Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS996.roa
File: AS996.roa (raw, json)
Hash identifier: qGhoARSrmhAvIrvkKk+sABgJGk2gh2at179aw9yAln4=
Subject key identifier: B5:E6:01:A4:F3:D8:36:0A:41:B2:92:76:71:A6:2B:E8:6B:4A:C2:04
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 47A410C5605B007D6AF0C13901252DB6AA0DB777
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS996.roa
Signing time: Tue 14 Apr 2026 00:03:05 +0000
ROA not before: Mon 13 Apr 2026 23:58:05 +0000
ROA not after: Tue 13 Apr 2027 00:03:05 +0000
asID: 996
IP address blocks: 46.203.107.0/24 maxlen: 24
46.203.114.0/24 maxlen: 24
46.203.145.0/24 maxlen: 24
46.203.146.0/24 maxlen: 24
46.203.168.0/24 maxlen: 24
46.203.169.0/24 maxlen: 24
46.203.171.0/24 maxlen: 24
46.203.174.0/24 maxlen: 24
46.203.177.0/24 maxlen: 24
46.203.179.0/24 maxlen: 24
92.112.6.0/24 maxlen: 24
92.112.8.0/24 maxlen: 24
92.112.55.0/24 maxlen: 24
92.112.89.0/24 maxlen: 24
92.112.142.0/24 maxlen: 24
92.113.15.0/24 maxlen: 24
92.113.40.0/24 maxlen: 24
95.134.184.0/24 maxlen: 24
95.134.206.0/24 maxlen: 24
95.134.221.0/24 maxlen: 24
95.134.223.0/24 maxlen: 24
95.135.72.0/24 maxlen: 24
178.92.80.0/24 maxlen: 24
178.92.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:a4:10:c5:60:5b:00:7d:6a:f0:c1:39:01:25:2d:b6:aa:0d:b7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 13 23:58:05 2026 GMT
Not After : Apr 13 00:03:05 2027 GMT
Subject: CN=B5E601A4F3D8360A41B2927671A62BE86B4AC204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5f:4d:64:1d:30:3e:48:76:ef:2f:4f:63:5b:
20:78:09:45:61:5e:0b:8d:ac:c4:fb:c4:41:12:99:
9e:51:90:76:f2:0c:92:fb:6c:31:c6:fa:46:f1:86:
50:00:65:6c:35:79:f1:38:e3:09:7f:b5:5b:c2:54:
46:aa:3c:5f:52:e9:f4:77:8b:ed:59:79:2e:86:6c:
71:72:4f:46:1d:04:0e:22:b8:fc:92:ce:1d:93:e6:
4e:67:66:91:46:ac:7d:b7:56:64:e8:5f:5e:5b:fe:
23:e3:3c:d1:e1:f8:6c:be:05:ee:dd:bb:66:52:b1:
7a:74:24:2c:1a:89:ba:dd:0b:ca:dd:46:b8:e2:f6:
16:27:aa:e5:f8:45:33:52:ce:51:ad:6a:5b:3f:f5:
4b:f7:f1:2e:10:1f:52:4f:6c:51:6b:e3:59:df:b5:
78:38:72:d7:7e:1a:b8:e7:3d:f6:f2:9e:23:68:50:
91:49:25:ac:79:ce:ac:be:c4:de:d0:4b:52:24:80:
fc:29:b9:f4:cb:b2:6a:5a:c5:65:b9:6f:0c:90:29:
64:a3:78:c4:86:16:61:aa:aa:09:47:f5:15:43:06:
4a:f8:56:26:82:3e:aa:dc:6f:eb:67:b4:8e:95:f8:
0f:6a:99:15:89:ae:20:36:f3:76:89:a4:1a:b6:ca:
8f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E6:01:A4:F3:D8:36:0A:41:B2:92:76:71:A6:2B:E8:6B:4A:C2:04
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS996.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.107.0/24
46.203.114.0/24
46.203.145.0-46.203.146.255
46.203.168.0/23
46.203.171.0/24
46.203.174.0/24
46.203.177.0/24
46.203.179.0/24
92.112.6.0/24
92.112.8.0/24
92.112.55.0/24
92.112.89.0/24
92.112.142.0/24
92.113.15.0/24
92.113.40.0/24
95.134.184.0/24
95.134.206.0/24
95.134.221.0/24
95.134.223.0/24
95.135.72.0/24
178.92.80.0/24
178.92.82.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:47:3b:76:51:42:b1:22:c9:64:fe:77:fb:f4:60:7c:c1:c2:
36:08:e2:51:ed:44:af:fc:c2:e2:1d:bc:2c:ea:58:df:d8:98:
ad:6a:7f:9b:55:08:c8:dd:c9:a3:88:47:92:62:36:84:41:5c:
af:91:37:cb:64:69:37:00:ab:e7:eb:bc:48:07:8f:ba:1d:d6:
4f:19:5c:52:40:2a:87:87:f7:43:44:90:f5:40:01:83:c3:b5:
25:c0:e7:0d:17:03:3b:7e:70:ff:14:eb:fa:83:a0:90:a0:31:
82:ed:a1:88:69:06:43:1a:de:1d:79:09:90:1c:60:d0:76:d2:
3b:bc:f3:a3:97:45:f9:e6:dd:01:ba:ce:f3:57:65:d8:bb:49:
29:40:50:a4:d9:9d:d8:ec:3d:e6:15:5a:54:69:b5:23:2a:a5:
87:1d:52:d8:c9:29:0b:59:b0:7a:56:45:36:84:b0:9d:87:b7:
1f:14:2f:57:45:fe:36:4f:69:fc:4c:90:63:cc:fb:41:b4:a6:
7c:cf:e7:cf:54:28:cd:80:34:4b:d0:35:60:2a:2c:e4:6e:62:
c3:22:d6:b0:7d:a9:a3:f6:95:39:5b:1f:10:31:44:d1:3e:78:
07:e5:ce:fc:49:05:ac:a6:1c:7e:b1:79:1a:5d:fa:dd:42:c5:
49:f3:b3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:49:41 2026 by rpki-client