Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402866.roa
File: AS402866.roa (raw, json)
Hash identifier: mPOePvHsghMjh6UXOWsp60NM1qd8vDXATBmq8mEiIUs=
Subject key identifier: 93:B7:D2:52:D7:77:A1:7E:81:EF:BD:7F:DF:AD:CA:97:D8:F2:17:1F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 50C8CF2D16217B250A62160C21BB9AB4D4DDB1F1
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402866.roa
Signing time: Sun 20 Sep 2026 05:15:18 +0000
ROA not before: Sun 20 Sep 2026 05:10:18 +0000
ROA not after: Sun 19 Sep 2027 05:15:18 +0000
asID: 402866
IP address blocks: 91.124.168.0/24 maxlen: 24
91.124.186.0/24 maxlen: 24
92.112.232.0/24 maxlen: 24
92.113.142.0/24 maxlen: 24
95.134.49.0/24 maxlen: 24
95.134.195.0/24 maxlen: 24
95.135.165.0/24 maxlen: 24
178.95.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:c8:cf:2d:16:21:7b:25:0a:62:16:0c:21:bb:9a:b4:d4:dd:b1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 20 05:10:18 2026 GMT
Not After : Sep 19 05:15:18 2027 GMT
Subject: CN=93B7D252D777A17E81EFBD7FDFADCA97D8F2171F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d2:03:1a:a3:52:e2:bc:5e:c3:37:af:cb:31:
12:e3:ca:09:c0:74:6a:1c:b9:bf:f2:4d:73:70:b1:
43:e8:0e:30:7d:13:32:18:db:cc:20:22:43:0c:84:
e5:51:e5:fa:f7:ea:36:2f:d5:e5:6b:c3:3e:00:c5:
a3:e9:14:a0:bc:3b:e3:29:11:26:61:fd:77:f6:d0:
2d:a5:cf:ec:2a:f0:8c:67:95:47:5e:7a:da:d6:99:
ef:4d:65:27:7b:58:38:13:74:65:02:50:34:ff:91:
cf:6a:97:45:56:e8:4f:97:60:76:86:93:2c:b0:11:
f2:ad:4b:8b:46:87:17:1c:18:c1:00:0c:42:b3:8e:
5f:36:51:46:95:65:35:b1:da:80:f5:d5:03:8c:0a:
0e:cd:77:96:6e:a5:82:6b:0a:0a:b2:51:64:b0:a4:
e3:0d:d0:90:4d:97:ca:7a:13:6c:b3:40:4f:b3:4b:
88:4c:62:e2:93:34:80:0c:84:91:b3:15:9e:2d:e6:
a5:51:e8:75:ba:74:ba:83:8e:cb:59:0d:54:a9:51:
e0:f8:ed:0e:ca:43:2c:4c:cd:09:89:14:d0:25:19:
f2:bc:2a:3a:db:20:74:05:95:3b:53:ed:5f:3b:6f:
3c:e9:5e:88:c5:62:74:97:91:d7:ac:0b:58:f5:03:
15:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B7:D2:52:D7:77:A1:7E:81:EF:BD:7F:DF:AD:CA:97:D8:F2:17:1F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402866.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.168.0/24
91.124.186.0/24
92.112.232.0/24
92.113.142.0/24
95.134.49.0/24
95.134.195.0/24
95.135.165.0/24
178.95.194.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:38:30:5d:32:50:66:d4:18:a2:43:66:7d:f0:5a:ed:ef:39:
ff:e7:5e:7a:8e:5a:1d:65:56:cd:47:83:e9:e5:67:5b:7e:42:
f1:35:77:9d:15:6c:19:a9:8c:5c:c3:07:dd:6a:64:26:b2:c6:
5f:58:f3:83:4f:45:66:d1:c2:c0:5f:ca:a8:01:02:9f:c8:e3:
4f:de:01:fa:59:82:f8:52:c7:c3:98:3b:05:31:dc:b8:82:65:
c5:39:31:0e:65:16:14:62:69:94:6e:04:bb:73:11:e6:41:8b:
d2:2f:74:6e:a2:c1:e3:18:36:8a:0b:43:d5:c5:04:e4:32:ff:
92:1a:75:0a:a4:21:10:98:c1:7a:9a:76:0e:bc:70:a9:59:e6:
a4:31:2c:a2:ec:c6:3d:70:d7:d6:89:19:0c:4e:63:0f:60:4b:
7c:14:20:2a:d9:f6:3d:2a:04:17:a5:21:14:ac:80:c9:bf:8d:
ae:a7:c9:05:15:72:08:17:3e:e1:a2:52:ec:2b:64:e6:ed:45:
b8:3f:7f:0d:91:b4:80:e4:f0:67:6b:3b:7e:ae:48:fe:36:77:
e3:3c:a9:55:3e:26:0c:49:17:0e:1e:ee:f4:f4:19:61:d5:0e:
e3:95:a4:f0:74:2f:6e:b6:e6:1a:29:e5:65:72:c4:e9:b4:c9:
15:67:04:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:27:26 2026 by rpki-client