Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS984.roa
File: AS984.roa (raw, json)
Hash identifier: ZjGXXBP7a4Eo6BonyB6tHA8+KTXQ8gpKc82aZjsOp78=
Subject key identifier: F7:FC:0E:2D:D5:7F:53:6B:E4:12:42:B7:B0:CD:4E:D5:E5:26:A3:05
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 56A6170A63A8399BB257BBE3B91620D9AEC4E21C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS984.roa
Signing time: Wed 15 Oct 2025 21:56:22 +0000
ROA not before: Wed 15 Oct 2025 21:51:22 +0000
ROA not after: Wed 14 Oct 2026 21:56:22 +0000
asID: 984
IP address blocks: 95.134.61.0/24 maxlen: 24
95.134.112.0/24 maxlen: 24
95.134.129.0/24 maxlen: 24
178.92.199.0/24 maxlen: 24
178.92.207.0/24 maxlen: 24
178.95.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Oct 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:a6:17:0a:63:a8:39:9b:b2:57:bb:e3:b9:16:20:d9:ae:c4:e2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 15 21:51:22 2025 GMT
Not After : Oct 14 21:56:22 2026 GMT
Subject: CN=F7FC0E2DD57F536BE41242B7B0CD4ED5E526A305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ab:a0:52:18:69:d1:04:64:38:e0:22:b5:d4:
a8:2a:13:83:88:5f:49:94:b4:71:1b:41:54:4a:26:
47:9c:90:e1:e4:50:53:43:ed:f6:f2:c8:56:fa:c9:
68:b6:92:7a:a0:b8:ff:94:c4:81:8a:d6:3b:c6:17:
59:e5:f4:f8:08:ed:b2:96:5b:d8:14:90:f5:1e:3b:
e0:60:27:2a:a7:38:03:12:ba:e3:bb:17:78:7b:a1:
f9:0c:76:25:89:35:6a:5a:61:ca:91:ac:24:dd:99:
c9:8a:52:36:71:86:11:93:51:56:31:6b:5f:a7:f0:
52:8f:c0:3f:58:06:62:a2:6e:a7:62:f2:fd:7c:e6:
75:c9:85:9a:86:73:da:7c:c3:ab:b1:92:dc:88:41:
6c:d5:03:c5:ba:a8:89:2d:2a:e0:3a:62:78:3c:40:
c1:c8:eb:4d:1e:c7:17:b1:c1:d0:68:f0:e3:db:9a:
87:84:b2:82:f0:17:0c:fe:25:9f:dd:65:bb:2e:33:
f9:b5:27:08:5f:26:a2:c7:07:bc:8b:e0:7b:ad:50:
a6:a3:94:a8:9e:b3:19:ea:89:7c:a4:d4:53:62:be:
93:8f:95:7c:9e:31:9f:0f:1c:6c:6c:c2:21:80:ef:
87:7a:b1:de:31:67:8d:d2:eb:22:36:ed:10:29:1e:
4d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FC:0E:2D:D5:7F:53:6B:E4:12:42:B7:B0:CD:4E:D5:E5:26:A3:05
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS984.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.61.0/24
95.134.112.0/24
95.134.129.0/24
178.92.199.0/24
178.92.207.0/24
178.95.140.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:01:32:32:7c:c8:87:e6:12:b5:db:e6:b9:0e:57:18:df:1d:
60:30:e7:5e:ce:3d:3b:35:ca:f0:c1:f8:41:5f:c8:11:9f:0b:
7d:30:b3:15:bc:dc:2f:9f:a4:ab:4e:b3:fb:06:a6:2a:c9:d1:
d4:31:24:3c:4f:72:b1:84:89:ae:c8:45:9e:db:3b:45:5e:7e:
78:6c:db:92:90:d0:b5:c7:e7:b7:bf:30:97:96:2e:85:99:79:
d7:ed:19:10:b9:75:92:ae:7d:82:ea:07:a0:16:28:b5:db:e0:
26:7d:03:23:c5:2f:3f:32:e9:2e:53:d0:06:a1:15:cd:c0:b8:
c5:51:5b:d5:cb:a2:f9:ee:77:c1:a7:f2:e3:32:3b:c9:4e:fc:
84:ad:51:16:e8:e4:cf:81:c6:97:88:8b:85:e9:2a:16:53:ab:
2b:e2:0a:18:dc:14:97:e0:db:ad:f4:96:a3:bf:ad:5e:5d:2c:
4f:45:ed:d5:3f:fa:e7:7b:e6:3d:ef:b1:d9:0d:6d:5f:8d:94:
65:7f:a1:fa:1b:36:1e:7e:61:f6:4d:4c:46:c1:9d:62:ee:10:
53:a9:ee:51:69:99:61:c1:03:44:aa:ce:b5:6a:52:81:79:a3:
3f:05:66:a9:b6:e1:cd:86:19:89:7f:5c:46:b4:42:e2:31:77:
b6:d4:15:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 21:30:44 2025 by rpki-client