Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS395374.roa
File: AS395374.roa (raw, json)
Hash identifier: 8wHQRIo9uw5hULsg8WEDlf1QoInD2tahh5jOvuNvtMM=
Subject key identifier: 47:35:B9:77:20:79:60:B5:01:C5:EA:C9:91:CD:A1:45:55:59:D0:EC
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2DC21B55BCDD17BBD12DD83FBF953F9C11AD7C2C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS395374.roa
Signing time: Tue 24 Feb 2026 10:20:39 +0000
ROA not before: Tue 24 Feb 2026 10:15:39 +0000
ROA not after: Tue 23 Feb 2027 10:20:39 +0000
asID: 395374
IP address blocks: 95.134.5.0/24 maxlen: 24
95.134.76.0/24 maxlen: 24
95.134.98.0/24 maxlen: 24
95.134.105.0/24 maxlen: 24
95.134.117.0/24 maxlen: 24
95.134.121.0/24 maxlen: 24
95.134.152.0/24 maxlen: 24
178.93.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:c2:1b:55:bc:dd:17:bb:d1:2d:d8:3f:bf:95:3f:9c:11:ad:7c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 24 10:15:39 2026 GMT
Not After : Feb 23 10:20:39 2027 GMT
Subject: CN=4735B977207960B501C5EAC991CDA1455559D0EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f8:52:c2:7d:7d:3a:d7:6d:aa:a1:27:a0:f1:
42:61:08:35:ec:77:97:ec:c5:da:dc:4a:94:b8:eb:
54:ea:c6:46:7e:87:4c:e0:e9:9b:f3:dd:ad:9b:bf:
4c:eb:d0:41:6f:b3:99:a7:ba:24:25:86:55:94:d8:
ea:b8:34:ce:1d:92:a8:77:76:a0:7f:b4:f3:6a:a7:
9b:b7:c9:da:c4:d1:71:32:37:63:48:69:3f:a3:84:
9b:89:43:d4:42:fa:a1:c3:28:89:33:52:86:ed:70:
47:45:54:d0:55:bd:6e:48:75:63:1b:8e:f9:a8:81:
38:ae:9f:4a:eb:0b:3b:35:ec:57:a0:da:4a:e8:54:
e5:bc:c1:22:d4:8f:4b:2c:3f:13:f5:24:2d:51:ef:
4f:35:4f:8e:cd:36:7f:66:b2:99:a6:f7:46:36:83:
44:4d:25:28:2c:49:2b:9c:d4:87:78:b4:71:c6:db:
6a:ce:d9:e3:4c:a7:9a:f7:2c:0e:b0:6b:ae:60:ff:
b3:8f:12:28:c0:6d:00:cd:0c:38:88:eb:d9:4d:3e:
b6:98:d8:3f:6a:75:7d:31:19:b0:3d:23:8e:21:1f:
62:6b:3d:1f:e3:8c:f0:81:5d:da:f7:20:fe:6f:20:
26:39:d6:5b:b4:44:50:9f:c5:5f:56:75:92:1b:bc:
68:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:35:B9:77:20:79:60:B5:01:C5:EA:C9:91:CD:A1:45:55:59:D0:EC
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS395374.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.5.0/24
95.134.76.0/24
95.134.98.0/24
95.134.105.0/24
95.134.117.0/24
95.134.121.0/24
95.134.152.0/24
178.93.128.0/24
Signature Algorithm: sha256WithRSAEncryption
47:77:81:e7:a6:c4:1f:bc:a8:47:99:ec:84:81:5f:8d:13:d3:
0b:e4:7d:a4:3c:d1:b8:b3:fc:58:a8:d5:c5:53:a5:04:04:04:
9c:69:4d:83:e2:5e:5e:2b:d6:32:fb:14:ee:37:74:59:7b:72:
6d:ec:ba:dd:fb:07:94:98:03:40:52:cb:57:ad:ca:ef:36:d4:
9d:61:8a:28:98:2c:80:04:a0:fa:e8:ac:e0:f4:38:4c:87:8b:
73:5d:f9:e9:da:2d:98:4b:ad:ec:65:6a:d0:40:bc:8d:ef:b4:
9c:f0:ff:ba:9e:eb:80:cf:97:5d:90:5b:7c:ac:e0:60:79:c2:
78:07:59:ed:89:9d:1c:71:db:81:f7:43:20:8a:7c:7d:79:c8:
f1:dd:de:10:d5:74:f4:05:2b:6e:6f:2e:5d:33:84:70:ff:24:
90:65:8c:c4:e3:45:dc:85:c4:e5:f9:7a:b7:79:fb:38:da:ee:
cf:60:cc:59:26:fb:83:1c:91:ec:96:91:62:f8:c9:71:01:9b:
18:a9:21:60:86:5f:88:8a:0c:84:96:37:58:d9:ad:d5:b4:9e:
54:6f:a4:f6:63:37:7e:8d:76:2e:39:99:73:17:e7:56:ce:db:
15:63:de:05:fb:ee:c7:d0:96:38:57:a0:70:3f:71:50:82:c7:
60:32:5e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:37:45 2026 by rpki-client