Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401861.roa
File: AS401861.roa (raw, json)
Hash identifier: qMNHZn9BAQvTWL9dY3hEYyP7K9zwV4VQvLKRWbY2kZk=
Subject key identifier: 6F:C5:50:2F:27:A4:4F:96:BF:0E:5F:47:0C:FD:DE:47:3B:17:BC:20
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4DB69F7D1C9A841FA5DE7345B72210CC3D40B5E5
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401861.roa
Signing time: Tue 07 Apr 2026 11:54:11 +0000
ROA not before: Tue 07 Apr 2026 11:49:11 +0000
ROA not after: Tue 06 Apr 2027 11:54:11 +0000
asID: 401861
IP address blocks: 143.14.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:b6:9f:7d:1c:9a:84:1f:a5:de:73:45:b7:22:10:cc:3d:40:b5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 7 11:49:11 2026 GMT
Not After : Apr 6 11:54:11 2027 GMT
Subject: CN=6FC5502F27A44F96BF0E5F470CFDDE473B17BC20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:64:3b:9a:e0:32:6d:8f:ad:99:b3:39:e9:
b4:0b:33:4b:9c:89:79:a9:8e:53:36:8f:e8:e8:e6:
cd:f5:1e:b6:ce:e5:76:73:dd:f3:b5:37:69:09:c7:
34:2f:86:a5:98:0f:b9:52:6a:45:99:cb:a5:7a:5a:
ca:64:8c:ea:8d:68:1d:e1:36:26:d1:8d:9f:77:ce:
c9:99:30:ac:0c:84:1d:bc:2c:38:5e:51:3d:3e:4f:
66:e7:17:e9:49:c0:57:4f:82:95:69:38:a3:ae:77:
4d:ad:1a:e8:97:58:80:00:83:20:75:52:90:41:c5:
53:2e:59:b3:c6:1e:81:e4:7d:dd:57:99:2d:d4:11:
03:10:7b:ba:dd:a4:b4:e5:40:ca:2b:8a:6e:c3:e8:
90:51:ab:e3:83:b6:e6:ab:d8:c5:cc:30:d7:ad:7b:
09:40:0e:54:98:77:0b:0f:50:9d:ae:56:17:00:90:
95:04:c2:dc:e9:d3:43:02:35:5c:b5:42:1b:d3:c0:
20:46:a5:e9:bb:f9:eb:18:99:6c:c6:31:02:19:bd:
58:62:ad:82:2c:4e:5c:93:1b:25:f4:e6:2c:7c:57:
e2:47:a7:05:74:97:3c:b4:e7:83:03:a9:be:9b:1f:
52:41:f7:ae:a8:21:e1:ad:fd:f1:36:cc:07:70:12:
d0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C5:50:2F:27:A4:4F:96:BF:0E:5F:47:0C:FD:DE:47:3B:17:BC:20
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401861.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.111.0/24
Signature Algorithm: sha256WithRSAEncryption
35:a7:c7:6c:7c:73:8f:33:98:16:81:4a:c6:14:32:d1:65:01:
f6:81:c7:f8:52:d8:cf:8a:11:60:ca:ab:1e:26:d1:4c:61:67:
dc:0a:bf:9b:2d:20:23:41:06:dd:36:f9:bd:43:89:ed:23:b3:
60:a7:c6:1e:77:62:ff:55:c1:c7:0e:d0:31:5a:30:a0:61:d1:
be:86:79:70:a9:5a:4f:f2:d9:f5:51:98:3f:5e:20:80:83:ff:
8f:f7:2d:81:74:4e:b3:d6:e3:a4:f6:16:8b:4e:33:c9:fa:28:
25:13:59:ee:e1:2a:5f:c7:36:67:b0:35:cd:0b:c0:3a:0b:75:
88:c5:c6:bf:68:a1:ff:ef:17:19:8d:c6:fb:df:f1:2a:45:06:
f4:de:cc:8f:be:bb:45:78:3c:a4:ee:69:88:83:e4:4e:f6:38:
39:00:c5:9b:97:8d:25:f0:38:f1:42:a6:60:5a:64:ac:25:56:
d4:d4:7c:70:20:bb:fb:68:67:fd:be:00:62:af:88:67:b8:c5:
8f:60:71:f9:df:dd:dd:7d:59:d5:bf:b6:04:00:b9:88:c8:c3:
8e:3d:bf:19:05:53:d4:90:40:d3:69:50:16:f4:e8:6e:ca:6d:
3e:66:a3:0a:5b:3e:30:b7:6f:e2:2d:22:8a:c2:96:62:ff:56:
23:ae:c3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:00 2026 by rpki-client