Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS1239.roa
File: AS1239.roa (raw, json)
Hash identifier: 3j+Lr858RZWGG1EZXB5V+M221fjeKVa14w5usbVQ8L4=
Subject key identifier: 89:A4:27:A7:1B:33:A2:F5:35:42:DD:31:66:F6:AC:03:C0:AD:CA:1F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1DCC570E24516C6EAD524F77A82A44013DFE0ADD
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS1239.roa
Signing time: Tue 24 Feb 2026 00:04:43 +0000
ROA not before: Mon 23 Feb 2026 23:59:43 +0000
ROA not after: Tue 23 Feb 2027 00:04:43 +0000
asID: 1239
IP address blocks: 92.113.70.0/24 maxlen: 24
92.113.71.0/24 maxlen: 24
92.113.72.0/24 maxlen: 24
92.113.73.0/24 maxlen: 24
92.113.101.0/24 maxlen: 24
92.113.102.0/24 maxlen: 24
92.113.104.0/24 maxlen: 24
92.113.105.0/24 maxlen: 24
92.113.159.0/24 maxlen: 24
92.113.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:cc:57:0e:24:51:6c:6e:ad:52:4f:77:a8:2a:44:01:3d:fe:0a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 23 23:59:43 2026 GMT
Not After : Feb 23 00:04:43 2027 GMT
Subject: CN=89A427A71B33A2F53542DD3166F6AC03C0ADCA1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2c:ef:63:16:7b:34:ae:90:58:11:1f:d0:34:
e5:d6:5d:12:cd:9f:f7:3c:15:28:d1:35:ec:df:3c:
0e:5f:e7:e7:1c:22:bb:83:49:2e:e6:39:50:79:20:
b7:68:22:69:43:09:47:50:5b:5f:92:05:ba:2f:19:
d1:28:c9:fc:09:12:0c:b2:a9:25:f9:70:ca:77:5a:
cf:cf:87:64:73:5e:a2:18:bc:96:8d:f5:c4:ad:3a:
7c:04:18:a9:00:a9:df:47:f9:c7:4a:a0:9d:80:ba:
32:2f:29:de:be:06:86:56:1e:f9:d4:2e:77:69:63:
fb:34:1b:f0:c0:02:79:a5:0e:9a:32:65:45:7d:36:
20:84:36:67:84:d8:5f:85:9f:c2:73:c1:a7:43:40:
fe:d5:7a:76:cc:2f:12:37:3b:ae:25:8c:c2:21:d1:
e5:e0:a2:85:99:ac:f9:49:30:51:9f:52:05:49:cb:
8f:4f:70:b2:f4:33:ab:f7:24:d0:c2:bb:0f:c1:38:
a7:3c:6a:a6:42:49:da:f0:36:2b:32:cc:3a:98:de:
99:a3:76:5b:ba:1c:f3:cc:bf:3f:c3:0b:d7:68:1d:
df:38:d0:49:e4:bd:e6:2e:4c:44:f9:7a:45:d8:8f:
8c:46:8f:0e:ea:ea:fe:a1:49:e0:0b:d6:82:57:b6:
5f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A4:27:A7:1B:33:A2:F5:35:42:DD:31:66:F6:AC:03:C0:AD:CA:1F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS1239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.70.0-92.113.73.255
92.113.101.0-92.113.102.255
92.113.104.0/23
92.113.159.0-92.113.160.255
Signature Algorithm: sha256WithRSAEncryption
5d:81:9b:a8:2e:f7:45:fa:39:05:de:59:06:f1:4b:e8:57:59:
e3:e6:6a:43:3f:ea:a6:e5:f8:b2:ba:0d:2a:85:a1:26:fd:40:
f8:16:49:09:5c:c7:58:2b:ed:4b:70:d8:b7:31:50:b8:3d:8d:
67:25:b1:00:25:be:bc:f1:e4:1c:2e:e4:60:d8:50:96:ab:fd:
11:c1:d8:a7:96:a1:70:80:29:a9:16:6e:3e:e8:06:ce:fa:4a:
b1:04:25:4d:b2:21:cc:4b:7f:54:6b:30:3f:49:3c:0e:5e:b9:
05:3d:1a:53:33:14:9d:04:9c:5f:77:56:d3:b4:e0:12:fc:4c:
14:b0:83:fb:84:0c:15:3e:c2:bb:4a:1a:a7:02:dd:a9:cb:fe:
ac:0c:2d:5f:bc:24:f4:4d:04:b8:3e:ca:a4:a5:26:c9:32:bd:
a6:1d:b9:7c:8b:ab:81:5d:3a:88:49:db:f1:bd:ee:96:21:ab:
6c:f2:86:b0:04:ca:ce:59:d6:68:b4:b3:fb:df:7f:b3:d7:28:
11:b1:f1:22:e9:a1:a4:fb:45:66:e7:a9:38:c6:5e:fa:84:a1:
f5:00:cc:30:74:20:82:70:c8:e7:fd:53:51:02:39:6f:da:72:
d5:cc:b7:0a:de:4d:a4:aa:18:ec:1c:a7:6d:d2:76:8f:46:c4:
64:e5:74:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:38:01 2026 by rpki-client