Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402215.roa
File: AS402215.roa (raw, json)
Hash identifier: QkkZ5vXbyi1ZhgTL1pERSYbEm1jU59k2jQdeCOkMUvo=
Subject key identifier: B6:C0:0E:D9:2C:E7:14:70:A6:EC:08:DE:6F:C1:6F:04:80:E3:73:07
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1B0F3C7CF44641C704A3460F6BDE149B46C79E8E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402215.roa
Signing time: Tue 28 Jul 2026 06:21:41 +0000
ROA not before: Tue 28 Jul 2026 06:16:41 +0000
ROA not after: Tue 27 Jul 2027 06:21:41 +0000
asID: 402215
IP address blocks: 96.62.249.0/24 maxlen: 24
145.223.4.0/24 maxlen: 24
145.223.5.0/24 maxlen: 24
150.241.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:0f:3c:7c:f4:46:41:c7:04:a3:46:0f:6b:de:14:9b:46:c7:9e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 28 06:16:41 2026 GMT
Not After : Jul 27 06:21:41 2027 GMT
Subject: CN=B6C00ED92CE71470A6EC08DE6FC16F0480E37307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e3:9d:db:50:1a:ab:88:a7:8a:e5:53:42:09:
16:e5:c7:c2:bd:fc:22:35:65:e3:48:c0:33:22:82:
c0:72:11:30:c7:49:ab:6b:97:1e:b9:7d:67:8f:f8:
4e:72:14:5d:6e:22:85:2f:a8:99:3d:05:3e:a4:ca:
e7:6d:26:cf:95:a6:0d:c6:86:17:da:11:9e:5f:e5:
1c:07:17:c2:89:a7:43:99:17:a1:26:15:13:d2:70:
c6:9f:59:5a:74:26:d9:86:16:5c:d0:2e:4b:d2:a8:
93:59:5c:e0:4a:90:45:93:4a:2d:39:1b:2e:8b:ca:
76:24:16:b2:19:60:5a:38:02:39:2a:3e:01:78:52:
78:50:80:a7:e8:a0:48:0d:08:d0:c5:24:78:c0:33:
0e:85:f2:75:e7:a3:93:eb:68:20:95:0f:8d:83:00:
29:8c:f2:0e:9b:d3:0f:94:3a:a5:1b:be:de:80:c5:
cf:10:d8:05:db:7d:c3:de:92:a8:d8:c6:89:90:49:
da:b1:9d:00:9c:43:6f:22:8c:46:df:02:9d:88:ce:
3c:67:25:da:d1:7e:26:e9:5c:e3:36:7e:72:db:07:
91:32:2e:32:13:20:4e:e5:7c:86:5b:df:da:fa:72:
e0:5d:08:22:5f:1b:7d:ab:2b:42:68:ed:5e:05:56:
c1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C0:0E:D9:2C:E7:14:70:A6:EC:08:DE:6F:C1:6F:04:80:E3:73:07
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.249.0/24
145.223.4.0/23
150.241.243.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:6a:0a:ff:56:2f:ca:86:bd:03:03:3b:f9:4e:e5:22:56:c6:
81:2c:71:9a:27:1d:75:cb:d1:ae:ba:66:7d:fd:e0:d6:f3:44:
9f:29:31:30:fc:88:89:d0:12:c3:9e:ca:1a:32:f1:f0:3e:b6:
da:8d:78:ad:21:6e:bc:32:b7:9c:9e:ba:8d:b0:0f:65:c8:c2:
2b:de:9c:54:89:c1:aa:1a:2a:35:59:2b:be:1f:30:1a:7f:04:
ee:80:e9:9d:2a:4a:a6:26:11:26:c4:aa:df:48:38:c2:50:de:
ce:41:79:f4:7a:8e:bf:90:e8:03:3c:fd:8c:42:54:08:1c:60:
68:b2:09:30:c1:1b:c3:cc:6e:36:38:d7:72:da:2d:e8:e2:bf:
4d:05:e8:b0:03:65:a5:bf:17:82:bb:63:93:5c:0b:df:a9:ff:
1b:1c:7e:78:fa:c0:a8:14:62:99:70:9a:51:47:82:2f:3d:3d:
e3:e7:7e:34:4b:c5:21:b9:74:76:f5:0c:cc:05:db:39:58:5f:
31:d8:e9:45:44:3b:6e:7f:ff:11:13:6d:2c:7f:60:90:df:c5:
b9:fc:e1:5f:0f:a8:28:34:c8:a0:04:ff:1a:68:57:18:27:3e:
db:b0:02:73:93:db:f8:f2:66:93:e7:89:68:45:15:16:4a:cf:
64:74:37:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:03:29 2026 by rpki-client