7e:2e:
c8:10:e2:32:f7:ef:71:f1:b5:33:b0:05:0e:39:d9:5b:c5:8e:
68:11:a7:cb:80:c7:8f:fe:44:f7:29:83:25:45:b3:78:bc:12:
97:65:e1:03:63:49:7d:71:9b:77:c4:60:e4:f4:6d:18:d2:f3:
02:27:7f:5a:1b:92:15:b7:b9:22:e6:17:39:00:60:72:11:f9:
cf:4b:cc:96:41:f4:23:f6:2c:ac:1b:a9:51:96:cf:9e:2c:b4:
ee:48:9b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 13:57:17 2026 by rpki-client