Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS973.roa
File: AS973.roa (raw, json)
Hash identifier: tFzdSeOaUiEbNNPizaJsD2LNJM3USiNqL8eQkxb3jfw=
Subject key identifier: D5:BA:2E:E5:C0:2D:72:41:74:CC:37:5D:71:30:54:31:B6:36:8E:95
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 78A10FC2053E7C43B8650561B440896A52D0D6AD
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS973.roa
Signing time: Wed 16 Sep 2026 23:49:35 +0000
ROA not before: Wed 16 Sep 2026 23:44:35 +0000
ROA not after: Wed 15 Sep 2027 23:49:35 +0000
asID: 973
IP address blocks: 45.152.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 00:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:a1:0f:c2:05:3e:7c:43:b8:65:05:61:b4:40:89:6a:52:d0:d6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Sep 16 23:44:35 2026 GMT
Not After : Sep 15 23:49:35 2027 GMT
Subject: CN=D5BA2EE5C02D724174CC375D71305431B6368E95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:25:09:50:fe:0f:5d:28:c0:c5:b6:df:60:11:
db:b5:bb:c7:35:76:ce:7a:07:8a:02:9a:0c:c2:30:
6e:fb:ce:d4:71:38:f7:b3:30:65:10:26:41:7e:b6:
16:4b:4f:d5:51:0c:88:37:e0:93:21:74:b6:b4:37:
2e:7a:1b:a9:65:b0:16:5c:fb:48:fa:a3:5c:43:63:
14:16:2a:2a:48:52:d5:dd:e0:16:1b:92:73:71:f6:
4d:c8:3f:7a:00:bc:07:98:9b:c2:9f:c2:db:1b:4b:
84:25:ca:4f:a6:24:b1:46:91:49:6a:a1:76:3c:96:
2e:fd:c3:0c:16:97:ae:c5:44:8a:79:6d:54:9f:96:
9a:69:85:59:f5:d2:c7:1f:c1:cf:18:6f:b7:80:0a:
44:bc:e8:a4:f5:20:02:fb:38:a4:dc:f9:da:6d:16:
8d:e7:1f:61:0b:36:b6:6e:40:a2:f6:84:65:e0:b4:
59:3f:d3:40:4c:f4:68:26:89:5e:5c:4d:36:7e:17:
82:ae:d3:e3:45:65:c6:04:67:5c:ee:24:68:17:5d:
44:b1:54:aa:c7:be:f3:e8:a6:4a:d3:93:dd:2c:04:
1b:09:0f:c1:d8:96:3a:38:ed:c2:5c:64:4e:5b:6f:
74:89:9a:29:25:a9:2f:d4:03:cc:99:87:e9:95:9c:
29:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BA:2E:E5:C0:2D:72:41:74:CC:37:5D:71:30:54:31:B6:36:8E:95
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS973.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.240.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:fb:56:24:bc:a9:39:69:fa:81:b8:4c:02:a9:fe:5a:12:41:
be:bf:06:49:e2:3b:ce:06:b9:52:07:3f:2e:1e:70:1f:f7:75:
9c:fa:22:b7:f9:8e:ad:c5:29:b6:31:79:78:81:ae:8f:7c:2c:
3c:9e:23:4a:43:67:ce:93:b9:a4:d9:0b:bf:0f:e3:e2:ad:cb:
d1:28:9f:fa:a9:3f:f8:d2:fa:03:40:fb:f2:cc:0b:69:0e:a1:
30:a5:74:6a:85:b6:aa:5e:44:86:02:37:e4:74:fe:59:ab:42:
30:b3:c9:3a:b4:f4:49:9d:b1:65:15:a0:26:16:f5:c3:97:96:
b3:78:d1:cd:67:54:2f:a0:d2:6c:06:ca:d0:03:8d:22:05:9d:
83:88:68:c8:1e:6f:65:24:c5:df:08:71:43:56:0b:32:d9:d8:
56:51:2b:45:a0:c2:e1:20:44:ac:fe:f6:bb:40:cd:e3:ca:6c:
cc:ff:99:98:c9:74:aa:ef:92:9a:ac:21:b7:21:ec:2b:9a:f9:
25:71:cd:48:cc:c6:0a:82:b5:9c:14:eb:68:da:cd:76:a4:1c:
21:a4:b2:27:9b:67:5c:a3:ce:6f:4b:dc:72:57:2a:d4:d2:1e:
37:51:52:44:b9:00:6f:46:e2:4f:b0:11:2b:7c:4c:5f:d8:28:
76:b4:88:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:31:53 2026 by rpki-client