Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399359.roa
File: AS399359.roa (raw, json)
Hash identifier: 8+nkEYnVPXzZYcgxhCfmlddVi80mZ5PI9Ya/7hMz05Q=
Subject key identifier: D2:EB:DA:95:47:35:FD:39:77:41:70:6D:FB:59:DF:F6:62:3B:38:0D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 61A06C7C944186FC3CB97258E94BDC2719AE5BAA
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399359.roa
Signing time: Sun 20 Sep 2026 17:40:16 +0000
ROA not before: Sun 20 Sep 2026 17:35:16 +0000
ROA not after: Sun 19 Sep 2027 17:40:16 +0000
asID: 399359
IP address blocks: 66.132.196.0/24 maxlen: 24
167.148.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:a0:6c:7c:94:41:86:fc:3c:b9:72:58:e9:4b:dc:27:19:ae:5b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 20 17:35:16 2026 GMT
Not After : Sep 19 17:40:16 2027 GMT
Subject: CN=D2EBDA954735FD397741706DFB59DFF6623B380D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:08:b4:91:eb:66:5a:2e:02:f8:d6:ef:0f:
e9:28:c2:4f:da:8e:f7:e4:84:e0:db:52:37:d1:e9:
0e:13:c8:10:d3:de:ae:02:e7:ad:85:00:16:af:00:
b6:fd:d3:bb:e4:72:b7:8a:9f:6f:89:3d:db:ab:16:
75:6c:1d:48:c4:14:40:cc:c1:91:37:6b:c6:0a:59:
8c:f0:df:a9:67:ae:6c:32:45:e1:c3:28:1a:f8:8e:
84:3a:e1:b7:2c:2d:8e:9d:67:25:62:a3:56:23:44:
a2:83:af:34:6c:f4:57:43:6c:f9:9f:dc:f4:52:f0:
a6:fb:82:21:d1:0a:d2:b3:df:7d:ae:40:d9:4e:64:
cf:2f:18:b1:8f:14:2e:af:42:61:80:ae:aa:44:73:
cf:4e:34:1c:e7:01:96:c6:22:7a:49:29:fb:87:eb:
85:e7:4b:7c:67:61:9e:d1:63:91:57:4e:63:0e:ba:
4a:eb:55:e1:3e:1d:d5:20:1a:fc:22:ca:2d:70:e2:
25:30:02:6b:02:3d:21:46:8f:af:9e:5f:fe:1e:89:
e5:1b:13:90:54:63:ec:0c:ba:cc:b9:9b:a1:d5:e4:
34:d8:f8:37:07:04:bc:43:3a:84:3a:f1:1b:1b:99:
6c:d1:4c:64:ae:9c:c1:42:56:f8:e9:9c:e3:13:a3:
b5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EB:DA:95:47:35:FD:39:77:41:70:6D:FB:59:DF:F6:62:3B:38:0D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.132.196.0/24
167.148.80.0/24
Signature Algorithm: sha256WithRSAEncryption
81:07:b0:99:35:c1:ab:b2:03:37:8b:1a:1a:ec:39:45:1b:48:
b4:15:80:7c:33:0c:92:03:1c:a5:b4:f0:85:73:dd:06:d4:1a:
c6:25:d4:65:a2:bd:99:63:7f:08:46:37:74:dc:cf:c5:a9:0c:
ad:4b:64:5c:f1:c4:15:d5:5c:f5:58:b3:2f:3b:cc:23:d4:68:
46:a9:68:a6:4c:bd:c7:f3:78:6c:fb:7b:21:14:02:60:74:4a:
64:c2:a6:db:5b:16:52:80:d3:23:3e:16:6d:60:5e:1c:80:40:
4f:44:15:5d:5d:dc:95:d3:82:ad:93:cc:7e:33:39:26:24:e0:
84:07:2c:e7:ef:95:ee:f8:74:f9:42:ec:f5:28:4c:f7:34:0e:
c4:aa:27:c2:40:27:74:d6:4e:01:e9:fb:c2:53:df:db:a1:93:
ac:89:79:0a:34:c7:3d:69:ff:f0:99:87:df:b4:63:94:cc:0e:
52:27:b7:c0:79:06:3b:7a:ff:db:e4:cf:87:ec:20:16:2b:ec:
4a:a8:d6:98:29:0a:fe:11:3c:26:ec:95:43:06:13:84:47:de:
87:e5:02:d4:aa:69:ea:a9:8b:11:c4:35:98:90:5f:46:95:f8:
82:cd:83:94:38:d0:f9:56:45:11:ab:a4:7f:ca:63:54:db:ba:
e7:86:71:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:22:21 2026 by rpki-client