Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS15440.roa
File: AS15440.roa (raw, json)
Hash identifier: l4zFPb+mwEiHpqQn6s/2MtzgUZOErjxww3f+jWivS9c=
Subject key identifier: 7E:89:18:86:81:4C:CA:74:AF:44:67:4B:67:56:8A:B9:25:04:76:F3
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6AC47F8073A3607B70EC6D1523511FE36FF3A689
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS15440.roa
Signing time: Wed 08 Apr 2026 00:47:03 +0000
ROA not before: Wed 08 Apr 2026 00:42:03 +0000
ROA not after: Wed 07 Apr 2027 00:47:03 +0000
asID: 15440
IP address blocks: 146.103.25.0/24 maxlen: 24
146.103.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:c4:7f:80:73:a3:60:7b:70:ec:6d:15:23:51:1f:e3:6f:f3:a6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 8 00:42:03 2026 GMT
Not After : Apr 7 00:47:03 2027 GMT
Subject: CN=7E891886814CCA74AF44674B67568AB9250476F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:39:c3:ea:32:ed:9d:fb:e2:e5:64:e4:7a:
86:3b:91:c9:9d:9c:ea:f0:9c:b3:22:4e:af:b7:88:
9f:b0:2b:61:16:70:21:ec:ae:3b:4a:e8:bb:d1:3e:
7d:0e:5e:31:15:66:31:c0:b0:3f:ce:8c:27:0d:dd:
73:f9:78:98:8c:e0:79:73:26:e7:c1:08:a3:ea:eb:
a0:9a:c2:2f:25:e7:5c:9e:12:50:45:35:a1:48:60:
34:2d:80:0f:c9:78:9d:91:d4:84:03:fb:37:15:c0:
cb:d2:d4:28:db:4c:19:05:58:8a:34:3f:3c:b3:2e:
2e:11:7a:32:a8:f4:ab:a3:d0:8e:ee:3e:c8:89:75:
3d:fe:e2:6e:a0:76:a0:32:f6:81:79:9e:4c:3f:b6:
9e:bd:72:6a:23:45:f0:33:2f:83:df:b9:60:ba:f9:
4d:56:3c:d7:54:c6:a7:7c:84:b3:df:a0:44:43:7e:
40:43:89:f8:54:43:0e:67:7d:bc:06:89:40:cc:2a:
7f:d2:9e:12:5c:48:c3:a0:12:4e:66:34:34:20:8c:
7a:87:83:b8:0a:25:ea:54:5b:a4:d0:16:2b:ac:a4:
ca:cf:96:a2:aa:d4:fd:44:80:db:7d:3e:40:84:15:
fd:95:33:dd:55:31:ba:9b:0b:98:83:58:2e:3a:81:
f6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:89:18:86:81:4C:CA:74:AF:44:67:4B:67:56:8A:B9:25:04:76:F3
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS15440.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.25.0/24
146.103.38.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:11:5c:64:c7:0f:db:62:c0:e0:ef:34:e6:45:f1:66:19:60:
84:0f:71:e5:ca:17:87:7d:d9:68:00:b5:8b:a0:25:9b:4b:c4:
71:48:68:f4:d2:b8:28:2b:55:20:a8:d7:2b:ad:41:4f:8a:76:
72:27:8f:3b:68:47:b8:b7:c5:93:36:b6:4b:a0:a4:7c:5f:73:
98:02:52:95:c5:8c:95:92:c1:1e:88:b9:23:c5:e7:c8:b6:5b:
a3:d8:72:7d:92:93:95:0e:9d:5c:c7:51:5c:24:84:d6:b2:bd:
fb:8e:1a:0a:c3:64:1e:b7:96:c5:3c:c0:19:d2:3d:b7:cb:41:
b6:a5:a5:44:57:47:87:e4:50:1d:71:5c:09:21:38:58:3c:e2:
d1:be:f2:bb:c0:55:48:b0:b8:a4:32:84:6d:b7:85:ad:b3:52:
97:e0:be:25:84:90:3c:e8:33:92:ca:15:3b:15:a1:e0:c1:30:
c3:d1:f1:60:d2:74:69:41:6f:7f:9a:53:a0:05:e8:f3:ce:22:
21:be:e7:3a:fa:91:e4:c0:f4:fb:ae:c1:2f:0a:9f:5f:4b:8c:
30:ae:70:7c:8f:73:5b:e7:dc:4e:2c:0e:51:31:a0:63:d7:e8:
0c:d2:ec:7f:30:10:84:99:9e:b4:17:97:8c:68:8d:75:d1:30:
8a:e3:33:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:11:01 2026 by rpki-client