Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS140627.roa
File: AS140627.roa (raw, json)
Hash identifier: 1GO1DWusD8GDISQpCa9HMXtfM4+GIBG0FugeGGBDWuU=
Subject key identifier: 0B:65:1C:A8:97:F8:6A:5D:4B:D5:F4:AA:BA:D7:05:DB:E5:3E:61:BD
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 015A164A641F69FB864B12022ACE3BE27E21738D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS140627.roa
Signing time: Thu 09 Apr 2026 15:47:04 +0000
ROA not before: Thu 09 Apr 2026 15:42:04 +0000
ROA not after: Thu 08 Apr 2027 15:47:04 +0000
asID: 140627
IP address blocks: 155.117.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:5a:16:4a:64:1f:69:fb:86:4b:12:02:2a:ce:3b:e2:7e:21:73:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 9 15:42:04 2026 GMT
Not After : Apr 8 15:47:04 2027 GMT
Subject: CN=0B651CA897F86A5D4BD5F4AABAD705DBE53E61BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:4d:69:75:fc:84:d4:bb:26:dc:15:00:2e:
24:9b:1f:87:76:0f:9d:32:83:db:fe:94:51:cf:17:
01:50:4e:5a:e8:3b:43:ec:46:a8:24:c5:e8:b7:c6:
f9:f9:74:4c:e3:a2:54:4c:0e:03:98:ad:1b:36:fb:
46:40:b0:3f:26:98:e6:60:c9:7f:e0:03:bb:79:d8:
12:21:9a:f3:cb:fb:0a:f1:89:79:69:70:6b:ad:fd:
b3:3b:78:b6:e2:c8:10:cf:b2:7b:6c:0a:ff:88:15:
71:f9:52:68:69:df:38:85:f7:4a:f0:c1:bc:da:92:
5e:d1:48:44:aa:0f:6f:c0:ae:23:1e:95:31:1c:28:
a1:1f:95:11:c0:af:26:14:24:f6:ba:86:11:df:5c:
f0:27:39:e7:e1:6a:cd:7d:32:19:2f:9f:f4:91:77:
fb:66:b6:90:5a:da:ef:de:a1:cd:1e:c4:b6:e9:5c:
50:0f:87:04:59:68:28:e6:d4:bf:7d:ab:20:68:b5:
dc:1b:ca:92:1f:f5:6c:f2:72:33:29:9f:22:fa:1f:
4d:63:bb:ec:2c:21:a4:34:4c:89:54:cf:bc:9b:e4:
d5:17:d5:29:0d:66:58:36:b4:1b:9d:55:64:0f:fb:
22:16:8f:4a:21:26:e1:8e:7e:63:5b:ce:48:b9:a3:
da:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:65:1C:A8:97:F8:6A:5D:4B:D5:F4:AA:BA:D7:05:DB:E5:3E:61:BD
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS140627.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.239.0/24
Signature Algorithm: sha256WithRSAEncryption
59:fe:6b:96:60:97:d1:41:b5:19:29:0c:9a:e8:e1:cb:de:d9:
f5:95:9e:0c:8d:ce:88:04:c2:22:b7:59:bf:4d:81:f8:86:9f:
4d:6a:37:90:dc:8b:c2:e1:96:8b:b3:7e:df:f5:4e:5e:ac:f0:
79:6b:84:61:54:8d:a8:00:58:40:8a:65:d2:e0:68:8b:df:48:
d3:ab:b8:9e:a8:16:19:5a:2e:de:d9:be:79:e1:c9:c1:77:f4:
0c:01:54:c3:ed:83:3b:ee:d4:43:16:83:6c:64:4e:8c:45:f7:
4b:84:7a:1e:85:a0:c4:ce:68:b8:46:fc:21:59:02:ca:28:5e:
95:20:d4:8b:8c:9e:e6:d5:61:27:42:34:ed:57:17:a7:98:90:
71:33:c2:f6:85:34:19:13:79:ca:24:c8:4d:76:45:4e:e9:df:
63:ac:65:d3:ec:b5:53:d0:05:e0:20:c1:d1:96:b5:98:33:c9:
e5:a3:5f:0f:ec:0c:12:e6:de:7b:53:dd:62:55:3b:3d:99:29:
3e:4a:e9:1d:92:59:80:47:ef:92:dc:01:86:17:e2:31:33:2b:
03:c2:bb:e1:c8:fa:1f:c0:43:2f:32:38:fc:3a:e9:fd:89:08:
91:aa:67:6b:85:ee:88:30:53:1b:19:df:98:67:ad:09:6c:d5:
6d:0c:30:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:11:40 2026 by rpki-client