Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS984.roa
File: AS984.roa (raw, json)
Hash identifier: OFDYV9gu7FK14s/J/tuUw0XomOhctgtNDZI6xv1hFxc=
Subject key identifier: 8D:24:26:B7:4E:09:A7:60:28:4B:65:D6:48:E1:C5:C1:6C:AD:BE:40
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 366CD8CDFD22E96D4B3B79ADFE23BF802B8A3FFF
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS984.roa
Signing time: Mon 23 Feb 2026 13:09:20 +0000
ROA not before: Mon 23 Feb 2026 13:04:20 +0000
ROA not after: Mon 22 Feb 2027 13:09:20 +0000
asID: 984
IP address blocks: 92.113.59.0/24 maxlen: 24
95.134.61.0/24 maxlen: 24
95.134.112.0/24 maxlen: 24
178.92.199.0/24 maxlen: 24
178.92.207.0/24 maxlen: 24
178.93.76.0/24 maxlen: 24
178.95.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:6c:d8:cd:fd:22:e9:6d:4b:3b:79:ad:fe:23:bf:80:2b:8a:3f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 23 13:04:20 2026 GMT
Not After : Feb 22 13:09:20 2027 GMT
Subject: CN=8D2426B74E09A760284B65D648E1C5C16CADBE40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:f1:16:41:f3:48:5d:53:38:fc:49:3f:16:
e7:76:cf:34:8f:84:d0:3b:4e:85:73:f8:8a:1d:07:
d5:d0:ac:01:79:3d:0a:4b:a0:4a:ce:4b:54:e5:78:
ca:9c:d9:0b:8a:81:2b:ed:d5:5e:26:6a:70:da:ac:
7f:fc:01:a3:db:23:4b:d8:57:77:7c:bd:e6:af:84:
02:42:d3:38:0e:ee:0b:b2:4e:49:b5:fe:29:1c:d1:
74:00:06:16:27:06:dd:fe:b4:eb:3f:3d:de:ae:67:
8c:e6:c1:6b:ba:b9:13:5c:31:08:4c:aa:f9:6a:e6:
ab:02:42:d3:f7:6c:fa:b9:ff:e8:3f:cb:f7:6f:cd:
33:06:ec:f5:55:a3:4d:46:f3:f1:90:ae:b4:20:dc:
c1:56:f9:d5:d4:4a:f8:92:29:3f:46:dd:26:84:cb:
f7:61:8b:dc:a7:e4:7c:ae:ad:56:e8:45:d7:8e:59:
50:41:22:2d:41:db:5c:fd:b7:b8:ce:0f:89:74:78:
6d:df:c0:91:74:ff:56:a5:9c:cd:0e:fe:10:53:77:
7d:3e:1d:0e:57:99:63:7e:7f:a6:82:ee:93:e0:fd:
f1:1e:40:55:54:76:ba:0a:aa:b8:01:60:1b:c2:f2:
4b:3f:3f:64:c9:a2:fa:e5:ed:6a:fb:37:dd:68:19:
7b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:24:26:B7:4E:09:A7:60:28:4B:65:D6:48:E1:C5:C1:6C:AD:BE:40
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS984.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.59.0/24
95.134.61.0/24
95.134.112.0/24
178.92.199.0/24
178.92.207.0/24
178.93.76.0/24
178.95.140.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:5b:56:75:8e:85:f9:7f:86:ee:86:4e:64:b6:c1:d2:66:99:
49:63:34:66:24:a2:76:e4:e0:d1:11:bc:64:8f:4b:e4:2c:01:
f6:0c:4c:1b:79:99:66:15:a2:a1:26:5d:ad:15:09:9d:32:cc:
1d:a0:1b:9f:38:f4:6b:7c:02:62:00:bf:7f:1d:e8:d5:2a:c4:
2e:15:e9:d3:6e:7d:1d:8a:4a:13:d5:7e:e9:d7:55:a9:55:8d:
21:88:28:2a:50:2a:9a:2e:5d:7e:66:bc:f7:16:2d:13:1e:86:
b3:65:04:31:72:c3:fb:d3:93:05:b4:11:dc:25:b5:97:db:7f:
a5:f4:25:a3:c8:c4:3e:36:ec:ba:7c:ee:1b:69:7e:16:c6:64:
56:98:cf:e8:b4:37:45:4d:ee:33:d4:ed:d8:6f:54:fc:63:17:
25:f9:77:d9:b0:5d:1c:96:22:d6:d0:85:90:32:7e:00:1f:df:
6c:b1:2a:67:d4:64:85:65:01:16:cb:d9:c5:52:89:a1:a6:00:
a9:35:49:77:e5:45:87:fe:15:1b:a9:ba:a4:42:7a:53:6b:90:
63:a6:04:7d:47:92:40:1e:9c:d8:1e:1e:e8:29:32:63:de:84:
a5:84:62:33:c0:83:64:f9:0f:5c:04:d1:50:7b:ae:08:98:4a:
e8:3a:ae:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:37:25 2026 by rpki-client