Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS395470.roa
File: AS395470.roa (raw, json)
Hash identifier: mNV8QtI3KZ4TXFlxoyLtbTJcZ9i/HjI4U3jsjK0S0YI=
Subject key identifier: 84:EF:35:AE:41:48:0E:3F:55:35:75:27:2A:4C:D4:68:3C:82:9D:B2
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1349FE9998E79D57B376C3F77D855777549C1FB5
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS395470.roa
Signing time: Fri 17 Apr 2026 08:48:36 +0000
ROA not before: Fri 17 Apr 2026 08:43:36 +0000
ROA not after: Fri 16 Apr 2027 08:48:36 +0000
asID: 395470
IP address blocks: 46.203.78.0/24 maxlen: 24
178.94.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:49:fe:99:98:e7:9d:57:b3:76:c3:f7:7d:85:57:77:54:9c:1f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 17 08:43:36 2026 GMT
Not After : Apr 16 08:48:36 2027 GMT
Subject: CN=84EF35AE41480E3F553575272A4CD4683C829DB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:11:30:6e:83:63:2f:78:31:a0:78:6a:f3:6b:
55:99:03:fb:49:b5:25:2c:ec:de:41:7c:a2:36:2b:
ad:20:df:62:31:33:0d:11:f1:0f:46:7f:50:02:0b:
4f:72:24:48:9d:bf:d9:1a:60:aa:de:76:0f:0d:2b:
9c:08:08:33:70:0e:b2:77:12:fe:e1:96:94:46:94:
2a:33:2c:40:ea:dd:bc:b4:87:78:03:7f:4a:de:f1:
15:cf:37:07:d0:ec:7c:0a:b3:9f:8d:3f:2a:c7:0f:
bd:a5:7b:77:95:25:0a:7c:c8:82:81:f8:a5:5f:a9:
da:83:a1:68:64:d1:0f:8e:e8:9f:cb:b1:cd:d2:5f:
b6:83:a3:a7:39:d2:1d:d2:c5:4f:b6:92:56:84:92:
43:e1:a1:64:fd:76:08:6e:ee:23:d5:69:06:e0:fe:
db:c7:4a:7b:06:75:b1:e3:93:a4:bb:d4:7f:d9:3f:
9a:5d:b0:0f:7e:9c:44:47:09:3b:99:65:67:80:6d:
b4:11:19:61:ba:ea:19:05:ed:c4:24:f6:78:ec:0c:
3f:22:8b:61:7d:d2:88:7b:7a:c7:ad:10:66:55:97:
d1:35:0a:c8:70:a0:2c:83:46:5c:2c:b5:23:91:0d:
94:45:45:3d:da:9c:5e:cd:22:e9:3b:7e:40:02:9d:
96:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EF:35:AE:41:48:0E:3F:55:35:75:27:2A:4C:D4:68:3C:82:9D:B2
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS395470.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.78.0/24
178.94.176.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:08:fe:2e:04:2a:0e:40:24:d6:dd:ac:f3:16:65:f3:f0:1a:
ba:b1:1d:6f:55:62:b7:b1:aa:fd:c2:14:41:75:2e:82:62:f0:
71:bf:c0:18:eb:af:d7:a3:ec:9a:61:bf:a0:3d:7e:9a:4b:8e:
22:d1:a1:87:f2:bb:f4:80:bd:19:36:ec:59:74:90:37:63:94:
5f:c5:86:be:e1:45:df:5e:3d:f3:47:fe:20:52:be:ff:fb:38:
b0:2c:69:16:80:4b:bc:00:87:df:8e:74:c0:43:87:af:3f:71:
64:e1:f3:9a:44:3e:16:e7:c0:e6:27:7b:aa:53:a7:25:d7:8c:
d9:28:ad:92:9e:0a:96:6d:82:7e:dd:0f:45:93:93:88:0f:2a:
4a:e2:cb:16:ee:28:93:1f:c1:c0:cd:e0:f1:24:1f:7e:de:cb:
e1:3a:2b:c0:6d:f4:b3:82:37:27:b5:35:1c:82:44:4a:94:21:
ea:92:b0:60:66:21:04:72:ba:30:11:b2:4f:9e:e4:11:0d:6d:
e5:d6:4a:3d:a1:0f:aa:2f:59:07:e9:42:53:58:36:5e:b9:c8:
c6:6a:16:a8:05:ab:ca:7a:81:9a:7b:56:24:8e:b1:9b:15:3b:
58:b3:46:46:a7:2d:f7:e6:bf:74:e5:bc:ab:bf:db:dc:3d:63:
fd:da:0e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:53:57 2026 by rpki-client