Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: GLz5NnwmsjXENXWCJY2q4HDY0rUB84vTDsKVCOVKGno=
Subject key identifier: 16:6A:3C:F8:BA:18:09:05:53:BC:46:2C:6A:F5:7F:8C:1A:B3:15:CA
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 47A3261CDF5A22C71FA894E3D32F59EBCDF221C6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402265.roa
Signing time: Sat 24 Oct 2026 06:14:57 +0000
ROA not before: Sat 24 Oct 2026 06:09:57 +0000
ROA not after: Sat 23 Oct 2027 06:14:57 +0000
asID: 402265
IP address blocks: 66.132.235.0/24 maxlen: 24
66.132.252.0/24 maxlen: 24
69.90.34.0/24 maxlen: 24
69.90.116.0/24 maxlen: 24
69.90.118.0/24 maxlen: 24
69.90.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:a3:26:1c:df:5a:22:c7:1f:a8:94:e3:d3:2f:59:eb:cd:f2:21:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 24 06:09:57 2026 GMT
Not After : Oct 23 06:14:57 2027 GMT
Subject: CN=166A3CF8BA18090553BC462C6AF57F8C1AB315CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c2:00:9e:4e:85:bf:ba:3e:02:e0:c9:22:9d:
7b:82:07:5b:62:21:13:c6:61:f8:46:eb:03:f0:12:
d0:2f:ff:2b:81:6a:c1:fd:31:c0:3d:10:25:20:9c:
eb:8b:db:44:ce:cd:90:b9:ee:a1:c4:6c:13:38:23:
60:85:48:9a:78:d5:b3:8f:69:b7:0e:71:87:00:9a:
25:05:b5:c8:80:c0:e5:0d:33:da:31:2d:8f:72:e0:
52:e8:2e:8c:33:e0:56:c9:02:86:b8:1d:5f:4b:ee:
2f:89:bb:8e:4a:40:7f:65:9f:24:bd:08:53:d1:4c:
7a:e4:11:36:7a:f6:ed:62:9f:cf:9d:ff:3c:87:01:
ef:2f:d9:76:87:47:a8:47:f2:80:77:14:7b:fd:82:
35:af:2a:35:7b:ce:03:16:64:eb:64:7e:b4:e5:e1:
12:a0:55:06:c8:93:b9:eb:5d:92:08:05:72:cb:0a:
58:25:a1:90:ba:4e:6e:6e:73:ba:f5:d4:dc:7a:41:
95:bc:c2:6a:b9:65:b6:5b:ad:51:0f:65:43:95:0b:
01:30:ef:6b:4e:6c:2b:46:a6:5e:ff:c5:3b:80:1f:
fd:6c:8c:bd:94:78:f1:cc:c1:16:4c:9f:b2:d5:59:
27:16:0d:12:73:9a:2f:b3:a2:43:2f:a9:38:cb:82:
c8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6A:3C:F8:BA:18:09:05:53:BC:46:2C:6A:F5:7F:8C:1A:B3:15:CA
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.132.235.0/24
66.132.252.0/24
69.90.34.0/24
69.90.116.0/24
69.90.118.0/24
69.90.157.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:db:a3:45:e7:0a:c7:e2:59:0b:ca:c2:d9:d5:19:da:9b:b5:
8d:26:bc:b2:31:02:72:eb:5e:91:48:3f:1f:98:c7:c4:6c:4e:
f3:8c:a1:19:ee:c3:dc:e6:e5:56:73:e8:d0:82:0a:d7:df:4a:
9c:6f:2d:fb:17:35:17:15:fa:46:48:97:4e:23:fc:97:91:87:
86:6d:ed:95:e0:d9:f8:b2:45:be:6c:f1:5e:27:ca:1b:3e:ec:
69:e7:3f:08:e5:19:8b:a9:d3:c2:37:40:45:cc:54:ba:f9:fa:
78:87:48:03:fa:a4:cc:2f:51:5a:da:47:07:d3:b0:fe:57:0c:
7b:b0:d2:24:28:55:c6:8f:ff:4c:0f:bd:0e:d4:97:5a:dd:d9:
f5:89:1b:7e:99:e6:56:22:ae:29:7e:9b:97:6c:40:0e:d8:31:
99:60:ec:e8:f4:d0:6f:fa:63:a2:e4:23:22:81:d9:b1:16:3a:
c8:4b:b2:f0:e5:14:08:19:e1:e6:f5:2e:79:28:fe:d0:a9:e4:
dd:d1:ff:1c:8e:d0:7d:4d:33:84:92:35:25:e8:f6:26:6d:f6:
57:fe:54:58:a4:54:7b:b6:61:27:b1:e8:34:4f:f5:79:fd:7a:
6e:7e:3e:aa:c5:57:f0:f0:db:14:a7:62:6c:30:5f:57:6f:34:
e7:f8:5d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 06:59:41 2026 by rpki-client