Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401776.roa
File: AS401776.roa (raw, json)
Hash identifier: vNBPk+YIkSTNmVFxz+LENu7ht7USm1aIbPbD0obeH8c=
Subject key identifier: A1:9C:56:D2:8E:18:04:81:74:95:56:C5:17:EA:FE:03:B8:F0:B9:17
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7339B9CF6A95F4FBB22099327806FD70124F187B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401776.roa
Signing time: Mon 19 Oct 2026 07:13:12 +0000
ROA not before: Mon 19 Oct 2026 07:08:12 +0000
ROA not after: Mon 18 Oct 2027 07:13:12 +0000
asID: 401776
IP address blocks: 178.94.200.0/24 maxlen: 24
178.94.205.0/24 maxlen: 24
178.95.109.0/24 maxlen: 24
178.95.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 04:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:39:b9:cf:6a:95:f4:fb:b2:20:99:32:78:06:fd:70:12:4f:18:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 19 07:08:12 2026 GMT
Not After : Oct 18 07:13:12 2027 GMT
Subject: CN=A19C56D28E180481749556C517EAFE03B8F0B917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4d:b6:00:6e:32:6b:45:06:0d:8a:49:74:93:
bd:b3:d5:38:89:63:db:fe:67:7b:38:66:97:48:54:
16:06:02:0b:82:5a:50:2c:70:67:3e:00:20:f6:73:
77:4a:89:35:bb:ba:71:d6:5f:39:9d:bc:52:ad:12:
c8:1e:01:d9:36:9b:cc:4c:14:82:68:90:24:cd:b7:
d6:50:f7:3b:1c:71:77:89:3e:4d:17:86:4a:78:4b:
c2:47:35:de:96:de:7e:04:77:e9:ce:ee:38:28:af:
aa:c8:2f:02:84:bc:61:16:b6:49:16:36:ed:de:a3:
51:c8:c4:e3:8e:4c:5c:c1:10:42:0f:12:f2:3f:80:
d7:27:7a:cb:5b:b0:06:b8:41:86:6d:f3:5c:a1:dc:
00:8c:2b:fe:47:f5:4a:0f:36:da:53:78:cb:c8:78:
0e:94:f7:cc:19:97:a6:9c:11:f3:48:c3:f1:66:4e:
90:dc:4c:24:6b:45:a2:cc:5a:85:34:75:be:7d:64:
f2:92:8d:72:fd:c3:62:9c:6f:2f:d1:a3:1d:95:6a:
b8:b9:66:64:7e:17:d7:3d:33:3c:8a:58:34:9a:0f:
3c:96:70:89:25:97:d4:2a:90:ba:04:e6:91:dd:c9:
30:4f:2f:0f:b3:3f:09:6f:de:9c:de:d6:7c:14:e2:
5c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9C:56:D2:8E:18:04:81:74:95:56:C5:17:EA:FE:03:B8:F0:B9:17
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.94.200.0/24
178.94.205.0/24
178.95.109.0/24
178.95.135.0/24
Signature Algorithm: sha256WithRSAEncryption
76:f4:48:09:54:24:f8:78:8d:b1:72:76:2c:58:38:7d:f3:79:
62:85:0d:b3:9e:ec:dd:da:92:85:5b:c0:77:ba:3b:68:0a:25:
8e:e8:4e:a7:bb:1e:13:87:0d:76:dc:d7:76:f8:8a:b6:6d:9f:
c2:95:88:b1:a8:dc:ce:a0:2f:de:33:fb:6f:5e:e5:c3:04:c6:
8d:67:5e:e5:d3:d1:34:fd:5f:09:fb:53:29:1a:8e:7b:24:01:
b7:02:e4:37:99:73:db:73:e4:1e:a8:68:62:64:44:9e:96:28:
0f:19:0c:41:7a:d6:eb:dd:e5:c7:ef:ad:9c:60:82:c1:e0:5f:
e3:46:a1:71:40:2f:ed:61:87:1f:7f:95:ff:0f:ef:f0:b0:5a:
1f:21:dc:85:b6:68:0d:4c:62:62:42:86:96:7a:63:f6:34:84:
a7:4f:7b:1e:d0:ed:f9:45:68:19:b8:55:25:46:05:45:3c:0e:
01:58:ba:85:d2:b3:03:be:49:f7:b2:f5:a1:73:2f:d8:71:39:
26:8e:d0:f1:67:96:56:14:f5:0a:5e:73:75:67:26:ff:b0:1d:
61:f9:40:83:45:59:a8:d9:98:96:4d:3a:2e:57:e2:46:8f:c8:
07:b8:8e:41:cf:35:c5:04:47:4e:d8:c6:6c:29:81:be:49:12:
19:45:27:a0
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIUczm5z2qV9PuyIJkyeAb9cBJPGHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjEwMTkwNzA4MTJaFw0yNzEwMTgwNzEzMTJaMDMxMTAvBgNV
BAMTKEExOUM1NkQyOEUxODA0ODE3NDk1NTZDNTE3RUFGRTAzQjhGMEI5MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiTbYAbjJrRQYNikl0k72z1TiJ
Y9v+Z3s4ZpdIVBYGAguCWlAscGc+ACD2c3dKiTW7unHWXzmdvFKtEsgeAdk2m8xM
FIJokCTNt9ZQ9zsccXeJPk0Xhkp4S8JHNd6W3n4Ed+nO7jgor6rILwKEvGEWtkkW
Nu3eo1HIxOOOTFzBEEIPEvI/gNcnestbsAa4QYZt81yh3ACMK/5H9UoPNtpTeMvI
eA6U98wZl6acEfNIw/FmTpDcTCRrRaLMWoU0db59ZPKSjXL9w2Kcby/Rox2Vari5
ZmR+F9c9MzyKWDSaDzyWcIkll9QqkLoE5pHdyTBPLw+zPwlv3pze1nwU4lxjAgMB
AAGjggIcMIICGDAdBgNVHQ4EFgQUoZxW0o4YBIF0lVbFF+r+A7jwuRcwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNDAxNzc2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAsl7I
AwQAsl7NAwQAsl9tAwQAsl+HMA0GCSqGSIb3DQEBCwUAA4IBAQB29EgJVCT4eI2x
cnYsWDh983lihQ2znuzd2pKFW8B3ujtoCiWO6E6nux4Thw123Nd2+Iq2bZ/ClYix
qNzOoC/eM/tvXuXDBMaNZ17l09E0/V8J+1MpGo57JAG3AuQ3mXPbc+QeqGhiZESe
ligPGQxBetbr3eXH762cYILB4F/jRqFxQC/tYYcff5X/D+/wsFofIdyFtmgNTGJi
QoaWemP2NISnT3se0O35RWgZuFUlRgVFPA4BWLqF0rMDvkn3svWhcy/YcTkmjtDx
Z5ZWFPUKXnN1Zyb/sB1h+UCDRVmo2ZiWTTouV+JGj8gHuI5BzzXFBEdO2MZsKYG+
SRIZRSeg
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:20:05 2026 by rpki-client