Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401776.roa
File: AS401776.roa (raw, json)
Hash identifier: SeVag+z3amY3MjE6G4dCA2aP9aI8dBu5T7oMZD2kVeE=
Subject key identifier: 2B:2C:D3:9B:0D:FF:27:6C:E2:80:3D:AC:F3:01:E7:7E:D3:03:88:11
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 49494D88BB6A4E43BAA25B66D51ED55E454F6B94
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401776.roa
Signing time: Sun 03 Aug 2025 00:01:09 +0000
ROA not before: Sat 02 Aug 2025 23:56:09 +0000
ROA not after: Sun 02 Aug 2026 00:01:09 +0000
asID: 401776
IP address blocks: 96.62.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:49:4d:88:bb:6a:4e:43:ba:a2:5b:66:d5:1e:d5:5e:45:4f:6b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 2 23:56:09 2025 GMT
Not After : Aug 2 00:01:09 2026 GMT
Subject: CN=2B2CD39B0DFF276CE2803DACF301E77ED3038811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:e3:01:1a:c5:07:df:ad:49:e1:b7:fe:6a:
65:b0:cd:f5:88:79:15:8b:c5:cb:f1:af:80:08:37:
83:fc:bf:85:cd:75:8d:1a:43:1b:a8:74:2e:88:3b:
59:23:ea:f8:48:42:69:0f:2e:a3:fd:f8:75:ed:b8:
7d:fc:9e:e3:39:2e:ee:4f:c6:d4:5d:f5:21:9c:ac:
2d:b6:2a:5b:9c:bd:7a:16:30:6a:f4:a4:ab:01:1b:
5f:24:4e:1a:6f:68:41:fd:ae:24:99:7f:5a:87:81:
7d:73:f1:07:26:02:7f:3b:41:c1:c4:f0:3d:1e:d5:
18:1f:72:20:d4:24:bd:01:f6:99:c8:81:8e:53:06:
f4:c9:b0:60:54:5e:88:78:a6:b2:85:51:da:c0:fe:
ea:af:5d:7f:ee:9d:cc:33:59:31:60:3e:dd:79:b2:
2c:71:fa:e6:b6:36:a6:3f:e2:c4:90:4a:c5:8f:87:
80:0b:64:b3:65:3b:e5:12:55:5b:42:bc:18:59:3f:
32:fa:58:b7:78:64:4b:96:8d:ca:fc:3d:ef:9f:fd:
ea:30:ab:17:67:6d:1e:87:e8:ac:5c:3e:dc:3d:ef:
fe:7a:82:1f:a9:03:78:07:7e:93:db:32:e5:4c:86:
08:ed:99:52:f5:2d:0e:2b:76:48:4f:a8:34:7a:4f:
1f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2C:D3:9B:0D:FF:27:6C:E2:80:3D:AC:F3:01:E7:7E:D3:03:88:11
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.152.0/24
Signature Algorithm: sha256WithRSAEncryption
35:32:e6:1d:f1:cb:56:f3:ca:b2:f4:6d:04:0d:89:b4:73:ee:
ad:75:0d:aa:84:54:dc:da:85:0c:58:71:53:b4:5d:ac:3d:fb:
fd:69:25:6a:42:f6:15:49:c3:60:b3:04:48:48:02:5b:c8:aa:
4f:be:7a:b2:d7:a8:9c:27:d9:46:a8:ed:6e:60:de:c7:2c:7a:
a7:13:b3:20:60:4a:db:42:f8:2d:6d:f6:1e:9e:25:29:05:54:
a2:a6:66:0b:4d:72:bd:2f:fc:cd:7c:28:18:f8:43:d6:fb:d4:
d2:c3:d0:2b:ad:81:cb:9f:8a:6a:81:c0:70:a8:c2:50:96:0d:
93:e6:f3:4c:2f:68:a1:9f:1b:8f:d3:4b:28:f0:dc:cf:f1:c9:
b9:9e:35:36:fc:52:15:17:ee:99:07:36:ee:fd:ef:be:df:42:
43:d6:c3:17:ac:04:fe:20:50:6d:8d:7d:24:57:d9:8c:6c:05:
49:41:26:6c:91:08:55:2b:3e:dc:f1:8c:34:d6:df:1a:cf:42:
f1:46:5d:21:c3:02:90:d6:9c:43:a6:59:15:57:33:00:11:9d:
46:b2:be:40:48:ed:ac:2b:4d:1e:eb:dc:ba:7b:c9:e8:75:d6:
49:f9:08:65:36:99:d3:48:13:68:21:4a:40:1b:38:bd:a3:8b:
dc:f0:3c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:43:36 2025 by rpki-client