Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS46370.roa
File: AS46370.roa (raw, json)
Hash identifier: VDfRTmg3LxTkyf7/iap3XaRrC6EwstcWW+FohHYyIQ0=
Subject key identifier: 16:AA:BC:B2:AB:98:23:AA:A5:91:4A:9F:95:03:F6:A6:92:EA:7D:BE
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 31DBF59CC781BAFF2CE7809D706ED1F24DCFDD2A
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS46370.roa
Signing time: Fri 15 May 2026 01:50:16 +0000
ROA not before: Fri 15 May 2026 01:45:16 +0000
ROA not after: Fri 14 May 2027 01:50:16 +0000
asID: 46370
IP address blocks: 95.135.199.0/24 maxlen: 24
178.92.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:db:f5:9c:c7:81:ba:ff:2c:e7:80:9d:70:6e:d1:f2:4d:cf:dd:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 15 01:45:16 2026 GMT
Not After : May 14 01:50:16 2027 GMT
Subject: CN=16AABCB2AB9823AAA5914A9F9503F6A692EA7DBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:24:44:ac:65:89:36:ae:ca:b8:b2:ea:f1:
14:14:b0:71:93:e8:48:ff:f1:51:c0:41:ad:fc:9e:
2c:79:25:11:02:d7:12:9e:d1:f1:aa:79:f5:17:23:
c2:41:59:58:8f:3c:c3:96:33:dd:4d:91:b7:9b:68:
f3:1b:dd:5c:0f:e4:d1:bf:4e:2d:4c:78:23:14:68:
c8:43:16:48:c9:76:0c:5a:bf:74:2b:d2:b3:f0:68:
62:4c:5e:28:0c:55:31:be:d6:6e:f7:78:94:b0:fc:
50:0d:94:b8:33:f0:d2:57:ef:a9:f0:71:1d:6e:d1:
7a:61:0e:8b:c4:e0:1d:b0:f0:57:f8:4a:eb:7c:18:
8e:15:f3:39:2c:46:a8:00:d5:7a:db:e0:a9:b8:45:
58:b9:5c:7d:36:3c:de:d1:bc:9b:3e:f3:5d:1e:18:
ae:ee:1f:5d:cf:38:40:ac:24:64:fb:61:2e:c1:19:
ef:da:2a:33:28:ea:38:42:78:87:13:39:5b:ac:e9:
80:e8:27:ed:db:92:83:0c:f4:a5:6c:57:41:3f:67:
6e:bd:ec:ed:2e:0c:ef:6e:0f:81:71:c8:42:e5:49:
20:73:4b:30:e2:aa:64:7a:47:64:e8:4c:4a:77:80:
73:6e:52:8f:ea:27:ef:c4:32:26:d3:53:3d:6a:e9:
6d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AA:BC:B2:AB:98:23:AA:A5:91:4A:9F:95:03:F6:A6:92:EA:7D:BE
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS46370.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.199.0/24
178.92.145.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d4:7d:1b:ae:9f:74:08:9b:41:5d:0d:20:53:3f:66:91:3f:
14:18:f0:14:03:ca:99:e7:04:ef:c9:0f:e0:e4:96:f0:1f:3c:
24:2e:20:31:aa:f0:37:e9:c5:83:d1:d4:c8:7a:2b:ee:77:73:
d1:31:66:1e:ab:84:d8:36:31:2b:2e:42:3d:d2:ac:0d:46:8d:
7d:ae:87:1b:08:9d:42:49:ba:5c:88:01:45:3b:82:26:f0:de:
23:33:04:85:e2:43:44:df:f0:1b:21:98:1e:aa:f3:7f:7e:2a:
d9:ba:fe:98:b4:e3:06:76:47:87:fe:3a:5f:df:1f:03:eb:ce:
db:74:0a:99:b9:b2:3a:54:69:54:e7:b9:b6:a8:74:06:60:5a:
39:74:e6:5b:43:b5:12:19:e3:20:71:83:20:49:74:ae:d1:ef:
7e:22:23:81:27:b9:15:e4:d6:b0:36:fc:20:b0:e0:29:d9:cc:
d5:5f:10:4f:71:35:9c:c0:27:7a:d1:a6:1f:45:e9:82:25:04:
85:bf:d7:b7:44:1d:72:aa:74:44:cb:87:46:42:0f:97:28:24:
00:53:88:46:41:dc:ff:cc:28:7e:c6:6c:63:60:a3:84:db:38:
43:25:a1:3c:9e:6e:d3:cf:8d:1a:bc:08:90:32:8a:be:81:97:
2b:27:83:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:37:55 2026 by rpki-client