Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS984.roa
File: AS984.roa (raw, json)
Hash identifier: pTrVrNFJLDuCVzxBWh1Ti0HK5SZdR/b28IHJPA/x7wA=
Subject key identifier: A2:D0:59:7F:ED:5A:39:29:80:DA:0D:5C:C8:A3:A7:DD:CB:88:66:50
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7F4DA478C3A7233743B96700A50EC9AF5B037850
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS984.roa
Signing time: Thu 28 May 2026 13:45:18 +0000
ROA not before: Thu 28 May 2026 13:40:18 +0000
ROA not after: Thu 27 May 2027 13:45:18 +0000
asID: 984
IP address blocks: 46.203.39.0/24 maxlen: 24
95.134.61.0/24 maxlen: 24
95.134.112.0/24 maxlen: 24
178.92.199.0/24 maxlen: 24
178.92.207.0/24 maxlen: 24
178.93.76.0/24 maxlen: 24
178.95.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jun 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:4d:a4:78:c3:a7:23:37:43:b9:67:00:a5:0e:c9:af:5b:03:78:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 28 13:40:18 2026 GMT
Not After : May 27 13:45:18 2027 GMT
Subject: CN=A2D0597FED5A392980DA0D5CC8A3A7DDCB886650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:72:18:7a:70:2a:b2:20:58:ff:98:66:af:17:
f7:e7:4e:fa:2f:2b:4d:31:71:ad:d2:6f:e8:3f:aa:
2b:f1:0c:eb:b6:0c:97:60:b7:02:89:ec:72:05:5e:
d6:ed:27:96:5d:d5:61:87:2d:c4:c1:a5:fe:d7:54:
d9:2d:3d:e4:3f:7d:b4:36:db:02:38:0e:ff:72:74:
81:83:df:7e:eb:78:43:06:de:78:4e:c9:5a:09:38:
79:68:28:95:1b:e3:24:bb:c2:47:ce:a0:9a:9a:92:
4f:7d:48:46:65:3e:03:a0:c8:2a:a5:9d:dc:1b:70:
c0:aa:32:df:ec:1c:81:2c:af:f8:c7:34:ce:ea:94:
67:31:07:06:26:72:21:96:3c:03:11:82:b9:27:45:
fb:ef:b7:a4:9f:33:84:b9:88:c4:79:27:65:76:a8:
6b:0d:e0:bc:23:62:a0:a2:9a:e3:4f:47:be:03:32:
91:38:9e:f0:a1:f4:0d:31:64:e3:39:ee:d8:50:68:
c6:bd:10:f7:43:60:d7:26:d7:96:40:0b:a8:ae:33:
1f:5b:0b:88:d7:ea:6b:0f:5a:3e:fe:f4:2c:74:86:
88:d4:67:6f:c1:2b:77:fe:64:47:25:a3:74:ba:35:
ba:8b:03:27:26:bc:da:72:f4:1e:c2:de:4e:e2:f3:
21:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D0:59:7F:ED:5A:39:29:80:DA:0D:5C:C8:A3:A7:DD:CB:88:66:50
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS984.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.39.0/24
95.134.61.0/24
95.134.112.0/24
178.92.199.0/24
178.92.207.0/24
178.93.76.0/24
178.95.140.0/22
Signature Algorithm: sha256WithRSAEncryption
45:4d:8a:b8:08:5e:63:ab:83:4d:d3:0f:5a:3a:49:fe:9a:89:
a4:34:86:53:3f:6d:0e:dc:f4:b3:75:e3:08:19:4d:d8:6f:8f:
e0:12:10:d2:69:69:73:94:92:5b:b6:b4:e9:8b:13:dc:af:88:
09:84:4e:6b:16:ba:44:b0:65:b1:b8:16:40:71:0f:95:a1:6c:
42:7b:8a:93:ef:b9:f9:6f:94:3e:f3:8b:e4:80:44:2c:f5:b0:
38:df:a2:1a:f2:fc:41:e0:d5:9d:cc:2a:b1:d4:e5:bc:13:b7:
b9:0d:56:09:58:35:a1:1c:89:cc:f2:f7:c3:c1:2d:b4:a0:16:
05:a4:ab:c4:40:35:5d:bc:4b:0e:7f:0d:1d:3f:40:71:99:f1:
96:31:e0:0d:6a:b1:20:ab:e3:5a:70:d0:13:3d:d1:61:54:03:
dc:82:9b:65:3c:b0:3b:ce:bf:5e:fd:b2:76:f1:e3:f0:c0:65:
f4:8b:b9:23:db:13:dc:73:78:40:69:89:6d:ef:17:2d:f4:80:
ea:ad:c3:4a:09:f1:a0:16:43:e8:51:b7:5e:da:f3:6f:90:01:
d2:2e:63:da:04:3f:39:73:b4:dc:07:32:2e:f7:f5:b1:dd:83:
bc:53:83:0a:a8:4e:42:bf:6e:45:aa:c4:30:c1:13:f5:6d:00:
39:34:01:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 16:20:09 2026 by rpki-client