Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS1299.roa
File: AS1299.roa (raw, json)
Hash identifier: uva0xCy4yG0RUsT1T1CxNaCjQQo84zhvxMlnvY5gRGM=
Subject key identifier: 90:35:18:51:24:DC:3E:57:2B:DE:76:DA:DE:B4:1B:F4:6D:92:ED:85
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 14E0A974C5603EAF1D89C1D4ACF3A7DD58B98B87
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS1299.roa
Signing time: Wed 16 Sep 2026 10:49:35 +0000
ROA not before: Wed 16 Sep 2026 10:44:35 +0000
ROA not after: Wed 15 Sep 2027 10:49:35 +0000
asID: 1299
IP address blocks: 92.112.248.0/24 maxlen: 24
92.112.249.0/24 maxlen: 24
92.112.250.0/24 maxlen: 24
92.112.251.0/24 maxlen: 24
92.112.252.0/24 maxlen: 24
92.112.253.0/24 maxlen: 24
92.112.254.0/24 maxlen: 24
92.112.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:e0:a9:74:c5:60:3e:af:1d:89:c1:d4:ac:f3:a7:dd:58:b9:8b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 16 10:44:35 2026 GMT
Not After : Sep 15 10:49:35 2027 GMT
Subject: CN=9035185124DC3E572BDE76DADEB41BF46D92ED85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:26:27:64:7b:49:7e:29:82:82:f8:7c:b8:03:
b0:0c:34:a4:fa:e0:12:8c:92:d8:fa:da:d0:3a:1f:
f0:3d:8e:35:76:95:a4:5f:3a:63:0a:48:c7:b6:66:
16:6c:7d:37:07:25:a3:4c:1a:b4:a2:b3:4e:01:76:
af:aa:c6:dd:6a:c5:fa:04:ef:40:d5:62:75:a8:c2:
9e:0c:f5:c1:b7:73:cc:68:42:37:cc:99:9f:6d:14:
11:af:c6:0c:50:7f:e0:c2:f3:e7:5f:6f:9b:c6:38:
b5:2a:e1:3e:33:db:68:4b:92:f5:a9:56:14:4d:42:
6a:a6:29:2a:30:28:a4:6d:bf:50:b0:1b:59:8f:67:
c3:46:2f:dc:65:f4:67:39:e9:56:5e:1b:74:6d:d9:
b2:3c:d0:a2:1a:a6:5b:9e:71:0c:8a:4f:09:eb:ab:
60:33:11:0b:02:bc:37:ac:1d:94:28:5c:23:22:53:
1a:9f:6e:ff:ff:96:5b:22:f0:1a:3c:a2:ac:0b:40:
69:7c:1f:4f:e5:5a:87:cf:57:3b:a3:6d:61:72:be:
db:0c:e0:ab:11:2d:18:e2:ce:41:17:98:e3:5b:1e:
42:f3:07:28:85:66:25:84:86:93:79:35:66:d5:c4:
83:3d:d7:d8:9e:e8:8d:c8:d2:4c:56:f9:9f:27:24:
ae:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:35:18:51:24:DC:3E:57:2B:DE:76:DA:DE:B4:1B:F4:6D:92:ED:85
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS1299.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.248.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:68:e3:65:2b:f7:9b:09:70:b8:ce:f2:d7:c5:19:02:7d:15:
ed:77:cc:ec:7d:9c:17:60:0b:6f:97:7e:c4:57:ee:23:9c:c8:
6c:af:e7:d5:21:82:ae:e2:b3:4f:a4:c7:1e:9a:b7:bf:de:5f:
93:94:cb:7e:b6:88:30:9b:2a:38:38:a6:a9:94:64:77:cf:7f:
40:bc:ca:c4:d4:3d:55:11:4e:0c:fd:4c:64:c4:19:af:35:07:
c8:f2:10:99:fd:6a:c3:49:95:00:af:f3:bc:f9:7a:bd:44:11:
dd:26:a1:84:80:13:63:4c:f9:6a:24:16:da:70:f3:e1:84:81:
16:3e:b1:fc:e4:89:29:d8:87:cd:53:05:28:d3:8f:c7:29:31:
dc:31:b0:04:12:bd:73:d8:5e:ea:2b:56:6c:ad:9c:1e:93:d3:
e0:c7:ae:50:8a:10:ab:28:a7:d8:74:3d:dc:ba:d5:c3:1b:b0:
aa:32:3f:01:52:87:69:cf:74:07:a1:d4:93:ff:8f:4f:85:a5:
05:b1:51:33:46:f1:c6:b5:22:f3:7a:c3:00:26:61:4f:7e:d2:
11:ee:4e:de:63:f3:14:a1:a9:d5:1e:ee:5b:54:e8:6e:f7:53:
ab:22:70:14:39:d8:38:a1:02:ba:92:fb:e3:35:0f:0b:dc:d1:
14:5e:45:1f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIUFOCpdMVgPq8dicHUrPOn3Vi5i4cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA5MTYxMDQ0MzVaFw0yNzA5MTUxMDQ5MzVaMDMxMTAvBgNV
BAMTKDkwMzUxODUxMjREQzNFNTcyQkRFNzZEQURFQjQxQkY0NkQ5MkVEODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Jidke0l+KYKC+Hy4A7AMNKT6
4BKMktj62tA6H/A9jjV2laRfOmMKSMe2ZhZsfTcHJaNMGrSis04Bdq+qxt1qxfoE
70DVYnWowp4M9cG3c8xoQjfMmZ9tFBGvxgxQf+DC8+dfb5vGOLUq4T4z22hLkvWp
VhRNQmqmKSowKKRtv1CwG1mPZ8NGL9xl9Gc56VZeG3Rt2bI80KIapluecQyKTwnr
q2AzEQsCvDesHZQoXCMiUxqfbv//llsi8Bo8oqwLQGl8H0/lWofPVzujbWFyvtsM
4KsRLRjizkEXmONbHkLzByiFZiWEhpN5NWbVxIM919ie6I3I0kxW+Z8nJK45AgMB
AAGjggIIMIICBDAdBgNVHQ4EFgQUkDUYUSTcPlcr3nba3rQb9G2S7YUwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTI5OS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA1xw+DAN
BgkqhkiG9w0BAQsFAAOCAQEAbWjjZSv3mwlwuM7y18UZAn0V7XfM7H2cF2ALb5d+
xFfuI5zIbK/n1SGCruKzT6THHpq3v95fk5TLfraIMJsqODimqZRkd89/QLzKxNQ9
VRFODP1MZMQZrzUHyPIQmf1qw0mVAK/zvPl6vUQR3SahhIATY0z5aiQW2nDz4YSB
Fj6x/OSJKdiHzVMFKNOPxykx3DGwBBK9c9he6itWbK2cHpPT4MeuUIoQqyin2HQ9
3LrVwxuwqjI/AVKHac90B6HUk/+PT4WlBbFRM0bxxrUi83rDACZhT37SEe5O3mPz
FKGp1R7uW1TobvdTqyJwFDnYOKECupL74zUPC9zRFF5FHw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 01:11:28 2026 by rpki-client