Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399486.roa
File: AS399486.roa (raw, json)
Hash identifier: Tn6oiVV8Ciitz32PpevtUPB6z5gq5da24RrSjfdHzeA=
Subject key identifier: 6E:D1:C9:97:09:AF:AC:60:95:45:59:C2:CF:BF:C0:ED:A1:81:F6:6E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 012CD6CAC68A4530B868EF50890E47DD1DE4A6CA
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399486.roa
Signing time: Tue 28 Jul 2026 17:31:38 +0000
ROA not before: Tue 28 Jul 2026 17:26:38 +0000
ROA not after: Tue 27 Jul 2027 17:31:38 +0000
asID: 399486
IP address blocks: 140.150.233.0/24 maxlen: 24
155.117.232.0/24 maxlen: 24
168.222.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:2c:d6:ca:c6:8a:45:30:b8:68:ef:50:89:0e:47:dd:1d:e4:a6:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 28 17:26:38 2026 GMT
Not After : Jul 27 17:31:38 2027 GMT
Subject: CN=6ED1C99709AFAC60954559C2CFBFC0EDA181F66E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1d:c0:0a:4c:2a:d3:ab:16:62:f4:29:22:1b:
69:d6:86:af:e0:77:fc:de:56:54:95:74:f3:e0:a6:
cb:a5:45:4b:78:82:ae:3f:5e:79:db:89:ef:c6:1d:
e5:5e:8d:2b:55:5e:1e:33:ce:df:0c:40:f7:86:fc:
2f:08:9b:0a:80:b3:62:ed:c6:7d:0a:ec:88:6e:81:
2e:a3:21:85:27:24:42:86:b7:dc:31:97:2d:8e:00:
db:5a:78:c2:fc:ac:c5:61:d2:48:dc:c2:c0:7c:84:
12:ce:3e:3c:58:8b:9d:ff:33:39:92:39:c1:ca:cc:
ba:89:7f:22:46:a5:66:ad:f9:ef:e5:5a:25:8d:36:
e4:a8:89:8e:08:a9:28:b8:b9:79:d0:33:be:25:b9:
06:60:ec:78:cf:64:14:66:ff:81:c6:83:86:ff:47:
00:a1:3e:df:fa:62:dd:46:2b:44:ca:d3:1f:98:39:
1f:71:ed:31:7c:31:4a:4b:88:fe:fa:8b:aa:64:44:
5a:c9:68:35:ba:44:00:46:e9:92:d1:9b:4a:20:e8:
b7:2c:ee:00:e1:ec:0d:38:10:e3:82:a7:76:ec:29:
b7:68:88:8e:f3:38:1b:0c:3f:cb:a7:6e:b1:9e:9e:
c6:f9:9b:21:dd:11:37:4d:39:98:e8:0a:9a:7d:1b:
4c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D1:C9:97:09:AF:AC:60:95:45:59:C2:CF:BF:C0:ED:A1:81:F6:6E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399486.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.233.0/24
155.117.232.0/24
168.222.97.0/24
Signature Algorithm: sha256WithRSAEncryption
15:1c:6f:e9:f2:54:f3:2a:2a:e8:1c:ed:66:b2:df:d3:66:0d:
d4:ae:05:ad:3b:1c:cd:ec:3c:44:8a:9b:a3:c3:2e:78:99:76:
ba:75:93:6c:c3:76:f9:53:61:fb:a6:3d:8e:05:14:6b:d8:01:
22:d3:06:11:2c:38:4e:21:76:65:16:60:c0:e6:78:3b:22:49:
f0:44:7e:6a:b3:cf:27:5d:56:06:31:e6:ef:68:6a:d5:33:92:
52:c6:85:50:e5:9d:e3:0c:7c:7b:b0:e4:72:fe:e2:9e:04:af:
5b:51:59:19:f4:33:89:3b:18:25:b3:ed:92:ad:2c:cc:3a:81:
46:a0:62:61:28:d5:35:f3:4f:c7:07:5f:6d:c0:6b:b4:1c:8a:
8d:02:9d:84:9c:7f:49:93:65:17:46:69:9f:b5:b4:2f:c6:f7:
9d:e4:15:9f:1b:0e:dc:83:c1:84:ba:44:fc:7c:3a:e3:cf:1b:
1a:e6:1d:a1:33:55:56:1c:17:9a:8f:18:58:a5:3d:71:c0:eb:
e1:02:90:71:44:64:95:6e:80:72:51:8d:8b:de:43:d2:4c:8d:
d4:d5:4a:ef:25:1e:39:26:4b:b1:24:54:6a:7a:1a:e4:ec:35:
99:03:47:78:c7:34:d6:8d:f2:94:6b:8a:a2:a1:ee:ee:4b:a1:
82:8f:b8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:28:09 2026 by rpki-client