Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402390.roa
File: AS402390.roa (raw, json)
Hash identifier: pFAZreO4bMQ2xaxhtaAQJUCu0gCufqttylAMw1CKH5Y=
Subject key identifier: 4F:96:19:A4:03:20:44:71:71:76:18:8D:3B:B0:8C:64:36:98:DA:B6
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5E261A8860492B01CD3ABAFA3F73F2D80D893E92
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402390.roa
Signing time: Tue 22 Sep 2026 06:22:21 +0000
ROA not before: Tue 22 Sep 2026 06:17:21 +0000
ROA not after: Tue 21 Sep 2027 06:22:21 +0000
asID: 402390
IP address blocks: 91.124.145.0/24 maxlen: 24
178.95.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:26:1a:88:60:49:2b:01:cd:3a:ba:fa:3f:73:f2:d8:0d:89:3e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 22 06:17:21 2026 GMT
Not After : Sep 21 06:22:21 2027 GMT
Subject: CN=4F9619A4032044717176188D3BB08C643698DAB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:13:75:85:6f:4f:1c:23:72:d1:2f:aa:b1:f5:
ad:98:8b:db:a1:3d:b7:82:fe:86:d3:6d:f0:3f:f7:
c4:23:0a:ce:71:b3:c0:c1:18:65:8d:1e:ba:03:32:
37:d9:31:d9:87:1c:df:25:70:2c:53:4e:de:7b:c7:
1e:93:8b:62:4f:cd:5b:27:79:0b:32:7f:d7:04:9d:
3a:75:88:14:4c:1d:e8:7e:78:8a:e5:35:26:46:eb:
2a:f0:03:45:f9:24:9a:5c:9d:c6:2e:b8:79:07:1d:
0a:f6:f4:1c:cd:d2:02:22:58:bb:a4:20:32:72:97:
e1:ac:f5:32:61:21:33:d4:c2:bd:12:f3:98:ec:c0:
fd:84:4c:b3:58:ce:b6:b7:63:6f:6a:6b:12:ae:d3:
6c:8b:de:d4:42:96:00:8b:c6:79:be:f4:8c:2e:f2:
cf:8d:53:7a:48:57:55:1e:11:c9:17:39:ae:0c:e8:
02:ff:0a:d3:78:a0:6a:56:98:42:a7:57:45:e1:f0:
3e:06:8c:37:d8:b7:79:3f:2a:7a:02:d3:d8:96:78:
0d:be:19:0f:09:8c:0d:97:47:69:4c:7e:27:59:c8:
90:32:1a:5b:4a:02:81:2c:c3:69:57:a7:cf:79:18:
97:10:71:a1:0f:9a:a4:69:26:f5:e5:b1:47:b8:08:
26:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:96:19:A4:03:20:44:71:71:76:18:8D:3B:B0:8C:64:36:98:DA:B6
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402390.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.145.0/24
178.95.22.0/24
Signature Algorithm: sha256WithRSAEncryption
54:3d:a9:00:90:d2:0a:a8:25:15:d6:66:d4:f5:b8:3d:b9:9f:
1c:91:6e:d6:e5:88:84:72:9a:b4:5f:00:f1:c8:65:fe:dd:9a:
1b:06:dd:3a:89:d3:b4:0d:73:52:41:c5:28:77:ea:ee:66:4c:
45:70:64:b9:99:e8:69:f7:d9:bd:32:dc:74:c0:3d:54:02:ed:
cd:06:6f:06:3f:29:2d:94:23:bb:e7:58:b3:94:16:60:4d:92:
f9:ec:24:3a:66:f5:32:c3:be:e6:e7:c9:de:67:a8:ec:25:84:
3f:c2:b2:b0:3a:46:ba:31:ea:9b:fe:6b:d1:8a:59:a2:b2:98:
e2:3b:70:50:75:5b:1d:35:a4:48:ec:cb:34:23:2f:e7:e3:3f:
6d:56:55:95:42:38:49:f3:62:61:23:e1:59:16:59:06:3a:fb:
17:b8:c7:cc:48:43:ee:4d:70:32:cc:df:6d:16:20:dc:5a:de:
9c:06:8b:d7:01:35:4c:99:3f:aa:68:9e:46:1d:b9:fd:8b:d6:
be:03:6f:fd:da:40:e1:02:ac:26:fd:d6:a3:ac:e5:ec:53:93:
66:f8:3e:fd:91:88:00:6b:8b:ff:51:ab:15:2f:1a:9d:87:b4:
c9:95:9d:88:76:d6:4a:f2:98:e1:48:3a:15:8a:a3:25:a9:1a:
af:80:07:c2
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUXiYaiGBJKwHNOrr6P3Py2A2JPpIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA5MjIwNjE3MjFaFw0yNzA5MjEwNjIyMjFaMDMxMTAvBgNV
BAMTKDRGOTYxOUE0MDMyMDQ0NzE3MTc2MTg4RDNCQjA4QzY0MzY5OERBQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXE3WFb08cI3LRL6qx9a2Yi9uh
PbeC/obTbfA/98QjCs5xs8DBGGWNHroDMjfZMdmHHN8lcCxTTt57xx6Ti2JPzVsn
eQsyf9cEnTp1iBRMHeh+eIrlNSZG6yrwA0X5JJpcncYuuHkHHQr29BzN0gIiWLuk
IDJyl+Gs9TJhITPUwr0S85jswP2ETLNYzra3Y29qaxKu02yL3tRClgCLxnm+9Iwu
8s+NU3pIV1UeEckXOa4M6AL/CtN4oGpWmEKnV0Xh8D4GjDfYt3k/KnoC09iWeA2+
GQ8JjA2XR2lMfidZyJAyGltKAoEsw2lXp895GJcQcaEPmqRpJvXlsUe4CCZ3AgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUT5YZpAMgRHFxdhiNO7CMZDaY2rYwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNDAyMzkwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW3yR
AwQAsl8WMA0GCSqGSIb3DQEBCwUAA4IBAQBUPakAkNIKqCUV1mbU9bg9uZ8ckW7W
5YiEcpq0XwDxyGX+3ZobBt06idO0DXNSQcUod+ruZkxFcGS5mehp99m9Mtx0wD1U
Au3NBm8GPyktlCO751izlBZgTZL57CQ6ZvUyw77m58neZ6jsJYQ/wrKwOka6Meqb
/mvRilmispjiO3BQdVsdNaRI7Ms0Iy/n4z9tVlWVQjhJ82JhI+FZFlkGOvsXuMfM
SEPuTXAyzN9tFiDcWt6cBovXATVMmT+qaJ5GHbn9i9a+A2/92kDhAqwm/dajrOXs
U5Nm+D79kYgAa4v/UasVLxqdh7TJlZ2IdtZK8pjhSDoViqMlqRqvgAfC
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:34:33 2026 by rpki-client