Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS395374.roa
File: AS395374.roa (raw, json)
Hash identifier: WQrNpw3PaHVBq5Oia8nNMF5Mp1t9UqjMTqgtx5Ctzj0=
Subject key identifier: 35:BB:44:A6:6D:72:12:59:79:F1:29:37:B1:95:7C:F1:4A:A6:B2:DE
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0A3435CE26E19CC2F01C13B346A128DFB2BC580E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS395374.roa
Signing time: Thu 04 Jun 2026 11:11:50 +0000
ROA not before: Thu 04 Jun 2026 11:06:50 +0000
ROA not after: Thu 03 Jun 2027 11:11:50 +0000
asID: 395374
IP address blocks: 95.134.28.0/24 maxlen: 24
95.134.76.0/24 maxlen: 24
95.134.105.0/24 maxlen: 24
95.134.117.0/24 maxlen: 24
95.134.121.0/24 maxlen: 24
95.134.152.0/24 maxlen: 24
95.135.153.0/24 maxlen: 24
178.93.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:34:35:ce:26:e1:9c:c2:f0:1c:13:b3:46:a1:28:df:b2:bc:58:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 4 11:06:50 2026 GMT
Not After : Jun 3 11:11:50 2027 GMT
Subject: CN=35BB44A66D72125979F12937B1957CF14AA6B2DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b6:c1:88:f2:17:c4:af:f1:44:fc:34:12:44:
bb:a0:ef:5c:92:2c:d7:c3:ee:9d:c7:a5:5a:59:7a:
a2:5c:c8:44:3e:17:b4:fd:b2:b0:37:61:cc:e0:a3:
0f:aa:32:d6:bc:da:06:22:5d:a3:90:a8:49:7f:bc:
d1:cb:e8:87:15:8e:b4:3c:3c:5e:4b:1b:a9:04:c2:
06:7e:c3:86:8b:f2:fe:6a:2d:6a:3f:20:aa:03:47:
ca:67:9e:4c:79:f2:ad:26:06:ef:93:fa:95:53:b6:
c7:d7:f9:6e:a0:bd:b2:5d:e9:e6:98:51:ac:20:0d:
50:a8:3f:4a:8b:c8:51:4e:ff:eb:5d:8a:a4:ac:15:
8f:d0:23:94:2e:52:ff:bc:54:97:c0:7b:30:32:e7:
a1:04:eb:62:5d:b6:51:8e:f3:88:a7:64:1f:f9:df:
37:8c:64:76:e1:34:3e:c1:4a:0f:3d:99:21:09:22:
06:12:f1:d2:5a:2f:08:56:36:6c:f7:61:0a:d4:7c:
f4:72:83:5d:32:58:5c:82:92:ea:8e:49:ee:91:82:
e0:f8:8b:f7:36:8d:4b:1c:7c:5c:75:39:31:ca:47:
a2:38:06:d5:c6:74:05:62:2f:5d:8f:5b:a7:06:5a:
21:00:ad:e3:3a:2d:b9:25:b1:01:28:e8:60:e3:93:
8a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BB:44:A6:6D:72:12:59:79:F1:29:37:B1:95:7C:F1:4A:A6:B2:DE
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS395374.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.28.0/24
95.134.76.0/24
95.134.105.0/24
95.134.117.0/24
95.134.121.0/24
95.134.152.0/24
95.135.153.0/24
178.93.128.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:bb:05:86:8a:13:e7:06:68:f8:56:c7:84:67:4c:37:6c:7c:
30:66:d9:b4:e6:16:c0:f3:8d:82:d6:1a:1d:c0:ed:66:38:81:
f5:58:3b:74:da:05:57:f7:3b:ec:02:a0:85:49:3d:7f:e0:2f:
37:e6:4a:b3:1f:4b:62:73:0e:f5:da:34:59:11:19:c4:be:70:
c3:af:5d:f2:64:77:5b:3a:58:83:79:73:43:46:6a:f4:4e:e6:
d5:b8:e1:6e:43:b4:bd:b4:ae:e2:1a:6a:b5:53:d3:65:56:f7:
db:17:60:43:53:96:6e:33:73:fa:fb:aa:55:7b:89:a4:3b:81:
91:a8:a6:ec:60:ce:bb:bb:cc:c6:ef:8c:ca:0e:3c:31:d1:17:
b7:ea:4e:7e:6f:4a:31:7c:64:ad:fb:87:95:ef:82:92:8a:15:
d2:b1:8d:3d:39:bc:61:a8:ac:c8:33:84:dc:28:2d:c6:c4:1b:
8e:36:cd:49:29:4b:c7:69:09:83:b8:cc:65:bd:12:2d:fb:06:
45:30:34:4f:b5:74:1e:36:c3:ee:45:b2:e7:99:9b:56:97:ea:
35:a8:a8:8c:3c:a8:4f:a7:4c:ab:58:26:43:95:8a:8e:94:e7:
d9:c5:13:c2:94:1e:62:5d:c5:1e:81:ec:22:65:a8:2c:e4:bf:
b2:b9:cc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:13:26 2026 by rpki-client