Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS984.roa
File: AS984.roa (raw, json)
Hash identifier: vuRnnPDEGBMO9/K5RC4/vAn3NSzLL9YUbGBV2utXHz8=
Subject key identifier: 95:86:C8:E5:B1:82:D4:91:B5:31:FC:5D:83:44:52:D1:2B:AF:D8:FD
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 78EE9BF2C67E8AB6B8298173709B9E77D33EB4C4
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS984.roa
Signing time: Thu 23 Oct 2025 17:41:22 +0000
ROA not before: Thu 23 Oct 2025 17:36:22 +0000
ROA not after: Thu 22 Oct 2026 17:41:22 +0000
asID: 984
IP address blocks: 95.134.61.0/24 maxlen: 24
95.134.112.0/24 maxlen: 24
95.134.129.0/24 maxlen: 24
178.92.199.0/24 maxlen: 24
178.92.207.0/24 maxlen: 24
178.95.78.0/24 maxlen: 24
178.95.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:ee:9b:f2:c6:7e:8a:b6:b8:29:81:73:70:9b:9e:77:d3:3e:b4:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 23 17:36:22 2025 GMT
Not After : Oct 22 17:41:22 2026 GMT
Subject: CN=9586C8E5B182D491B531FC5D834452D12BAFD8FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3a:64:a9:18:4a:1f:6f:a3:e5:ce:f9:5a:fb:
0e:a4:01:6f:b1:08:70:96:36:71:2b:36:ac:f2:2c:
0a:9e:e9:8b:82:25:23:0e:a4:e8:c9:49:0c:b7:89:
4b:21:3e:91:0a:77:04:6a:b5:6d:9a:07:58:1e:c0:
af:17:6e:cc:d1:64:a4:4f:a4:fa:d1:d5:b5:d0:11:
60:cf:9a:90:08:f6:ee:d1:a2:c0:9e:11:87:83:21:
3a:98:46:ae:a6:7c:98:01:4f:bc:f8:9e:c1:12:7f:
30:b9:e2:b5:d5:57:c5:b6:1d:64:38:c4:5e:6d:a6:
9e:9d:22:1d:78:83:fd:49:f8:33:57:62:0b:1f:44:
3e:fb:80:a3:a9:fe:90:03:58:2c:97:5f:d8:4c:9d:
89:2d:59:c8:c7:22:cd:84:22:f7:39:6c:b0:0e:fb:
6c:fb:85:f5:8f:2c:0b:95:18:9e:d5:22:92:3a:63:
16:ab:00:d4:1d:70:fd:9d:ad:81:68:19:b4:9c:50:
24:e7:0f:bb:bb:f8:de:29:06:24:8c:47:fc:30:65:
ec:66:d5:7b:19:9e:5d:53:12:01:81:68:b3:1a:bc:
6c:99:cb:57:85:46:3f:bd:9d:4a:63:b6:44:b6:b1:
e4:0d:6c:e0:4f:58:92:bc:18:a2:bb:7c:9d:74:94:
9c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:86:C8:E5:B1:82:D4:91:B5:31:FC:5D:83:44:52:D1:2B:AF:D8:FD
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS984.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.61.0/24
95.134.112.0/24
95.134.129.0/24
178.92.199.0/24
178.92.207.0/24
178.95.78.0/24
178.95.140.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:0a:2a:36:f7:f3:50:cd:f5:5b:8f:2a:4d:8a:78:8f:11:08:
49:d8:27:49:4d:ac:be:98:f0:10:e1:52:bf:a1:96:6c:58:26:
91:11:cc:2b:4a:18:eb:67:95:8c:31:b3:f2:27:ec:57:a1:6c:
03:4d:e5:9d:4d:a3:11:d1:5c:25:c6:98:21:eb:97:b9:eb:48:
11:c3:ec:75:73:a0:16:b4:ae:2b:85:bb:a3:4b:a6:a7:7f:4e:
d0:45:62:72:a0:27:05:3a:be:af:3a:c3:48:5f:7c:dc:10:2c:
75:55:6a:22:71:12:39:40:29:9d:6e:e3:4c:80:53:2e:6a:a0:
22:46:a2:16:44:d9:e4:78:f5:db:b6:cc:22:99:40:68:ce:7b:
fc:c7:fd:25:5d:b3:ca:83:56:f8:cd:60:8b:51:56:36:20:25:
df:22:c1:de:db:57:c7:1e:3f:ae:c8:3d:79:08:13:df:4e:cb:
75:37:26:7a:fb:b1:4f:41:7a:c7:b2:1c:30:52:7a:06:46:87:
e2:56:45:81:84:b6:6a:32:ad:d8:de:38:a8:3b:58:82:6a:9f:
12:bb:ee:f4:85:43:5c:24:15:ab:5e:ab:05:38:7b:28:34:b0:
93:8a:eb:ab:29:39:bc:05:e1:69:55:d2:0b:a9:e2:c0:20:14:
83:4f:73:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:04:51 2025 by rpki-client