Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401776.roa
File: AS401776.roa (raw, json)
Hash identifier: LnJyq+t5YQf13OsX3lV3vRVZmCeGWAKSlBKNsRQJEwE=
Subject key identifier: 5A:BF:25:D2:EA:21:74:59:FB:94:A1:C6:9D:0E:1C:FE:F5:D8:32:3F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 773A25E52F205E1C7A875E5CBB0744E6524B07DD
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401776.roa
Signing time: Tue 28 Oct 2025 09:06:47 +0000
ROA not before: Tue 28 Oct 2025 09:01:47 +0000
ROA not after: Tue 27 Oct 2026 09:06:47 +0000
asID: 401776
IP address blocks: 96.62.114.0/24 maxlen: 24
96.62.152.0/24 maxlen: 24
143.14.75.0/24 maxlen: 24
143.14.227.0/24 maxlen: 24
143.14.241.0/24 maxlen: 24
155.117.202.0/24 maxlen: 24
162.141.17.0/24 maxlen: 24
162.141.142.0/24 maxlen: 24
167.148.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:3a:25:e5:2f:20:5e:1c:7a:87:5e:5c:bb:07:44:e6:52:4b:07:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 28 09:01:47 2025 GMT
Not After : Oct 27 09:06:47 2026 GMT
Subject: CN=5ABF25D2EA217459FB94A1C69D0E1CFEF5D8323F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:61:ee:62:2a:ca:7d:c1:78:2d:e2:5e:43:3a:
29:5f:53:28:31:26:01:e9:73:cf:82:51:17:cd:63:
4e:68:e9:e0:f7:17:0a:b9:35:36:c2:7f:94:f0:5b:
82:3b:d4:5c:f3:77:35:17:39:1d:9e:93:3f:70:8d:
60:8b:42:d2:f2:96:5b:bd:ec:73:16:65:c1:d2:95:
44:51:be:31:2d:d2:a8:a6:29:4e:bd:fb:be:9c:07:
f0:ce:89:c7:ab:ed:38:3d:22:be:72:af:49:a3:c1:
5d:d5:cf:85:9b:35:f0:8f:a2:e6:74:9a:9c:0c:87:
64:dc:ef:90:f2:6b:a5:0f:d4:a9:a2:e5:6f:b6:4d:
3d:85:e8:98:89:04:36:0a:e9:48:78:f7:38:b2:57:
26:bd:80:a5:27:5a:f6:33:52:95:bc:cd:7b:ab:ec:
f5:c7:08:21:25:a3:2a:ac:24:66:14:14:c7:63:94:
78:2d:bf:09:bc:56:06:7b:89:4c:ec:a5:cb:3b:31:
6c:d9:92:1f:60:22:36:0a:2c:00:47:a8:f5:27:c3:
e3:29:33:ec:53:05:b3:bd:28:e8:d9:fe:65:5b:f8:
fb:8d:59:d2:2c:94:f4:25:e6:a2:10:26:35:a7:0d:
a9:d9:d1:a3:38:a8:b6:f7:d8:7d:34:0f:9f:a4:38:
4d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BF:25:D2:EA:21:74:59:FB:94:A1:C6:9D:0E:1C:FE:F5:D8:32:3F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.114.0/24
96.62.152.0/24
143.14.75.0/24
143.14.227.0/24
143.14.241.0/24
155.117.202.0/24
162.141.17.0/24
162.141.142.0/24
167.148.175.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:cd:f5:a9:be:12:55:6d:ac:1c:1b:79:0f:64:5a:a3:23:60:
b6:62:2f:06:8e:8a:ba:87:e8:ae:ac:f9:00:75:66:0a:7a:ad:
f6:f9:ce:33:88:ca:36:e9:86:14:72:d5:12:b7:26:db:3b:5b:
0c:ce:ba:d2:86:3e:a0:19:94:a8:61:f5:04:e4:08:2a:e3:26:
52:ef:c7:f7:b8:3e:28:4a:12:03:49:cc:a1:d7:44:8e:fc:b1:
83:ab:a3:47:e2:82:d5:ea:f5:12:82:04:cd:1f:7f:c8:43:9a:
40:0a:65:0a:62:72:80:22:0d:36:2e:79:0d:9a:79:2d:75:95:
4a:d7:7d:ef:28:4b:e5:cb:22:d7:52:52:cc:57:6a:86:9c:34:
7d:5e:cf:ec:cf:bf:1e:4e:18:b5:d1:f5:3a:65:20:d9:83:75:
ec:70:61:47:ec:0d:20:e3:0f:24:e7:3c:84:af:cc:a9:24:dd:
2b:ba:b8:35:8f:e1:b3:2b:f2:16:5c:f9:15:01:be:e7:07:34:
f2:c1:aa:99:b4:8e:b4:bd:ee:05:41:0b:d3:fa:13:a8:51:19:
cc:de:51:e9:4b:d2:f5:b8:ae:10:18:92:64:be:e5:16:a9:38:
d8:fa:c1:3f:c1:1b:87:22:53:24:52:f2:74:ff:44:85:db:1e:
18:ba:78:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:40:55 2025 by rpki-client