Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: CwcPv/Qn29kd/Qlt3WBTZj2QTMelMxzuGm1Qo7m0Rdg=
Subject key identifier: EA:7E:5A:8F:60:F5:98:89:81:FE:B9:3A:28:06:A8:26:61:10:90:47
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 748D121AFF8EE389ACBEE9863B3B0EEEC27F176C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402265.roa
Signing time: Sun 20 Sep 2026 23:15:13 +0000
ROA not before: Sun 20 Sep 2026 23:10:13 +0000
ROA not after: Sun 19 Sep 2027 23:15:13 +0000
asID: 402265
IP address blocks: 66.132.235.0/24 maxlen: 24
66.132.252.0/24 maxlen: 24
69.90.34.0/24 maxlen: 24
69.90.116.0/24 maxlen: 24
140.233.161.0/24 maxlen: 24
155.117.23.0/24 maxlen: 24
155.117.218.0/24 maxlen: 24
162.141.158.0/24 maxlen: 24
167.148.8.0/24 maxlen: 24
167.148.81.0/24 maxlen: 24
167.148.86.0/24 maxlen: 24
167.148.159.0/24 maxlen: 24
168.222.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:8d:12:1a:ff:8e:e3:89:ac:be:e9:86:3b:3b:0e:ee:c2:7f:17:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 20 23:10:13 2026 GMT
Not After : Sep 19 23:15:13 2027 GMT
Subject: CN=EA7E5A8F60F5988981FEB93A2806A82661109047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ec:12:99:b3:0b:ad:0f:50:8a:e0:be:18:37:
87:da:3f:bc:99:b6:8e:8e:97:cf:58:c1:fc:72:23:
e8:e9:f3:43:06:12:c7:6f:31:d8:5c:39:fc:26:59:
f7:3d:0a:77:d0:b3:84:fe:bd:11:0e:cc:13:44:3b:
ad:19:4c:69:6e:03:60:60:e9:19:45:21:fa:4b:b8:
90:17:c0:ca:b6:88:5c:38:87:93:ef:2d:f7:ce:34:
ba:57:40:80:dc:76:a4:3b:2f:ff:5e:b8:69:8a:8f:
7b:ba:68:14:03:30:60:cd:e4:29:1b:70:11:22:99:
42:23:3f:5b:21:42:6a:9e:d6:ee:49:00:b6:e6:73:
e5:a3:d3:75:9d:69:36:ed:35:8a:b6:89:97:30:34:
2a:7c:e3:bf:15:99:25:9e:b3:5a:cf:f2:2b:4f:7d:
f3:79:19:87:08:b9:27:f9:f6:9a:2c:b1:a0:6c:1a:
1b:e5:86:21:72:7f:d1:6e:16:27:d4:57:f8:38:35:
56:0d:bd:80:6f:a6:85:a7:37:57:9b:2c:d6:f5:fe:
3c:c9:14:c1:35:93:79:36:0b:9a:fa:9e:37:fb:ad:
1b:61:1e:c5:66:96:c9:fb:d9:12:7b:3f:84:e9:0d:
d6:90:f7:21:79:33:f6:33:39:45:9a:5f:0e:9a:92:
02:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7E:5A:8F:60:F5:98:89:81:FE:B9:3A:28:06:A8:26:61:10:90:47
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.132.235.0/24
66.132.252.0/24
69.90.34.0/24
69.90.116.0/24
140.233.161.0/24
155.117.23.0/24
155.117.218.0/24
162.141.158.0/24
167.148.8.0/24
167.148.81.0/24
167.148.86.0/24
167.148.159.0/24
168.222.26.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:1f:9c:4b:d5:e9:16:f9:3e:4b:83:b8:33:43:80:df:00:a0:
32:2b:0c:9a:3d:d0:31:c5:dd:2b:9d:e4:6c:d2:ec:5f:93:e6:
b8:b6:29:93:07:bd:55:5e:76:cf:11:da:78:bf:d4:9f:ed:03:
e6:17:cd:68:b8:8e:75:a7:8a:ae:6b:06:e2:66:b6:6b:07:0a:
18:7f:d4:9a:58:cd:b9:25:44:4d:66:f0:33:3a:c7:7f:44:b5:
ca:a1:b7:53:cf:64:6e:ca:a4:49:81:96:d7:a0:2e:61:d2:6c:
a5:5c:eb:c4:c6:0f:c0:38:85:76:64:e6:08:0e:c7:87:2e:f7:
73:f9:cf:6f:5b:6c:f1:ef:69:01:62:bc:a6:c2:30:3e:f5:8c:
da:93:0a:5d:8e:2a:7f:7b:ef:41:99:e4:e2:4b:b1:08:cc:b3:
e8:b1:e0:23:84:42:bb:36:7f:42:15:10:d8:9b:aa:63:55:66:
e0:21:3a:64:4f:7d:66:59:4f:d7:1f:69:90:fa:f8:66:7b:2e:
64:ab:88:b5:50:03:de:79:a2:45:9e:c9:1a:5f:32:70:b5:fe:
47:60:cb:55:eb:de:7e:8a:32:d6:09:62:6e:ce:37:f0:a6:db:
74:25:4a:7a:26:31:cf:79:8b:40:fc:50:18:33:ce:3e:a6:33:
27:ff:d5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:56:29 2026 by rpki-client