Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS397630.roa
File: AS397630.roa (raw, json)
Hash identifier: pQ6umlYIojGcKJuqmaAkmxvnEpP22fmMhq1GZBANmPc=
Subject key identifier: 80:34:44:87:5D:D1:1C:11:CB:9E:1B:01:48:E3:C8:72:39:A6:54:8D
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 56986A4F451D90E3589D1E3C9D7B7563C4D319BC
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS397630.roa
Signing time: Mon 13 Apr 2026 11:41:13 +0000
ROA not before: Mon 13 Apr 2026 11:36:13 +0000
ROA not after: Mon 12 Apr 2027 11:41:13 +0000
asID: 397630
IP address blocks: 91.124.36.0/24 maxlen: 24
92.112.141.0/24 maxlen: 24
95.135.12.0/24 maxlen: 24
95.135.19.0/24 maxlen: 24
95.135.25.0/24 maxlen: 24
95.135.183.0/24 maxlen: 24
178.92.158.0/24 maxlen: 24
178.92.195.0/24 maxlen: 24
178.92.219.0/24 maxlen: 24
178.92.246.0/24 maxlen: 24
178.93.30.0/24 maxlen: 24
178.94.149.0/24 maxlen: 24
178.95.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:98:6a:4f:45:1d:90:e3:58:9d:1e:3c:9d:7b:75:63:c4:d3:19:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 13 11:36:13 2026 GMT
Not After : Apr 12 11:41:13 2027 GMT
Subject: CN=803444875DD11C11CB9E1B0148E3C87239A6548D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:02:15:3c:ea:95:00:05:f6:32:38:12:af:98:
09:e9:f7:5d:9f:65:08:57:a3:af:e0:b9:59:c1:bb:
aa:e5:53:b5:0c:87:38:c3:02:2e:51:53:45:25:ff:
83:16:c3:b4:a3:ad:4a:40:4f:0f:36:e0:8a:2d:e3:
57:55:f0:a2:7b:14:80:8f:89:7d:5f:fe:6b:be:7c:
62:0f:cd:76:0e:ca:c6:6e:b1:be:10:fb:88:68:be:
08:ac:39:52:ff:3f:6f:01:57:f4:b5:a9:20:05:c0:
87:55:e4:af:e7:3f:3d:70:19:b6:31:c8:c9:5b:e3:
f6:f3:84:95:1d:b2:a7:c4:47:0a:12:90:95:5e:ce:
a8:aa:ce:0c:c0:67:c3:22:bb:04:8e:3a:4c:ae:18:
83:5f:bc:14:21:88:a5:11:1e:0f:9b:74:f5:5c:00:
c9:54:14:55:9b:8c:6a:31:34:06:fd:6e:45:f9:71:
0c:1b:15:c7:f4:65:70:96:bc:0d:97:81:a6:f6:5f:
bf:0e:b2:ce:ff:2a:e5:cf:e4:86:36:fb:47:55:a0:
9a:43:40:47:ff:31:fc:5f:2e:9c:d4:ff:e3:05:77:
14:70:59:a1:1d:4c:91:12:07:5e:ea:ba:29:80:84:
e1:1c:41:1b:9d:e0:9b:ff:b6:cc:96:3b:11:36:e2:
af:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:34:44:87:5D:D1:1C:11:CB:9E:1B:01:48:E3:C8:72:39:A6:54:8D
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS397630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.36.0/24
92.112.141.0/24
95.135.12.0/24
95.135.19.0/24
95.135.25.0/24
95.135.183.0/24
178.92.158.0/24
