Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393427.roa
File: AS393427.roa (raw, json)
Hash identifier: BsJLOvGmj13SWPV7LHFfwkxlyDsDQABsQg5Ru2c2CNA=
Subject key identifier: B8:EA:F2:A1:6D:A8:9D:72:80:39:AB:A8:6E:E8:B1:01:2C:F3:39:CA
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 33FF7DD905389BE6C749974DEB287784625FA017
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393427.roa
Signing time: Mon 02 Mar 2026 08:03:41 +0000
ROA not before: Mon 02 Mar 2026 07:58:41 +0000
ROA not after: Mon 01 Mar 2027 08:03:41 +0000
asID: 393427
IP address blocks: 168.222.98.0/23 maxlen: 24
168.222.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:20:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:ff:7d:d9:05:38:9b:e6:c7:49:97:4d:eb:28:77:84:62:5f:a0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 2 07:58:41 2026 GMT
Not After : Mar 1 08:03:41 2027 GMT
Subject: CN=B8EAF2A16DA89D728039ABA86EE8B1012CF339CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7b:85:89:af:5f:1f:fd:99:e9:dd:cc:e1:a6:
95:74:09:41:34:32:6b:eb:2b:bf:5f:1b:59:8a:6e:
c2:9c:59:61:5d:ee:45:3c:37:f7:4d:09:df:11:8e:
e3:67:c8:40:9b:d4:fc:13:29:b2:d7:f0:04:80:98:
7f:3a:c0:d2:e5:70:5c:d7:fe:44:c8:46:1e:06:40:
fa:1f:f0:b3:c9:3e:5c:4a:95:33:e6:cc:df:01:38:
16:67:d3:34:af:7b:3a:56:55:f6:7e:2b:00:83:46:
18:af:4c:75:4f:ec:d9:d4:5b:9f:85:5d:3b:ef:a6:
32:04:74:f2:12:53:eb:56:57:cc:9d:6c:49:16:86:
2b:c2:92:a3:d1:01:45:f9:07:ac:0d:7c:b7:f6:d5:
4f:55:d8:53:76:2a:8f:73:ea:6a:f8:e7:c3:64:41:
06:0d:24:8e:be:f8:4b:54:98:b4:22:34:88:c2:3d:
40:d0:ab:49:60:60:23:a0:14:a7:94:01:bf:cc:af:
c6:77:99:22:1b:6e:27:aa:20:d9:ca:ae:a8:95:25:
85:25:7d:23:b4:fa:3e:e8:14:0f:10:17:04:e5:00:
1f:04:8c:dc:d2:b3:50:cc:e0:b9:9c:7d:fe:ae:4b:
ba:e4:67:02:8d:c9:df:44:25:67:f1:d4:ad:2f:9f:
f7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EA:F2:A1:6D:A8:9D:72:80:39:AB:A8:6E:E8:B1:01:2C:F3:39:CA
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.98.0/23
168.222.126.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:c5:a6:61:19:99:e6:89:84:a2:74:c7:3d:24:81:a9:5c:d9:
b8:7d:71:48:0b:03:f5:df:5a:e9:b9:e9:3c:c2:a1:ef:0b:e0:
31:db:0a:14:e1:58:8f:98:35:56:8c:d5:f2:ef:30:e7:9d:eb:
9f:b2:51:4b:14:61:1e:55:8a:cf:67:62:cb:dc:8e:2d:6b:ca:
59:97:0f:2f:56:ab:d0:96:cd:ad:d0:b2:bc:12:21:58:31:56:
bd:bd:6e:3f:70:6b:1d:72:d9:1e:8c:c8:6b:3f:dc:94:0b:23:
70:db:8a:3e:83:d2:39:32:35:ea:4f:21:33:ba:74:c1:3f:e6:
2f:58:39:ff:db:3a:1a:ee:cd:95:73:c3:7e:8f:8d:de:c7:14:
af:96:9e:08:25:b9:0a:3c:7c:e2:37:ec:11:6c:06:35:66:1b:
bc:d5:6b:73:85:a1:62:d1:65:4b:77:ed:24:87:73:13:d5:bd:
f5:e6:0c:20:61:f4:4a:1f:d3:49:34:7f:90:9c:09:ca:5a:7a:
06:4f:17:03:0f:0d:4c:49:c5:07:3e:07:ad:af:00:9b:17:32:
4c:bf:0c:75:03:2b:e7:af:3b:2a:e1:63:4a:43:17:30:bf:a9:
e5:27:fa:1b:41:e8:c4:79:ee:b0:69:4a:0c:88:b9:78:70:73:
49:f6:88:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:29:51 2026 by rpki-client