Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399955.roa
File: AS399955.roa (raw, json)
Hash identifier: W/dUCezUmh6sCeFhYGXVCnrMFQrZPlZLVF9etRp/oGE=
Subject key identifier: B0:97:22:61:C7:B6:E3:C0:39:BA:EB:B9:15:F8:17:24:89:CF:1E:09
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 71A0AB5CC124F3F7382C3352CCC78B54EF4D8F4A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399955.roa
Signing time: Tue 08 Sep 2026 00:07:34 +0000
ROA not before: Tue 08 Sep 2026 00:02:34 +0000
ROA not after: Tue 07 Sep 2027 00:07:34 +0000
asID: 399955
IP address blocks: 143.14.232.0/21 maxlen: 24
162.141.2.0/23 maxlen: 24
162.141.6.0/23 maxlen: 24
162.141.22.0/23 maxlen: 24
162.141.24.0/22 maxlen: 24
162.141.28.0/22 maxlen: 24
162.141.32.0/22 maxlen: 24
162.141.40.0/22 maxlen: 24
162.141.56.0/22 maxlen: 24
162.141.60.0/22 maxlen: 24
162.141.72.0/22 maxlen: 24
162.141.76.0/23 maxlen: 24
162.141.134.0/23 maxlen: 24
162.141.144.0/21 maxlen: 24
162.141.156.0/23 maxlen: 24
162.141.168.0/21 maxlen: 24
162.141.192.0/21 maxlen: 24
162.141.200.0/21 maxlen: 24
162.141.208.0/21 maxlen: 24
162.141.216.0/21 maxlen: 24
162.141.224.0/21 maxlen: 24
162.141.232.0/21 maxlen: 24
162.141.240.0/21 maxlen: 24
162.141.248.0/21 maxlen: 24
167.148.16.0/21 maxlen: 24
167.148.24.0/22 maxlen: 24
167.148.43.0/24 maxlen: 24
167.148.44.0/23 maxlen: 24
167.148.48.0/21 maxlen: 24
167.148.56.0/22 maxlen: 24
167.148.60.0/22 maxlen: 24
167.148.64.0/22 maxlen: 24
167.148.75.0/24 maxlen: 24
167.148.76.0/22 maxlen: 24
167.148.108.0/22 maxlen: 24
167.148.145.0/24 maxlen: 24
167.148.185.0/24 maxlen: 24
167.148.220.0/23 maxlen: 24
167.148.224.0/21 maxlen: 24
167.148.232.0/21 maxlen: 24
167.148.240.0/21 maxlen: 24
167.148.248.0/21 maxlen: 24
168.222.6.0/24 maxlen: 24
168.222.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:a0:ab:5c:c1:24:f3:f7:38:2c:33:52:cc:c7:8b:54:ef:4d:8f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 8 00:02:34 2026 GMT
Not After : Sep 7 00:07:34 2027 GMT
Subject: CN=B0972261C7B6E3C039BAEBB915F8172489CF1E09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1c:f4:ec:e0:a2:fb:51:21:68:f0:ef:aa:a2:
e0:2e:a7:43:eb:ff:9b:b3:0e:ba:b2:8f:55:18:0e:
17:1f:d2:06:38:29:61:29:83:17:d7:96:f1:42:b1:
81:90:af:e5:c8:86:b2:76:81:f9:4e:29:8e:e7:1b:
be:43:d5:48:34:1e:72:c9:ed:b6:02:52:99:bd:6d:
e8:c8:0d:be:48:b5:3d:db:0f:af:b6:83:6b:ea:1c:
6d:13:f8:93:bb:fa:68:2c:9a:2f:57:c9:d0:0e:64:
84:39:0a:a5:e5:48:a1:69:38:45:1b:7f:cd:8a:c7:
91:92:ee:14:d0:8e:49:9e:87:cd:26:6a:56:d7:cc:
47:01:13:f4:8c:aa:22:32:13:76:0b:ab:8a:c9:54:
ba:ff:4e:b4:90:b4:e7:72:43:d1:5e:0b:9d:e6:2e:
f5:55:2a:0c:24:64:b0:cf:fa:5c:a1:03:3e:40:dc:
bf:d1:54:03:1e:34:72:03:c4:ad:61:74:e1:4b:a3:
82:b2:a8:dd:30:7f:95:88:a6:1f:23:f5:ac:fb:f3:
8e:fd:f3:2e:26:16:c9:b7:57:83:af:f2:fd:9f:8f:
47:61:e2:6a:32:9e:cb:6c:71:b9:89:ec:56:f7:22:
1d:0d:ff:0a:2b:9c:d4:40:46:bb:12:b8:71:96:dc:
6f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:97:22:61:C7:B6:E3:C0:39:BA:EB:B9:15:F8:17:24:89:CF:1E:09
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399955.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.232.0/21
162.141.2.0/23
162.141.6.0/23
162.141.22.0-162.141.35.255
162.141.40.0/22
162.141.56.0/21
162.141.72.0-162.141.77.255
162.141.134.0/23
162.141.144.0/21
162.141.156.0/23
162.141.168.0/21
162.141.192.0/18
167.148.16.0-167.148.27.255
167.148.43.0-167.148.45.255
167.148.48.0-167.148.67.255
167.148.75.0-167.148.79.255
167.148.108.0/22
167.148.145.0/24
167.148.185.0/24
167.148.220.0/23
167.148.224.0/19
168.222.6.0/24
168.222.126.0/23
Signature Algorithm: sha256WithRSAEncryption
66:99:f9:c4:a2:0f:5d:37:88:07:18:82:6a:6b:f4:31:fb:d5:
42:20:09:f4:bc:ca:80:41:a7:16:13:da:f0:01:75:aa:e4:62:
75:f5:2b:b8:a0:68:30:3a:e6:bb:47:70:90:d1:33:a4:f7:4a:
35:b7:71:54:2b:1f:e9:b9:53:27:7d:68:83:cc:e6:64:6f:68:
c3:7a:05:82:f8:05:51:1e:43:80:d5:be:93:9b:d0:ae:61:7d:
94:b2:b6:f5:10:94:ff:fb:44:90:a9:1f:17:8c:a1:9a:e0:ae:
67:06:22:06:b9:69:dd:8c:d5:a2:0c:e5:90:9e:80:2a:fb:07:
83:6d:f8:f4:dc:28:27:32:1c:d5:74:28:41:2e:c4:55:1f:d9:
36:6b:ed:11:be:2c:00:a2:69:f5:ec:53:d9:9d:02:d1:7d:2f:
d8:b1:ec:9d:45:3f:51:03:91:71:bc:59:0a:a5:6e:72:43:ef:
16:28:4b:26:e8:11:7b:23:6c:92:9a:ad:35:ba:2d:ff:f7:c6:
f4:e5:bc:7c:bf:07:a1:05:d6:8a:4a:fc:f7:23:6f:fc:87:c8:
ca:ac:f3:d3:d4:0a:32:5a:cf:f0:ce:13:6d:19:f9:a7:cf:c3:
5a:6b:ef:a0:1b:c9:7f:0a:4e:f1:cd:4d:05:e8:59:b2:d0:46:
e1:96:47:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:50:35 2026 by rpki-client