Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS395374.roa
File: AS395374.roa (raw, json)
Hash identifier: vQCYRb2vVdCE0FSNaMm5dV5KcB5hdxY9b333n4kMKIo=
Subject key identifier: C3:58:21:E6:FB:1F:4F:1B:94:03:96:F7:0E:30:84:37:19:E7:23:ED
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 519DB647DA9A3341248AF86EE62569D9C7E84C62
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS395374.roa
Signing time: Tue 20 Oct 2026 00:00:23 +0000
ROA not before: Mon 19 Oct 2026 23:55:23 +0000
ROA not after: Tue 19 Oct 2027 00:00:23 +0000
asID: 395374
IP address blocks: 95.134.28.0/24 maxlen: 24
95.134.117.0/24 maxlen: 24
95.134.121.0/24 maxlen: 24
95.134.152.0/24 maxlen: 24
95.135.153.0/24 maxlen: 24
178.93.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 04:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:9d:b6:47:da:9a:33:41:24:8a:f8:6e:e6:25:69:d9:c7:e8:4c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 19 23:55:23 2026 GMT
Not After : Oct 19 00:00:23 2027 GMT
Subject: CN=C35821E6FB1F4F1B940396F70E30843719E723ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:7d:4e:50:64:43:10:ec:66:4c:1e:3c:7c:
21:a6:c0:8c:d3:12:2f:24:66:1b:c1:9a:8e:d4:32:
bc:3c:2d:7f:03:d2:9b:4c:71:df:43:f8:31:34:30:
7b:97:69:f8:fd:62:cc:2b:90:89:7a:65:14:91:0c:
92:0d:70:2b:4c:cd:66:5f:e7:fd:99:c5:16:95:52:
a1:92:4d:99:fb:de:0f:e3:88:2a:08:1d:b5:7b:1e:
3b:50:e5:ae:61:ac:26:d9:ca:a5:23:08:c4:1d:df:
88:49:c1:fd:8b:57:d9:e6:0c:8c:c7:3b:5e:5e:c4:
39:c6:94:8d:f7:a1:7b:09:e4:22:3a:0c:3c:54:a3:
a8:d5:be:12:87:76:3d:2b:39:7d:e7:40:b5:d1:5d:
b0:35:e9:99:ff:0c:5f:9a:36:fd:1f:ce:3c:ca:65:
71:ee:5a:75:18:89:b9:5a:3d:3c:68:23:14:70:e7:
8c:10:7a:4a:77:da:7f:3e:01:83:11:70:af:08:e9:
35:be:4b:7f:7b:93:04:ec:67:08:0e:28:af:bf:f8:
26:cd:6b:a9:16:67:31:4d:6f:0b:f8:d1:b4:df:5a:
7b:cb:d6:c2:c2:1e:39:0d:73:56:d5:3c:32:67:68:
4f:48:de:67:a9:e3:f3:96:f9:ad:69:fd:88:a2:c4:
0f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:58:21:E6:FB:1F:4F:1B:94:03:96:F7:0E:30:84:37:19:E7:23:ED
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS395374.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.28.0/24
95.134.117.0/24
95.134.121.0/24
95.134.152.0/24
95.135.153.0/24
178.93.128.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:28:17:12:ab:2b:ac:73:8d:74:0f:cf:c2:77:59:dc:84:87:
e4:fd:53:da:ed:f7:68:96:06:7d:df:32:0d:8e:35:38:71:21:
57:f3:e9:d3:d4:9b:09:95:9b:d9:86:7b:90:54:ca:6b:39:0c:
a2:6b:a7:0d:a3:f2:b0:d2:19:a6:11:5b:df:5a:78:10:0e:24:
be:5a:98:9d:29:22:2f:47:9b:20:6a:16:d0:c3:52:36:f4:7f:
3c:2b:8e:00:ad:1d:8a:fc:af:c7:b7:ff:ff:23:53:7f:dc:1c:
a0:99:69:82:69:45:16:ce:e4:58:23:70:b7:1a:1d:1d:77:6b:
85:aa:66:a3:56:5b:fe:04:0c:0f:e2:bc:5d:0a:62:f4:48:57:
97:a0:07:21:bb:36:55:12:c0:4b:b8:3c:01:fe:53:2e:8b:56:
5d:6a:46:87:94:c2:c8:96:b7:ab:4c:53:ad:64:ad:d4:f0:99:
b8:c1:89:87:72:c3:c7:b1:26:4e:d7:10:fd:85:b0:b2:6a:76:
62:ff:ff:bd:31:16:6c:43:3d:44:a2:f4:e7:73:de:56:6c:09:
75:6b:16:b1:d7:07:56:c1:82:c5:75:72:93:bd:4f:53:df:f0:
da:d0:92:d9:15:c8:5d:c9:35:47:c0:87:34:61:06:ba:1d:aa:
26:ec:e1:b8
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUUZ22R9qaM0Ekivhu5iVp2cfoTGIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjEwMTkyMzU1MjNaFw0yNzEwMTkwMDAwMjNaMDMxMTAvBgNV
BAMTKEMzNTgyMUU2RkIxRjRGMUI5NDAzOTZGNzBFMzA4NDM3MTlFNzIzRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmPX1OUGRDEOxmTB48fCGmwIzT
Ei8kZhvBmo7UMrw8LX8D0ptMcd9D+DE0MHuXafj9YswrkIl6ZRSRDJINcCtMzWZf
5/2ZxRaVUqGSTZn73g/jiCoIHbV7HjtQ5a5hrCbZyqUjCMQd34hJwf2LV9nmDIzH
O15exDnGlI33oXsJ5CI6DDxUo6jVvhKHdj0rOX3nQLXRXbA16Zn/DF+aNv0fzjzK
ZXHuWnUYiblaPTxoIxRw54wQekp32n8+AYMRcK8I6TW+S397kwTsZwgOKK+/+CbN
a6kWZzFNbwv40bTfWnvL1sLCHjkNc1bVPDJnaE9I3mep4/OW+a1p/YiixA/vAgMB
AAGjggIoMIICJDAdBgNVHQ4EFgQUw1gh5vsfTxuUA5b3DjCENxnnI+0wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMzk1Mzc0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAX4Yc
AwQAX4Z1AwQAX4Z5AwQAX4aYAwQAX4eZAwQAsl2AMA0GCSqGSIb3DQEBCwUAA4IB
AQBqKBcSqyusc410D8/Cd1nchIfk/VPa7fdolgZ93zINjjU4cSFX8+nT1JsJlZvZ
hnuQVMprOQyia6cNo/Kw0hmmEVvfWngQDiS+WpidKSIvR5sgahbQw1I29H88K44A
rR2K/K/Ht///I1N/3BygmWmCaUUWzuRYI3C3Gh0dd2uFqmajVlv+BAwP4rxdCmL0
SFeXoAchuzZVEsBLuDwB/lMui1ZdakaHlMLIlrerTFOtZK3U8Jm4wYmHcsPHsSZO
1xD9hbCyanZi//+9MRZsQz1EovTnc95WbAl1axax1wdWwYLFdXKTvU9T3/Da0JLZ
FchdyTVHwIc0YQa6Haom7OG4
-----END CERTIFICATE-----
Generated at Thu Nov 5 12:18:25 2026 by rpki-client