Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS39521.roa
File: AS39521.roa (raw, json)
Hash identifier: T6peI9y+78I6xLXqMWbEQg0ZytChRtMkhOfrgjSQxMo=
Subject key identifier: B6:41:B9:66:69:72:5D:C2:55:D6:8A:C0:04:27:CB:E9:30:F6:41:01
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 185E8A5BA68C9E32DBC4EF0340C9944C1F2672EA
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS39521.roa
Signing time: Tue 28 Jul 2026 00:05:48 +0000
ROA not before: Tue 28 Jul 2026 00:00:48 +0000
ROA not after: Tue 27 Jul 2027 00:05:48 +0000
asID: 39521
IP address blocks: 167.148.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:5e:8a:5b:a6:8c:9e:32:db:c4:ef:03:40:c9:94:4c:1f:26:72:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 28 00:00:48 2026 GMT
Not After : Jul 27 00:05:48 2027 GMT
Subject: CN=B641B96669725DC255D68AC00427CBE930F64101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1e:68:98:8b:71:c1:ed:28:01:bb:10:11:00:
1b:df:9c:d3:cb:84:ef:40:c3:31:5d:cf:3a:46:aa:
62:fe:29:d0:04:1a:0c:3a:b6:d1:ee:f4:c0:0f:c9:
92:9e:e0:7e:22:9b:0d:93:02:89:b0:ce:89:2b:43:
ab:89:62:4f:d7:b0:1b:22:c5:88:91:53:47:29:d5:
d3:cf:86:0a:94:37:fb:b2:c5:c9:d3:38:57:45:b6:
43:77:76:8b:52:1b:46:ca:c7:f8:9b:b7:72:61:e9:
f2:2e:12:17:f6:63:e4:03:45:f9:fb:0b:be:bb:fa:
4c:33:95:d0:5e:61:a3:e5:a1:c8:2d:f4:14:10:d0:
dc:8b:5a:55:37:18:fd:cd:73:6d:02:fb:d3:c9:e0:
8e:20:06:d8:ce:50:8a:c0:32:ec:e3:f8:9b:12:40:
01:35:ba:6b:5a:ce:7d:ac:be:d5:02:7a:d8:ab:8d:
7d:f3:8e:48:1a:dd:12:fa:02:5f:93:99:34:ba:e9:
2f:87:6c:4c:f0:03:75:8c:3a:4a:8f:b4:1c:3a:56:
fb:e5:b0:a6:48:45:f4:41:72:e9:2e:9a:16:b0:9d:
f0:38:70:64:6e:e9:eb:4a:a3:e2:ec:9c:2b:18:4e:
ee:e5:0c:ea:22:3b:79:83:a9:74:26:41:6a:db:36:
f3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:41:B9:66:69:72:5D:C2:55:D6:8A:C0:04:27:CB:E9:30:F6:41:01
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS39521.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.40.0/24
Signature Algorithm: sha256WithRSAEncryption
78:0c:7f:e1:b7:f7:1b:d0:22:3a:6a:b2:71:8f:bb:f6:a0:f3:
a7:72:b5:55:e9:1e:25:54:e5:a6:8b:93:5f:af:07:a6:d3:c5:
67:6b:2a:9d:59:e4:a4:3b:80:34:c9:d8:49:fc:3c:52:c5:7b:
f8:a2:be:9a:1b:15:10:82:0e:5b:32:49:d6:4b:a5:68:2b:66:
70:3e:f3:59:db:ad:45:83:98:2c:cd:08:48:5b:4d:d4:a7:c9:
fe:9d:31:d2:97:7f:db:7f:9b:96:71:40:ff:6f:24:b5:32:3f:
40:7b:81:b0:8b:23:e8:02:0d:c8:76:4c:85:ff:6a:3c:3c:9c:
f6:1f:79:45:f6:c9:2a:46:5b:8f:bc:21:81:5e:09:ee:b3:a5:
bf:46:31:40:3c:48:1c:0f:86:cb:32:87:33:68:65:0a:3a:af:
6f:75:9c:a3:7f:a0:72:2f:ba:9a:71:a0:a4:c6:9b:75:ca:17:
df:f8:84:81:a9:8a:2d:6d:f7:21:b5:e0:a8:b5:e2:ba:28:9e:
4a:98:c5:8a:f4:9d:4a:41:8c:f9:87:58:e9:88:0e:c9:7a:4d:
b5:fe:7e:eb:34:fd:be:17:29:fd:f1:30:64:3c:43:a9:2a:3a:
d4:c8:8c:84:8c:d4:13:ad:41:4e:53:01:ec:07:02:9f:e0:02:
bc:70:76:69
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUGF6KW6aMnjLbxO8DQMmUTB8mcuowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA3MjgwMDAwNDhaFw0yNzA3MjcwMDA1NDhaMDMxMTAvBgNV
BAMTKEI2NDFCOTY2Njk3MjVEQzI1NUQ2OEFDMDA0MjdDQkU5MzBGNjQxMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrHmiYi3HB7SgBuxARABvfnNPL
hO9AwzFdzzpGqmL+KdAEGgw6ttHu9MAPyZKe4H4imw2TAomwzokrQ6uJYk/XsBsi
xYiRU0cp1dPPhgqUN/uyxcnTOFdFtkN3dotSG0bKx/ibt3Jh6fIuEhf2Y+QDRfn7
C767+kwzldBeYaPlocgt9BQQ0NyLWlU3GP3Nc20C+9PJ4I4gBtjOUIrAMuzj+JsS
QAE1umtazn2svtUCetirjX3zjkga3RL6Al+TmTS66S+HbEzwA3WMOkqPtBw6Vvvl
sKZIRfRBcukumhawnfA4cGRu6etKo+LsnCsYTu7lDOoiO3mDqXQmQWrbNvMDAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUtkG5ZmlyXcJV1orABCfL6TD2QQEwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMzk1MjEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACnlCgw
DQYJKoZIhvcNAQELBQADggEBAHgMf+G39xvQIjpqsnGPu/ag86dytVXpHiVU5aaL
k1+vB6bTxWdrKp1Z5KQ7gDTJ2En8PFLFe/iivpobFRCCDlsySdZLpWgrZnA+81nb
rUWDmCzNCEhbTdSnyf6dMdKXf9t/m5ZxQP9vJLUyP0B7gbCLI+gCDch2TIX/ajw8
nPYfeUX2ySpGW4+8IYFeCe6zpb9GMUA8SBwPhssyhzNoZQo6r291nKN/oHIvuppx
oKTGm3XKF9/4hIGpii1t9yG14Ki14roonkqYxYr0nUpBjPmHWOmIDsl6TbX+fus0
/b4XKf3xMGQ8Q6kqOtTIjISM1BOtQU5TAewHAp/gArxwdmk=
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:02:59 2026 by rpki-client