Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS984.roa
File: AS984.roa (raw, json)
Hash identifier: gRiumCPjnVXpV6FW5bcyH7kshDAxZfx5x4voSDC3+NM=
Subject key identifier: D8:35:05:44:A1:20:8D:9F:33:4D:F3:75:13:6B:CD:79:C7:7A:B9:7D
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5DDBF936462946A0CDD625397ED9E78592DFD2A0
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS984.roa
Signing time: Thu 20 Aug 2026 09:07:56 +0000
ROA not before: Thu 20 Aug 2026 09:02:56 +0000
ROA not after: Thu 19 Aug 2027 09:07:56 +0000
asID: 984
IP address blocks: 95.134.61.0/24 maxlen: 24
95.134.112.0/24 maxlen: 24
178.92.199.0/24 maxlen: 24
178.92.207.0/24 maxlen: 24
178.93.76.0/24 maxlen: 24
178.95.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 14:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:db:f9:36:46:29:46:a0:cd:d6:25:39:7e:d9:e7:85:92:df:d2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 20 09:02:56 2026 GMT
Not After : Aug 19 09:07:56 2027 GMT
Subject: CN=D8350544A1208D9F334DF375136BCD79C77AB97D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f9:10:ea:2a:44:a7:26:a4:c4:12:2f:bb:b9:
78:f6:45:07:50:7e:38:ac:8d:6a:9c:a5:7e:9c:93:
fa:2e:2c:0c:fa:c9:9b:21:b1:79:81:ac:0a:0d:73:
2e:78:cc:2a:62:86:06:8d:2c:e5:ca:0d:7a:a4:78:
7b:81:9a:6a:f2:2f:6c:1c:9e:42:33:71:e9:33:5c:
07:b5:a5:f3:9f:3f:36:ba:66:8b:ae:9c:1a:37:bd:
05:15:1f:a6:c7:15:7e:7e:0e:80:86:45:14:4f:e8:
8d:ab:3f:42:f0:99:26:ef:76:a8:c7:73:5e:33:a7:
bd:1f:18:d3:3a:06:98:93:35:e7:be:cf:3f:fb:5c:
3d:08:47:b4:0c:88:15:15:52:66:d7:9c:52:d9:8c:
60:a6:96:95:47:9c:cd:9d:b4:d4:61:38:2a:e7:f9:
b5:8e:ba:a7:91:06:34:72:42:ec:e2:10:dd:1b:73:
93:e6:16:59:c8:a7:5f:6e:cc:42:b9:19:5f:7e:ce:
f1:e6:e3:99:29:03:f2:2a:64:00:51:ab:5c:e9:2b:
d3:66:35:02:d2:b4:26:ca:9a:22:e6:61:8c:67:3a:
18:8c:8a:52:31:fc:53:54:74:14:6f:17:7d:9a:f1:
2d:d5:64:d5:e9:20:ef:1e:c4:fc:19:9c:7f:03:62:
15:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:35:05:44:A1:20:8D:9F:33:4D:F3:75:13:6B:CD:79:C7:7A:B9:7D
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS984.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.61.0/24
95.134.112.0/24
178.92.199.0/24
178.92.207.0/24
178.93.76.0/24
178.95.140.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:e4:eb:18:de:86:f6:40:c4:91:29:2d:d4:ca:8a:c3:73:b2:
df:e5:a0:38:8f:bb:4d:62:7c:49:72:19:5d:96:1f:82:4f:66:
f5:d5:45:5a:c2:6d:a6:2e:16:10:f3:60:5d:e7:80:73:27:53:
95:4f:e7:57:0c:d1:7b:22:db:52:e5:05:c6:43:44:ee:9b:33:
ae:16:1c:a6:81:fa:e0:82:91:0b:bd:d7:a8:55:e3:a1:12:c1:
74:40:2d:f8:b7:4d:54:52:95:46:7f:a0:92:f5:88:a9:a6:38:
ba:01:77:35:fd:d6:e7:a1:84:bd:fa:04:44:21:e6:23:cf:2f:
18:7e:4f:66:d9:ed:31:e2:6a:36:16:11:41:40:06:4f:6e:b6:
e8:76:fa:43:6f:36:e0:6f:42:e2:af:d7:6b:ed:f4:54:18:3a:
98:9b:9c:64:6c:b3:80:a7:8f:cd:05:d0:19:51:0e:96:27:22:
aa:7a:77:01:fd:bb:f5:88:0c:47:97:80:fb:6f:c3:93:9a:61:
ee:26:8a:cc:8e:cd:c9:c4:f0:4a:b5:16:0f:b1:da:82:d9:29:
bd:95:9a:b8:c0:45:d2:9f:75:a3:77:43:30:57:9e:82:77:d1:
a9:14:e5:72:d1:ec:a5:6f:e2:45:e5:bd:fb:a7:20:7e:99:e5:
c0:77:57:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 16:25:35 2026 by rpki-client