Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS395878.roa
File: AS395878.roa (raw, json)
Hash identifier: 6s9Aju1GhHwZGLBtutBqYRYA/5CRyYmxRJR/NG1Qx5I=
Subject key identifier: 28:2E:10:AB:DD:12:1B:19:6C:2D:AE:45:32:F2:DB:FB:7A:7A:35:DE
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 65BC219E20B58D666A020B727C54DAE052EF5124
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS395878.roa
Signing time: Wed 29 Oct 2025 03:38:51 +0000
ROA not before: Wed 29 Oct 2025 03:33:51 +0000
ROA not after: Wed 28 Oct 2026 03:38:51 +0000
asID: 395878
IP address blocks: 2a0f:85c1:da0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:bc:21:9e:20:b5:8d:66:6a:02:0b:72:7c:54:da:e0:52:ef:51:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 29 03:33:51 2025 GMT
Not After : Oct 28 03:38:51 2026 GMT
Subject: CN=282E10ABDD121B196C2DAE4532F2DBFB7A7A35DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:46:eb:20:cb:e6:72:4a:7d:ce:54:ae:bf:c7:
10:9f:3c:6a:ad:10:e2:4a:15:15:d5:c4:f5:31:6a:
75:ab:8d:39:cd:c5:d1:d2:88:82:dc:0e:3e:0d:0b:
9e:30:ad:be:6d:94:20:21:60:aa:fb:d4:1d:f4:36:
a1:b6:8d:93:64:4c:4c:6d:f1:77:9c:9b:a6:b2:32:
90:39:1b:88:c3:19:b7:97:51:56:06:a9:e8:2b:9e:
49:8f:4a:59:8a:7b:5c:56:d2:c6:de:ae:dc:8e:b2:
d7:69:b8:d2:e7:25:93:0b:55:25:ed:0f:64:1d:4c:
cc:d4:6b:3e:5a:89:f8:e4:3f:e8:6f:d7:72:14:40:
a6:b6:4a:7d:62:b3:b8:db:7c:a4:15:32:ea:8a:45:
e6:03:d3:9d:92:81:7d:f3:78:ee:f2:e7:fb:e3:d5:
22:95:d3:7b:87:88:da:9c:03:d8:b3:65:ad:42:8e:
50:eb:37:6f:c3:ab:6d:bc:1f:c1:07:60:a0:fa:e3:
9e:fd:f4:59:9a:b7:2f:2a:fe:c1:42:ac:d0:df:a6:
e5:bd:61:d8:c3:01:3a:23:91:31:55:0e:68:9b:8b:
39:b5:4a:8a:03:91:8a:24:b9:87:e2:cc:45:08:c7:
5c:b5:e5:59:f7:da:ae:7c:4e:66:5c:45:5a:86:4d:
86:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2E:10:AB:DD:12:1B:19:6C:2D:AE:45:32:F2:DB:FB:7A:7A:35:DE
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS395878.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:da0::/44
Signature Algorithm: sha256WithRSAEncryption
90:6b:ab:c0:98:f0:7e:9f:f1:40:99:c9:6b:93:60:79:21:25:
3b:af:eb:ca:4c:3b:fa:bd:ac:07:82:86:cf:56:cf:9e:91:e0:
89:2e:3e:c7:b0:19:7f:a9:a9:87:8f:11:cd:cb:91:b6:d6:38:
ed:1e:ff:db:18:27:1a:86:a8:ab:54:24:a3:45:b4:21:7f:02:
28:cb:a2:ae:eb:90:05:fd:be:3b:0e:69:f4:44:43:5f:2f:9c:
f8:a5:8f:f2:ed:42:3d:41:6a:3c:60:0f:69:1c:ed:85:93:de:
1c:b6:c1:be:c5:df:ec:bd:36:62:2e:e5:53:49:27:a7:5c:5f:
17:81:9b:6c:0f:c8:e9:14:47:0b:b7:d0:f2:e3:f7:6b:68:23:
87:b9:d9:a2:e0:77:48:50:b3:fb:51:9a:25:af:de:90:41:e9:
c7:a6:0c:ca:3a:be:5d:f9:e8:23:52:05:33:3a:41:22:45:0e:
ab:87:dc:00:85:cf:9a:fd:30:30:7d:06:43:4a:70:b1:18:25:
0b:2e:cd:b1:80:a8:13:75:1f:d3:8c:c6:9b:4c:27:45:a1:80:
97:c4:00:b8:6d:4e:f9:fd:2a:e7:61:91:3b:fa:e9:a7:fc:98:
0a:82:91:95:e0:64:c4:58:bf:63:de:7a:0a:87:34:3b:f7:8e:
a2:1e:10:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:42:02 2025 by rpki-client