Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7922.roa
File: AS7922.roa (raw, json)
Hash identifier: cpkHnlHlU6+dIrJbXgtxzzgNifCu2wHItScD3PlygiA=
Subject key identifier: 62:6F:5F:DA:B5:58:BD:6A:F6:B3:0E:0A:60:C6:3C:1F:DC:00:78:11
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2EF7BDA1F6028B467170B63C905172D83A365075
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7922.roa
Signing time: Sat 01 Nov 2025 00:08:35 +0000
ROA not before: Sat 01 Nov 2025 00:03:35 +0000
ROA not after: Sat 31 Oct 2026 00:08:35 +0000
asID: 7922
IP address blocks: 46.202.218.0/24 maxlen: 24
92.113.86.0/24 maxlen: 24
92.113.89.0/24 maxlen: 24
92.113.114.0/24 maxlen: 24
178.93.77.0/24 maxlen: 24
178.93.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:f7:bd:a1:f6:02:8b:46:71:70:b6:3c:90:51:72:d8:3a:36:50:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 1 00:03:35 2025 GMT
Not After : Oct 31 00:08:35 2026 GMT
Subject: CN=626F5FDAB558BD6AF6B30E0A60C63C1FDC007811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7b:b0:cb:cf:dc:7e:96:00:7e:d7:98:be:93:
da:50:88:cc:4b:8b:2a:7b:6d:de:cd:48:ee:a9:f3:
81:52:37:dc:00:2e:33:0e:2b:99:1e:52:12:d8:4d:
c7:07:71:9e:51:3d:25:cf:95:f3:30:95:b4:14:a2:
d5:31:48:2c:25:73:09:38:bd:c9:7c:59:75:f8:f8:
70:92:dd:9c:c4:79:f0:eb:92:60:60:2a:b8:e9:43:
81:f5:35:28:83:98:31:c4:b1:cc:3e:55:b4:34:97:
8e:0c:de:06:94:8c:1f:4a:03:81:f2:13:94:45:73:
50:c9:08:a6:ba:82:d0:aa:84:a4:1d:76:c5:7b:17:
06:c4:46:68:c0:c7:cd:55:b1:d4:3e:d3:a5:29:14:
45:d5:e9:27:f7:83:04:ee:78:78:f2:a6:83:fc:16:
ef:0a:76:41:b8:e9:fa:2e:46:c3:6c:bc:3d:63:e8:
b5:0a:b4:60:16:ff:49:1c:91:f3:04:23:30:59:9e:
57:a5:bb:c1:34:54:d7:3b:a9:94:7f:f1:a8:ae:3f:
95:a8:d7:c8:b3:bb:b1:ae:26:11:ff:bb:07:c7:1d:
c6:70:e1:a9:00:b7:15:e3:c0:1c:44:13:c2:10:92:
88:21:de:aa:ea:1d:b2:71:a7:cf:20:3d:a5:ab:ad:
90:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6F:5F:DA:B5:58:BD:6A:F6:B3:0E:0A:60:C6:3C:1F:DC:00:78:11
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7922.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.218.0/24
92.113.86.0/24
92.113.89.0/24
92.113.114.0/24
178.93.77.0/24
178.93.115.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:70:bb:01:cb:48:a8:d4:74:35:2c:6f:e8:f5:c5:19:3c:32:
bb:2b:10:b2:4c:2a:45:86:b7:ba:18:10:d3:cf:26:c9:f5:e4:
3c:12:69:ea:91:2d:0f:91:4b:18:c6:68:b5:76:06:3a:ad:19:
de:24:22:02:98:39:94:ba:ae:3e:a1:87:0d:fb:24:1c:d4:79:
6e:80:dc:ca:e7:aa:3e:ad:a6:4e:81:d7:60:9c:38:3c:2d:21:
66:7c:41:fe:52:48:3a:1e:80:67:c8:19:1d:9a:22:ba:c9:2f:
8d:e8:eb:f3:c8:37:8d:7a:81:69:9c:2f:a6:84:21:98:d1:cb:
5a:1c:5c:f3:53:c9:3e:b2:be:10:5b:0e:b6:80:3e:63:61:e2:
b9:78:e5:30:d5:a9:63:45:4a:7a:d0:ff:9c:18:95:98:3a:70:
b2:a2:b1:85:ce:f7:24:d7:2c:d5:1f:50:49:26:e1:24:3e:66:
5f:e8:c1:2c:c6:e4:a9:9d:75:25:3e:ee:48:80:40:63:38:73:
66:2d:38:08:2a:85:fc:d6:c7:15:50:f9:3e:e4:3b:c4:c8:87:
eb:89:e8:48:d7:3f:55:5c:77:31:20:42:6f:57:f0:84:f3:8d:
a6:1a:fe:75:ac:bc:9d:52:94:14:58:4a:25:0b:7c:d0:36:c2:
9a:40:1c:32
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIULve9ofYCi0ZxcLY8kFFy2Do2UHUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTExMDEwMDAzMzVaFw0yNjEwMzEwMDA4MzVaMDMxMTAvBgNV
BAMTKDYyNkY1RkRBQjU1OEJENkFGNkIzMEUwQTYwQzYzQzFGREMwMDc4MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMe7DLz9x+lgB+15i+k9pQiMxL
iyp7bd7NSO6p84FSN9wALjMOK5keUhLYTccHcZ5RPSXPlfMwlbQUotUxSCwlcwk4
vcl8WXX4+HCS3ZzEefDrkmBgKrjpQ4H1NSiDmDHEscw+VbQ0l44M3gaUjB9KA4Hy
E5RFc1DJCKa6gtCqhKQddsV7FwbERmjAx81VsdQ+06UpFEXV6Sf3gwTueHjypoP8
Fu8KdkG46fouRsNsvD1j6LUKtGAW/0kckfMEIzBZnlelu8E0VNc7qZR/8aiuP5Wo
18izu7GuJhH/uwfHHcZw4akAtxXjwBxEE8IQkogh3qrqHbJxp88gPaWrrZB5AgMB
AAGjggImMIICIjAdBgNVHQ4EFgQUYm9f2rVYvWr2sw4KYMY8H9wAeBEwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNzkyMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA9BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAC7K2gME
AFxxVgMEAFxxWQMEAFxxcgMEALJdTQMEALJdczANBgkqhkiG9w0BAQsFAAOCAQEA
bXC7ActIqNR0NSxv6PXFGTwyuysQskwqRYa3uhgQ088myfXkPBJp6pEtD5FLGMZo
tXYGOq0Z3iQiApg5lLquPqGHDfskHNR5boDcyueqPq2mToHXYJw4PC0hZnxB/lJI
Oh6AZ8gZHZoiuskvjejr88g3jXqBaZwvpoQhmNHLWhxc81PJPrK+EFsOtoA+Y2Hi
uXjlMNWpY0VKetD/nBiVmDpwsqKxhc73JNcs1R9QSSbhJD5mX+jBLMbkqZ11JT7u
SIBAYzhzZi04CCqF/NbHFVD5PuQ7xMiH64noSNc/VVx3MSBCb1fwhPONphr+day8
nVKUFFhKJQt80DbCmkAcMg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:05:08 2025 by rpki-client