Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402281.roa
File: AS402281.roa (raw, json)
Hash identifier: 8oj5AeRvwv6EPna13u/kObxfM7DNiyBIBvKC/tO778E=
Subject key identifier: 3B:A8:82:7C:EF:55:FF:1B:58:5E:A8:86:11:18:0D:6C:70:63:D5:09
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 30079A64BA47DEF48E92C0B8224EECCBAA825C3D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402281.roa
Signing time: Thu 16 Apr 2026 09:05:15 +0000
ROA not before: Thu 16 Apr 2026 09:00:15 +0000
ROA not after: Thu 15 Apr 2027 09:05:15 +0000
asID: 402281
IP address blocks: 168.222.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:07:9a:64:ba:47:de:f4:8e:92:c0:b8:22:4e:ec:cb:aa:82:5c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 16 09:00:15 2026 GMT
Not After : Apr 15 09:05:15 2027 GMT
Subject: CN=3BA8827CEF55FF1B585EA88611180D6C7063D509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:62:1e:0b:08:88:0c:08:b5:87:63:c7:aa:c1:
e7:8e:d3:f6:ff:c6:ca:3f:03:fc:c9:fd:92:4e:ae:
9e:77:b9:42:2d:63:b3:c9:64:64:1a:db:38:c0:fa:
fe:21:95:29:92:93:cd:f1:7f:bd:d7:39:30:02:e5:
f5:27:15:ce:37:1d:54:ec:00:10:e9:6f:16:59:03:
47:fb:9f:b4:14:28:8f:c1:e0:33:12:82:a0:b0:1c:
b8:08:5b:31:a6:28:60:a0:6a:3d:76:5d:23:9c:ad:
50:85:dd:02:5b:15:93:51:7f:53:79:92:7b:bb:31:
51:3a:0a:09:91:98:92:9e:28:61:1f:1a:02:2b:30:
ea:6e:85:0d:68:44:90:06:bc:76:bc:65:3e:3a:21:
e3:25:ce:e4:4a:0d:17:96:67:da:6d:60:63:da:ad:
9f:b5:82:52:57:e9:fc:72:dc:74:7f:3b:7c:8a:c1:
4d:35:d9:ff:b1:0f:82:4d:fa:a5:1e:2e:e9:02:43:
18:2c:6e:4c:8b:3a:c1:79:f4:c9:9c:d1:2c:64:af:
37:d7:cc:bd:90:31:9e:ed:3b:48:eb:10:97:39:70:
b0:e4:5a:8b:bb:25:12:c1:39:e7:f2:e7:2c:0a:12:
82:88:9c:e9:a3:df:93:54:c6:32:52:11:31:f0:d3:
ce:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A8:82:7C:EF:55:FF:1B:58:5E:A8:86:11:18:0D:6C:70:63:D5:09
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402281.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.32.0/24
Signature Algorithm: sha256WithRSAEncryption
90:66:f7:96:fb:d8:f3:6f:ec:52:5d:fc:df:72:ed:f1:ca:bb:
9b:fb:71:c8:e3:2b:36:ea:ec:de:3b:20:66:38:c2:6d:75:5a:
df:e4:d4:5b:d4:bd:64:56:b9:f5:aa:69:a3:c5:10:6a:28:1b:
51:18:74:0d:c8:8b:b3:1b:b8:a4:66:7d:c2:f9:64:79:a4:1d:
b6:bc:32:c2:14:00:aa:d6:be:66:00:12:98:9b:be:7b:2d:95:
ad:9b:ca:3b:9d:a4:3b:c4:35:1e:8d:52:29:e3:68:04:08:a9:
3b:7f:b6:64:38:87:35:75:7f:b6:0d:ce:ae:a4:01:1d:55:12:
db:13:2e:5f:a8:ab:f2:17:50:49:ca:eb:4e:1e:ae:ff:43:c2:
d6:d8:f1:cf:b1:aa:30:94:90:a4:ee:c9:a0:75:b9:0a:df:ef:
20:19:a1:10:cf:2e:dd:f3:13:60:3e:d8:03:5d:13:32:7e:8d:
c6:a8:c9:04:23:97:07:c4:e7:2d:58:6d:f6:eb:bf:a8:d2:17:
c0:0c:de:45:ff:6d:c5:55:e5:2d:7d:3e:cf:26:40:cf:c8:2c:
aa:f3:c5:42:c7:af:9b:bc:23:a5:d3:64:d7:da:67:65:bb:e1:
29:b5:ed:e6:d8:f8:b3:03:69:23:ad:75:de:18:00:5a:13:5e:
bc:e4:f8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:53:58 2026 by rpki-client