Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401103.roa
File: AS401103.roa (raw, json)
Hash identifier: aT+j3Km+cj1gffkotf7zXlHG/B8nzEbKmHj+O+5Bbbc=
Subject key identifier: 5F:D6:B0:06:3D:7F:3E:22:F1:89:4E:F7:98:C8:F9:AA:DF:B5:53:3C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6B417BDD786E45E99E70B9255F0B11C17F41CF0E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401103.roa
Signing time: Thu 02 Apr 2026 14:46:58 +0000
ROA not before: Thu 02 Apr 2026 14:41:58 +0000
ROA not after: Thu 01 Apr 2027 14:46:58 +0000
asID: 401103
IP address blocks: 146.103.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:41:7b:dd:78:6e:45:e9:9e:70:b9:25:5f:0b:11:c1:7f:41:cf:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 2 14:41:58 2026 GMT
Not After : Apr 1 14:46:58 2027 GMT
Subject: CN=5FD6B0063D7F3E22F1894EF798C8F9AADFB5533C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4d:83:29:80:07:ef:b7:1c:f1:62:d0:af:41:
11:9f:54:61:d2:4e:fd:f3:60:47:3a:0d:80:f9:94:
35:de:5a:55:c1:e3:f6:bf:0f:32:be:2a:d0:ca:0d:
84:73:41:a2:a4:ef:09:8f:96:61:c9:87:82:2f:cc:
00:a8:a7:8e:7e:55:c9:52:47:75:35:a5:1d:86:c1:
a1:a5:7e:cb:f0:a6:85:bb:f0:2f:25:26:04:0f:d4:
68:39:bb:66:0e:5d:95:56:3b:74:82:a8:9a:49:c6:
53:5d:ff:3c:c8:c5:11:f0:5f:32:bd:94:60:8b:c7:
b2:0f:49:28:55:42:70:1e:72:da:23:a0:79:76:44:
13:13:d7:91:a0:9d:68:f8:0c:83:26:7a:11:c0:c6:
da:cc:bc:5d:66:b8:73:27:c3:13:37:ee:11:5b:d9:
4b:e4:09:08:6f:1f:5a:f7:55:7e:c4:da:09:10:95:
33:5f:62:b8:06:ca:61:f6:72:9d:24:92:34:e6:a7:
43:30:e6:12:a1:6b:d9:07:3a:e2:b7:b6:c9:51:76:
a3:56:ed:5f:11:c0:62:7a:50:38:a5:c1:de:61:7d:
62:28:66:d6:c7:b3:18:19:11:24:13:7a:d5:5f:97:
ba:e0:6b:15:10:15:6e:e8:0e:2f:76:5c:e4:d4:f7:
6b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D6:B0:06:3D:7F:3E:22:F1:89:4E:F7:98:C8:F9:AA:DF:B5:53:3C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401103.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.58.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:24:be:54:6f:97:c1:53:af:7a:cd:9d:eb:71:67:4b:72:e1:
e6:be:b3:c5:ba:cd:6c:d6:41:ab:5f:f0:b9:66:b0:37:4c:d4:
c4:d6:44:bf:aa:4d:38:99:26:78:8a:ba:d5:c7:24:f4:27:23:
cd:0f:bf:7b:2c:5a:fa:64:0f:47:4c:0f:70:d6:66:9c:41:a0:
fe:9d:db:00:36:5e:e9:9a:a2:a9:37:14:3a:1b:26:67:83:32:
8f:19:25:db:61:db:1a:57:2f:c2:cd:6d:cc:62:08:47:0f:8a:
8b:45:d5:f5:50:d6:de:5e:99:2a:48:85:6a:7d:b7:95:02:6f:
06:ad:65:6a:27:87:4d:e1:58:1d:12:4f:43:ff:c7:6b:d2:c4:
ba:b2:fa:06:08:70:d6:a0:c2:0d:d8:f5:7a:a6:30:6f:f1:14:
a6:d1:8f:3b:e3:d4:1d:d7:83:4a:fc:1a:e3:ca:89:6f:14:0e:
af:23:be:0d:36:2f:ee:72:92:71:dc:70:c9:65:64:42:56:a5:
15:d8:fa:ec:cb:08:49:be:84:68:76:43:fd:f7:22:ad:8b:5f:
70:25:23:b1:f9:d4:be:c7:4f:50:7c:80:c1:5b:a9:22:b3:ff:
f0:af:9a:6f:5d:bc:db:2d:d9:9a:04:4b:d9:56:ce:a4:04:fa:
2f:d7:96:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:10:59 2026 by rpki-client