Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401776.roa
File: AS401776.roa (raw, json)
Hash identifier: cmxvwmMVJGexyV7YlDC/mtiNU/0fBLHOfwqSP5wpc2s=
Subject key identifier: 84:F7:57:87:C1:86:72:E1:10:CA:C1:34:66:08:9B:97:B6:C9:BF:6D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 535A3A6BBFCA588EE09788180B07DB82B098BEDA
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401776.roa
Signing time: Mon 02 Feb 2026 08:59:18 +0000
ROA not before: Mon 02 Feb 2026 08:54:18 +0000
ROA not after: Mon 01 Feb 2027 08:59:18 +0000
asID: 401776
IP address blocks: 96.62.114.0/24 maxlen: 24
147.79.16.0/24 maxlen: 24
150.241.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:5a:3a:6b:bf:ca:58:8e:e0:97:88:18:0b:07:db:82:b0:98:be:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 2 08:54:18 2026 GMT
Not After : Feb 1 08:59:18 2027 GMT
Subject: CN=84F75787C18672E110CAC13466089B97B6C9BF6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8c:26:63:55:61:2d:82:72:7f:7c:30:09:1f:
16:b1:9c:08:5e:bf:f4:7c:6f:dd:37:ee:22:65:52:
14:c6:58:06:cf:db:21:fa:f5:41:ff:32:dd:39:84:
e2:41:1d:00:66:22:2f:57:e2:86:0d:f8:2f:c8:b9:
c5:4f:d9:57:63:77:60:73:0f:7a:3e:9e:ed:94:d4:
82:b6:4c:bc:cb:e7:3d:49:c7:ee:2c:81:df:85:55:
ee:6d:2e:c2:8f:4d:a3:50:56:c1:6d:5e:60:23:9a:
0b:a3:e1:50:22:4f:9e:04:56:98:b5:a1:8f:c9:51:
d1:51:d0:ac:4c:f8:03:de:03:1f:1a:06:f8:3a:3d:
21:65:6c:ea:c2:22:06:80:94:fa:4b:ca:c4:cf:ba:
e4:3c:12:de:92:41:70:8a:14:d6:ee:35:b7:d6:e1:
06:21:e8:b6:87:65:a0:1f:4b:03:94:98:cd:80:7a:
6e:02:25:41:7e:21:d2:26:2d:3a:7d:48:48:de:8d:
c9:76:6d:43:cf:9e:20:f6:2e:6b:3a:79:82:de:77:
28:6e:ae:d5:03:f2:16:5f:64:96:b4:26:24:63:7a:
93:b7:24:c1:57:47:56:17:90:f0:e7:91:df:fc:13:
63:a9:e3:51:32:e3:82:4d:90:1d:da:49:81:3a:d6:
e0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F7:57:87:C1:86:72:E1:10:CA:C1:34:66:08:9B:97:B6:C9:BF:6D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.114.0/24
147.79.16.0/24
150.241.131.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:66:f2:c1:de:35:e3:09:74:74:cf:e1:cc:c1:a1:88:f4:63:
a5:14:c1:30:45:bb:05:63:db:3f:d5:d1:57:23:ff:55:97:4e:
d0:24:8a:a3:a4:f2:fe:c4:19:3c:1b:bd:da:c4:da:1a:c4:2c:
b8:14:3d:86:59:e9:50:30:de:3b:1a:34:f9:c8:7e:c3:cd:fa:
82:65:6a:8a:5e:67:f8:43:aa:92:92:3d:fe:60:0e:93:12:a9:
6e:cc:6c:01:55:34:90:c2:59:fc:f9:42:db:a3:a4:c4:27:da:
48:99:4b:1d:70:82:5a:db:27:c2:3b:44:00:31:ac:39:2b:15:
8e:06:bd:fe:3d:4b:cb:3e:73:37:8f:5f:da:25:fc:08:7a:51:
c3:76:fa:31:6b:c8:2f:dc:37:2d:5a:1d:fe:f3:26:56:03:b6:
ae:bd:46:70:21:b5:21:53:23:77:7d:2c:20:c6:29:51:99:43:
53:f3:9e:dc:c0:7c:6d:7a:be:85:2f:2c:6d:c6:07:f0:80:ec:
ad:3d:0a:04:2c:80:f6:6e:d5:35:1c:14:55:7e:ed:a5:6b:be:
20:d2:d4:30:a7:f7:96:a1:29:52:91:59:07:58:13:b7:c8:34:
eb:ed:06:71:b6:a9:34:51:a0:66:a4:02:e9:69:5a:c1:ed:15:
39:12:ee:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:53:14 2026 by rpki-client