Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401819.roa
File: AS401819.roa (raw, json)
Hash identifier: P27nCvA5zPkUIThK/fabw7AYWQ6ttHAoE9KRq+cLnLA=
Subject key identifier: 44:86:DA:7D:33:18:F1:D6:11:87:80:23:F6:06:11:40:18:F7:00:DA
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7209A856133FEA6C5034AB477981C51B430FEEA2
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401819.roa
Signing time: Mon 30 Mar 2026 09:03:00 +0000
ROA not before: Mon 30 Mar 2026 08:58:00 +0000
ROA not after: Mon 29 Mar 2027 09:03:00 +0000
asID: 401819
IP address blocks: 167.148.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:09:a8:56:13:3f:ea:6c:50:34:ab:47:79:81:c5:1b:43:0f:ee:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 30 08:58:00 2026 GMT
Not After : Mar 29 09:03:00 2027 GMT
Subject: CN=4486DA7D3318F1D611878023F606114018F700DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f2:89:e5:d1:d5:0d:d6:1a:74:21:36:91:d3:
ed:06:93:c8:48:f1:42:78:49:e9:be:f0:a0:5f:62:
ad:e7:6c:c2:55:a3:fd:cb:fc:c6:64:75:47:33:7c:
b3:5d:69:10:2f:6d:01:56:78:95:37:78:e9:e4:1d:
e6:df:79:a9:c7:23:b5:9b:97:99:b2:b2:37:c5:8b:
f6:70:f3:89:9f:36:ca:e3:df:19:25:ca:7c:4c:ca:
8d:41:b4:5d:d3:27:14:f3:38:10:e3:80:a0:9d:aa:
94:70:1f:28:c9:b4:ea:ba:ac:2c:84:f7:d0:b8:19:
d7:3b:cc:e9:44:82:ef:d8:b1:e5:be:45:b1:77:d8:
09:68:1c:b4:47:3d:a8:82:9f:6f:c8:fa:ec:d6:5f:
63:6c:09:f3:ee:53:fe:a7:f6:27:4c:c3:43:ef:a9:
f4:7b:46:69:1e:bb:82:8e:ec:d7:1a:bc:a4:68:07:
3d:6c:92:f7:3d:12:21:d0:ad:cc:c6:d3:e7:57:51:
e6:ec:92:c5:d4:fb:19:5b:29:6a:1e:d0:ae:fa:b7:
83:d5:8c:4b:1b:46:96:05:42:d0:ac:6d:97:09:66:
31:b9:6f:39:9e:ed:68:9f:46:98:99:8a:55:56:5b:
66:5d:43:ab:80:53:1c:cb:04:44:c4:df:28:8e:3d:
f8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:86:DA:7D:33:18:F1:D6:11:87:80:23:F6:06:11:40:18:F7:00:DA
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401819.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.189.0/24
Signature Algorithm: sha256WithRSAEncryption
03:2c:22:65:19:8b:bd:51:67:65:0c:fd:59:a5:bb:3c:0e:c2:
11:cb:08:5a:05:b8:79:a0:84:7e:8f:28:a4:d6:5e:d0:cd:f0:
ba:62:d6:4c:98:f3:0d:3e:78:db:64:47:0e:67:e2:b7:c7:1d:
46:2e:87:ee:38:c3:a4:03:58:68:ff:9d:06:0d:35:82:08:24:
fd:af:49:b9:56:03:59:8b:bc:99:c3:e9:bc:13:4e:00:98:c4:
4c:62:12:ef:dc:d6:83:ca:45:90:b1:a1:ac:48:e9:cb:73:c3:
63:77:59:06:5d:bc:53:03:3f:f2:87:ce:a2:7c:a8:52:4e:52:
82:7c:c3:23:53:14:5d:77:22:e0:1c:18:0a:a7:67:6c:2e:91:
55:42:8c:47:66:ff:6d:7a:f0:17:ca:8c:35:15:dd:a6:10:d0:
d6:b7:b3:53:3d:45:f0:6c:1e:b4:5d:e9:f7:ab:22:ad:ae:dd:
e1:93:5b:77:a6:cf:cd:d4:ea:13:2e:62:01:3b:5d:ac:5e:05:
86:84:05:5b:38:65:b8:f1:76:20:44:d5:f1:66:f2:6d:ff:9d:
22:92:c1:4d:af:6e:c3:f5:9e:3f:3b:f3:6b:cc:01:e7:40:84:
52:1c:38:c7:9f:93:4a:f9:20:ea:00:19:64:62:f7:84:9f:82:
64:ba:ac:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:53:59 2026 by rpki-client