Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS984.roa
File: AS984.roa (raw, json)
Hash identifier: L5Ywyrd2S9NAhlquhRuBBXJgbwp/VgjZY4jrm+fp5jM=
Subject key identifier: D1:E7:1F:C6:F4:E1:07:5C:61:BE:83:10:E0:F3:EA:CD:BF:A9:F3:CC
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 25F776C55D12D37BFEDABDE82D1685F42CF1B53A
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS984.roa
Signing time: Sat 05 Sep 2026 00:05:47 +0000
ROA not before: Sat 05 Sep 2026 00:00:47 +0000
ROA not after: Sat 04 Sep 2027 00:05:47 +0000
asID: 984
IP address blocks: 95.134.61.0/24 maxlen: 24
95.134.112.0/24 maxlen: 24
178.92.199.0/24 maxlen: 24
178.92.207.0/24 maxlen: 24
178.95.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:f7:76:c5:5d:12:d3:7b:fe:da:bd:e8:2d:16:85:f4:2c:f1:b5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 5 00:00:47 2026 GMT
Not After : Sep 4 00:05:47 2027 GMT
Subject: CN=D1E71FC6F4E1075C61BE8310E0F3EACDBFA9F3CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:95:7e:95:48:9c:e5:9d:ff:1b:e4:59:90:
0c:63:b9:c4:92:e8:02:a1:66:7b:e4:76:59:60:89:
b2:2c:a7:62:cc:bd:06:83:ab:a8:b5:b3:dd:b2:d3:
02:92:a7:f0:dc:b0:96:12:8b:fa:71:87:15:da:c5:
66:eb:3f:fd:94:e1:fc:5e:ae:cf:7d:21:8b:f6:d7:
c7:ce:53:ba:a3:0c:b6:cb:9a:4c:9a:3b:3a:60:84:
1e:0a:0d:ac:22:b1:98:2b:56:84:74:d5:db:2a:e2:
b2:99:7b:35:af:6c:66:75:c0:30:0e:02:dd:c6:62:
cf:f8:3d:34:17:a2:c8:87:18:69:6f:57:01:fb:97:
eb:d3:73:56:0a:2f:fc:f5:66:7e:44:06:b0:83:96:
99:e0:a4:7e:69:bc:b6:a7:de:70:81:1d:04:20:e6:
cb:be:a6:3f:e4:6d:b5:a2:7c:ef:63:83:ab:e0:6d:
56:c0:1e:3d:45:7a:51:1a:ca:d9:01:d3:aa:34:c5:
43:68:7c:29:93:f3:98:a8:d6:4a:27:79:7f:e0:79:
09:78:d4:b6:6f:d4:58:ad:c0:fd:9b:02:62:ab:ff:
5a:b2:cf:79:d1:4b:09:d5:76:f5:99:fe:e7:1d:91:
d0:95:4b:31:bf:4b:b9:8b:9b:bc:87:42:b4:13:e7:
9c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E7:1F:C6:F4:E1:07:5C:61:BE:83:10:E0:F3:EA:CD:BF:A9:F3:CC
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS984.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.61.0/24
95.134.112.0/24
178.92.199.0/24
178.92.207.0/24
178.95.140.0/22
Signature Algorithm: sha256WithRSAEncryption
04:a0:55:7e:c1:cb:b9:97:26:ff:58:3c:83:b6:22:20:22:c7:
c6:62:c8:4c:75:30:39:25:85:d4:33:e6:57:25:7e:0c:1c:b8:
bd:ff:e6:27:51:25:d1:ab:34:01:b2:00:d5:d6:9f:62:45:14:
fc:2b:6d:c6:01:0e:2a:1e:30:3c:98:cd:fb:05:ed:b6:b0:98:
d3:22:8a:11:74:c7:c3:37:d9:6c:ea:00:8a:d3:09:1d:e1:4b:
87:5e:72:72:10:95:75:a0:8e:af:6d:60:30:06:24:b6:66:c2:
d2:6d:41:cf:64:7a:95:91:09:b5:aa:8e:69:35:4a:76:5c:6a:
c3:f3:16:3f:e7:af:b4:8a:bc:3a:e8:17:3e:b9:a0:a0:b2:c6:
00:c4:49:4a:7a:d8:f9:11:2b:9d:39:d9:14:79:47:aa:d2:26:
c4:a1:c6:15:67:59:a6:ff:37:d2:7f:ce:c3:e7:53:c8:42:79:
bd:d6:b6:43:d0:df:22:89:fa:44:77:41:5b:64:72:0c:32:a9:
ea:0a:f4:fd:95:5e:fd:bc:04:80:96:75:49:af:54:e2:5b:48:
2e:7f:59:95:d9:2d:4c:03:b4:18:b7:2d:5e:7d:3d:77:bd:6a:
71:4f:8a:2f:2a:43:6c:e3:71:39:b7:47:6e:34:d7:89:6f:b1:
8e:0a:5d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:38:47 2026 by rpki-client