Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53107.roa
File: AS53107.roa (raw, json)
Hash identifier: ofmmyWygNnWUN9hMZYkveaxLok3+YDPcd9UyVRmzdSg=
Subject key identifier: 94:D9:4A:AD:82:53:A8:F7:EB:95:4A:45:40:06:26:D7:B1:41:90:E4
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 73EFFA6F3855A527A38EC65F6D6651545566588B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53107.roa
Signing time: Sat 25 Jul 2026 02:00:02 +0000
ROA not before: Sat 25 Jul 2026 01:55:02 +0000
ROA not after: Sat 24 Jul 2027 02:00:02 +0000
asID: 53107
IP address blocks: 178.92.192.0/24 maxlen: 24
178.92.204.0/24 maxlen: 24
178.95.22.0/24 maxlen: 24
178.95.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:ef:fa:6f:38:55:a5:27:a3:8e:c6:5f:6d:66:51:54:55:66:58:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 25 01:55:02 2026 GMT
Not After : Jul 24 02:00:02 2027 GMT
Subject: CN=94D94AAD8253A8F7EB954A45400626D7B14190E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c5:b8:b2:d8:1b:3a:f9:f4:45:bb:72:d7:e1:
27:f5:5b:be:77:38:60:6d:15:4c:d4:7f:f9:6a:c8:
e1:96:35:bc:87:05:70:22:8e:54:53:bc:50:7a:2f:
14:2d:50:76:c0:a5:98:4d:5d:14:c3:06:77:75:8a:
05:91:b3:87:f5:e1:b4:77:0c:61:bd:57:2b:5e:59:
cf:5b:8d:ce:ca:88:27:96:72:53:1a:c6:74:72:5d:
b8:98:77:c3:41:a3:75:31:9a:88:99:91:04:24:bc:
51:03:92:6c:b5:c3:18:bb:40:48:2c:92:af:61:4e:
01:52:df:c6:7e:f2:3c:ed:46:60:dc:f1:27:ca:89:
c5:dc:28:6e:63:cc:a3:10:66:0c:a1:8a:b2:a3:20:
41:3b:d8:ba:6e:b3:a7:73:9d:67:bb:8a:3c:13:a1:
4c:62:bf:ec:9f:9e:1c:4b:47:77:51:48:13:10:08:
ed:ac:0d:94:47:5d:58:f8:ae:11:c0:37:07:dc:8b:
bd:09:26:79:29:af:f3:d6:04:f0:ff:34:da:32:97:
0e:fb:20:e0:67:c0:b2:04:fc:1f:cf:bc:38:cc:23:
7c:0c:02:f5:c0:53:2a:3e:ae:13:ee:8b:00:1f:0a:
3b:02:b3:d0:a1:02:9c:cd:7a:0c:a3:a1:92:b1:82:
04:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D9:4A:AD:82:53:A8:F7:EB:95:4A:45:40:06:26:D7:B1:41:90:E4
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53107.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.192.0/24
178.92.204.0/24
178.95.22.0/24
178.95.26.0/24
Signature Algorithm: sha256WithRSAEncryption
05:6a:96:22:9d:61:02:4d:08:aa:4a:c3:0e:33:ac:7d:ab:84:
df:06:26:0e:40:c9:0d:16:2d:fb:1d:bd:d7:fc:bc:a5:c8:35:
32:23:b0:c4:a9:08:77:02:06:4b:3d:9e:5a:3d:47:3c:d0:ca:
69:a9:be:4b:58:8f:85:ca:b7:ef:a8:7d:84:a6:78:5d:e1:25:
fd:b6:6f:e5:08:0c:54:15:22:f4:d5:79:ac:a3:eb:f4:22:08:
f7:37:e7:65:9e:ef:ff:54:d2:17:39:86:24:be:a3:e5:fc:e8:
70:d5:10:f7:46:0e:ea:3f:c4:a5:a4:d2:c7:1a:eb:9c:bf:d6:
da:b7:97:16:08:dc:e3:f1:d5:0b:7d:7d:79:5a:76:64:0f:6b:
9e:39:bb:22:3f:47:2a:6c:e6:50:b9:2e:b2:d7:13:b7:6b:3c:
03:47:b5:96:9d:4b:b1:d9:93:6b:a8:b4:95:cc:bb:0a:dd:44:
82:bd:73:a1:6e:13:a7:81:6f:f4:26:f5:7e:36:f4:63:9a:75:
ce:86:eb:7c:a3:b3:2a:8c:0c:60:58:f7:18:a7:b9:c5:32:16:
2c:d9:13:a8:3d:32:26:39:ab:04:f9:48:89:fc:79:b0:64:64:
e0:4f:a2:bc:df:97:ab:6c:5c:b6:e6:d3:f0:78:cf:8f:22:b5:
84:02:ad:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:07:34 2026 by rpki-client