Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS396362.roa
File: AS396362.roa (raw, json)
Hash identifier: UaUvvSXst6zD3uQlsNDCzaxEGqWmmwbOVbLj9whTAmY=
Subject key identifier: BF:0F:3C:A7:88:97:4C:0B:4C:8B:1A:B4:C2:E8:B3:F3:AC:D9:D2:01
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3F45486B272EA3A03FE63626E36697AA3351439A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS396362.roa
Signing time: Tue 10 Feb 2026 10:48:31 +0000
ROA not before: Tue 10 Feb 2026 10:43:31 +0000
ROA not after: Tue 09 Feb 2027 10:48:31 +0000
asID: 396362
IP address blocks: 148.135.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:45:48:6b:27:2e:a3:a0:3f:e6:36:26:e3:66:97:aa:33:51:43:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 10 10:43:31 2026 GMT
Not After : Feb 9 10:48:31 2027 GMT
Subject: CN=BF0F3CA788974C0B4C8B1AB4C2E8B3F3ACD9D201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:83:2a:5d:6e:6f:c5:8a:27:75:d1:86:37:8b:
bf:53:0b:12:c6:72:81:48:c2:54:6d:26:fa:f3:0a:
89:a7:ae:d7:d7:a6:9e:cf:fa:5e:6a:28:3b:b7:91:
ef:96:f9:57:7d:1c:3f:65:d2:78:50:8b:d3:9e:1b:
b8:00:ac:1d:92:31:72:6f:d1:78:d0:63:19:d2:56:
45:bc:7b:b5:4e:9a:8e:f9:70:6a:e3:3a:82:a8:4a:
89:1d:cb:12:1e:d9:ef:fc:d3:4c:0d:c6:b2:db:8f:
eb:1a:29:1f:1c:b2:94:72:fc:24:31:90:58:47:b8:
e8:d9:d6:6c:55:44:0d:59:ae:ad:f0:1b:16:72:82:
70:16:20:1b:d4:88:fc:81:ab:f7:19:4f:ca:5a:da:
ad:e3:e0:84:b9:8b:ed:0e:23:81:1d:cf:38:cc:c2:
0f:f3:44:0a:3d:4c:2e:94:a7:fa:06:2f:ce:f8:9a:
c5:af:21:d0:99:7a:51:1a:22:c1:16:af:6d:1a:51:
14:7c:16:1b:7e:7d:76:33:41:2f:83:f4:76:08:00:
c9:f3:8e:c9:bf:3f:55:34:20:49:0f:7d:25:02:e9:
9f:6d:72:6f:35:0b:3c:18:f2:e2:5e:9e:19:18:80:
93:83:c8:83:cd:2d:7c:38:5f:d6:4b:f3:db:6d:5f:
ad:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0F:3C:A7:88:97:4C:0B:4C:8B:1A:B4:C2:E8:B3:F3:AC:D9:D2:01
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS396362.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.158.0/24
Signature Algorithm: sha256WithRSAEncryption
96:30:cd:a1:cf:8b:4e:11:92:6d:bf:8f:c1:47:f0:87:9e:73:
9c:59:49:3c:a2:cd:5e:a0:db:36:da:36:d2:8f:94:a3:7d:10:
33:bb:c8:a3:be:1e:19:64:fa:b1:56:35:16:4d:b3:2b:bf:98:
9e:fa:bb:f3:d5:06:34:75:71:26:10:90:05:81:1f:49:ad:8b:
e8:a1:71:6e:19:cb:07:5f:76:16:b4:d8:73:e5:c7:33:69:69:
0a:bd:d4:37:2e:0d:aa:b9:a1:cc:f0:ae:4b:90:e0:b7:12:55:
b2:e8:7a:4a:52:e7:6d:c0:72:bb:66:08:35:cc:f1:37:09:93:
d9:1f:5b:01:10:c7:77:dc:f8:a5:ca:7e:2f:a2:57:ad:d4:61:
21:67:31:f7:96:f5:04:a4:05:5a:f5:da:f4:6e:99:d8:8c:a1:
91:44:76:40:6c:fb:71:1c:e3:66:e2:78:91:b2:fa:d9:ec:58:
c6:89:51:57:cb:34:73:e5:86:d0:c3:e7:4b:65:b3:58:e3:2f:
19:33:ad:3f:36:ff:3e:2d:3e:e7:f5:ca:22:7f:93:6b:41:25:
09:20:94:e0:c0:32:9c:88:f9:c1:8c:1c:f0:5b:23:ac:8e:98:
9f:c8:fa:76:79:c2:2a:85:fe:7f:fd:c3:7f:4b:76:59:cc:9f:
25:df:ec:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:56:17 2026 by rpki-client