178.92.195.0/24
178.92.219.0/24
178.92.246.0/24
178.93.30.0/24
178.94.149.0/24
178.95.225.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:97:61:b6:50:33:34:1c:d1:32:d6:1a:bc:d4:d7:67:9f:b6:
2a:be:3d:10:20:bb:10:ad:d9:eb:51:e1:1b:f1:ee:6e:38:e5:
e2:73:d7:3b:62:c0:a5:45:9c:a2:f7:ef:6b:fb:ed:ae:0d:74:
4e:5a:ba:38:4e:67:f7:c4:78:9e:36:b6:4f:2c:10:bf:66:fa:
36:db:44:44:25:f1:14:0b:14:66:20:60:95:de:44:31:ad:41:
a7:ae:25:0d:e3:97:39:77:29:db:60:f1:01:7c:36:f9:8c:d7:
8b:20:2a:24:8a:e2:82:7d:dd:64:5b:80:b0:36:53:b0:18:33:
03:ef:23:65:4f:09:11:f7:79:de:9a:e9:35:a4:6a:9b:d7:9d:
15:26:9a:1d:30:b5:c4:f6:de:1e:68:3f:a4:77:10:89:7c:39:
6f:37:2d:cf:e4:5a:36:ed:40:f0:92:d7:f1:1a:64:e5:75:cd:
3c:cc:1d:cf:a4:a2:1e:b4:d7:9a:81:c2:af:00:2d:05:51:c3:
fe:70:ea:82:72:17:49:2c:45:eb:ec:ff:2a:ac:79:a2:04:b9:
36:17:cb:8a:61:da:1d:6a:4a:db:3c:61:8c:21:ca:c0:75:18:
74:8b:ab:21:90:43:7f:04:85:3a:e1:3e:69:f2:df:6c:69:72:
ad:b3:4f:d2
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUVphqT0UdkONYnR48nXt1Y8TTGbwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA0MTMxMTM2MTNaFw0yNzA0MTIxMTQxMTNaMDMxMTAvBgNV
BAMTKDgwMzQ0NDg3NUREMTFDMTFDQjlFMUIwMTQ4RTNDODcyMzlBNjU0OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpAhU86pUABfYyOBKvmAnp912f
ZQhXo6/guVnBu6rlU7UMhzjDAi5RU0Ul/4MWw7SjrUpATw824Iot41dV8KJ7FICP
iX1f/mu+fGIPzXYOysZusb4Q+4hovgisOVL/P28BV/S1qSAFwIdV5K/nPz1wGbYx
yMlb4/bzhJUdsqfERwoSkJVezqiqzgzAZ8MiuwSOOkyuGINfvBQhiKURHg+bdPVc
AMlUFFWbjGoxNAb9bkX5cQwbFcf0ZXCWvA2Xgab2X78Oss7/KuXP5IY2+0dVoJpD
QEf/MfxfLpzU/+MFdxRwWaEdTJESB17quimAhOEcQRud4Jv/tsyWOxE24q+DAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUgDREh13RHBHLnhsBSOPIcjmmVI0wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMzk3NjMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQAW3wk
AwQAXHCNAwQAX4cMAwQAX4cTAwQAX4cZAwQAX4e3AwQAslyeAwQAslzDAwQAslzb
AwQAslz2AwQAsl0eAwQAsl6VAwQAsl/hMA0GCSqGSIb3DQEBCwUAA4IBAQCfl2G2
UDM0HNEy1hq81Ndnn7Yqvj0QILsQrdnrUeEb8e5uOOXic9c7YsClRZyi9+9r++2u
DXROWro4Tmf3xHieNrZPLBC/Zvo220REJfEUCxRmIGCV3kQxrUGnriUN45c5dynb
YPEBfDb5jNeLICokiuKCfd1kW4CwNlOwGDMD7yNlTwkR93nemuk1pGqb150VJpod
MLXE9t4eaD+kdxCJfDlvNy3P5Fo27UDwktfxGmTldc08zB3PpKIetNeagcKvAC0F
UcP+cOqCchdJLEXr7P8qrHmiBLk2F8uKYdodakrbPGGMIcrAdRh0i6shkEN/BIU6
4T5p8t9saXKts0/S
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:06:43 2026 by rpki-client