Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS398256.roa
File: AS398256.roa (raw, json)
Hash identifier: piS0eXGWkTg2qybkU1ZCLfa8/6USq5kuLgjYMTdKkP8=
Subject key identifier: DD:1D:91:66:0F:CC:FC:43:C5:4C:DD:14:DC:36:75:72:B7:E3:3A:94
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 295AD405850030009B38FD54EF509A16EC072390
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS398256.roa
Signing time: Thu 10 Sep 2026 18:09:28 +0000
ROA not before: Thu 10 Sep 2026 18:04:28 +0000
ROA not after: Thu 09 Sep 2027 18:09:28 +0000
asID: 398256
IP address blocks: 96.62.77.0/24 maxlen: 24
167.148.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:5a:d4:05:85:00:30:00:9b:38:fd:54:ef:50:9a:16:ec:07:23:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 10 18:04:28 2026 GMT
Not After : Sep 9 18:09:28 2027 GMT
Subject: CN=DD1D91660FCCFC43C54CDD14DC367572B7E33A94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dd:97:97:85:5e:de:3c:a7:e3:9f:8a:2d:ab:
56:f6:fe:9d:56:2f:2a:6c:39:fd:a8:92:22:f1:c6:
8c:e9:76:31:16:2b:d7:e3:9a:4d:06:3a:ad:16:08:
6f:b0:de:a4:25:45:10:e9:7a:13:f9:4f:c3:9d:7b:
b6:67:1f:50:75:71:91:bb:0f:4f:4a:9a:fa:fd:fc:
dc:4c:4d:9c:b6:76:34:3c:5b:35:17:3c:ad:fa:b9:
2d:7c:be:e7:44:21:e1:31:da:aa:c9:af:a7:96:b9:
25:d5:ce:68:c3:1e:50:19:02:6e:a5:92:37:48:ae:
0b:d1:33:26:9f:86:ae:11:40:af:aa:98:c0:4d:62:
fa:cd:a3:51:04:ea:06:aa:f0:e9:d1:fa:2a:2a:94:
70:29:ae:29:79:30:a7:87:dc:a8:25:d8:ca:91:23:
69:40:81:c4:3d:74:1a:ed:ae:db:33:1c:2c:25:18:
17:44:82:36:43:1b:75:40:04:ed:2b:29:bc:7a:72:
98:f2:62:03:5e:67:4e:15:d3:39:40:dc:85:8a:14:
e4:e4:ec:f2:bd:71:cc:51:3c:56:a2:38:74:a6:76:
13:aa:8d:31:ad:75:66:e6:8a:cd:26:ab:05:65:52:
d2:2c:3f:5c:e4:bd:eb:83:8a:50:37:24:5f:30:db:
05:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1D:91:66:0F:CC:FC:43:C5:4C:DD:14:DC:36:75:72:B7:E3:3A:94
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS398256.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.77.0/24
167.148.88.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:81:a6:14:42:c5:35:9e:8b:27:0d:e2:59:10:e5:e2:a9:07:
f8:b6:69:4f:20:2e:34:3f:51:27:1c:2d:ec:45:3d:25:23:90:
55:14:85:5a:c2:78:d2:61:84:4e:66:80:dd:3e:1c:98:60:2c:
24:be:db:0e:e9:d9:93:b5:2f:11:98:36:aa:71:38:4d:4c:12:
07:fd:ca:bd:46:58:36:15:ad:0c:cc:36:3e:b0:ee:dd:87:eb:
9e:25:1a:8c:f7:f2:41:48:07:8c:f2:b2:c2:ae:26:ae:b5:7e:
a3:d7:f6:ac:04:ea:c8:45:f6:1a:f6:eb:0f:41:a4:2c:68:c9:
f8:92:8d:96:dd:d3:0b:56:f5:02:24:64:5e:90:e3:70:b6:63:
90:8b:2e:e9:ac:6b:bf:97:5c:f0:5d:b5:8a:e1:0b:ab:4d:e4:
fb:79:76:61:d8:5a:dd:bb:3b:f1:a2:60:e1:54:3e:39:5f:12:
1f:62:47:8b:12:10:02:51:91:b0:79:d7:cf:58:f3:7d:4c:c2:
a2:f7:a2:d9:4c:04:0b:91:63:1a:3b:fe:3c:57:3a:49:fc:3a:
00:0d:ec:c8:c8:69:a5:46:90:62:8c:3e:e3:1a:06:e9:f9:71:
08:ac:b4:dd:3b:f1:86:db:c7:f9:0a:c3:82:4f:ad:a1:7f:0d:
3f:6e:02:24
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUKVrUBYUAMACbOP1U71CaFuwHI5AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA5MTAxODA0MjhaFw0yNzA5MDkxODA5MjhaMDMxMTAvBgNV
BAMTKEREMUQ5MTY2MEZDQ0ZDNDNDNTRDREQxNERDMzY3NTcyQjdFMzNBOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq3ZeXhV7ePKfjn4otq1b2/p1W
LypsOf2okiLxxozpdjEWK9fjmk0GOq0WCG+w3qQlRRDpehP5T8Ode7ZnH1B1cZG7
D09Kmvr9/NxMTZy2djQ8WzUXPK36uS18vudEIeEx2qrJr6eWuSXVzmjDHlAZAm6l
kjdIrgvRMyafhq4RQK+qmMBNYvrNo1EE6gaq8OnR+ioqlHApril5MKeH3Kgl2MqR
I2lAgcQ9dBrtrtszHCwlGBdEgjZDG3VABO0rKbx6cpjyYgNeZ04V0zlA3IWKFOTk
7PK9ccxRPFaiOHSmdhOqjTGtdWbmis0mqwVlUtIsP1zkveuDilA3JF8w2wXBAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQU3R2RZg/M/EPFTN0U3DZ1crfjOpQwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMzk4MjU2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAYD5N
AwQAp5RYMA0GCSqGSIb3DQEBCwUAA4IBAQBNgaYUQsU1nosnDeJZEOXiqQf4tmlP
IC40P1EnHC3sRT0lI5BVFIVawnjSYYROZoDdPhyYYCwkvtsO6dmTtS8RmDaqcThN
TBIH/cq9Rlg2Fa0MzDY+sO7dh+ueJRqM9/JBSAeM8rLCriautX6j1/asBOrIRfYa
9usPQaQsaMn4ko2W3dMLVvUCJGRekONwtmOQiy7prGu/l1zwXbWK4QurTeT7eXZh
2FrduzvxomDhVD45XxIfYkeLEhACUZGwedfPWPN9TMKi96LZTAQLkWMaO/48VzpJ
/DoADezIyGmlRpBijD7jGgbp+XEIrLTdO/GG28f5CsOCT62hfw0/bgIk
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:12:16 2026 by rpki-client