Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402493.roa
File: AS402493.roa (raw, json)
Hash identifier: 93UcxlcywB+VxckBm0iKtFXbRknhh/ZKS2HaC4m3gQ0=
Subject key identifier: 7D:96:FA:3A:C7:FC:AA:15:C6:19:3D:A0:F9:75:EF:F7:23:F9:09:1A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 434E4C7B8A5FB717B8D862A34D1F597FF8AAE324
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402493.roa
Signing time: Mon 08 Jun 2026 12:10:12 +0000
ROA not before: Mon 08 Jun 2026 12:05:12 +0000
ROA not after: Mon 07 Jun 2027 12:10:12 +0000
asID: 402493
IP address blocks: 162.141.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:4e:4c:7b:8a:5f:b7:17:b8:d8:62:a3:4d:1f:59:7f:f8:aa:e3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 8 12:05:12 2026 GMT
Not After : Jun 7 12:10:12 2027 GMT
Subject: CN=7D96FA3AC7FCAA15C6193DA0F975EFF723F9091A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:db:ce:07:4d:13:86:24:4d:14:65:4a:ee:ae:
5b:d8:58:cb:e3:fb:dc:38:f3:35:20:b3:e4:d2:98:
3a:c4:65:0e:77:35:43:35:5a:2a:04:3d:21:0f:70:
e6:1f:a6:4a:2e:2c:bc:ac:ad:b5:5e:e6:46:05:75:
24:a6:a5:3d:bb:f3:37:1a:72:f9:c7:d5:37:e5:06:
be:f6:92:96:c4:f8:1e:4d:78:4a:ff:8d:57:9b:cb:
97:b0:fe:c6:7a:f2:a8:1a:41:a5:3c:af:8a:4c:1c:
03:23:b2:3f:d4:76:f9:bd:3d:07:ce:52:5e:12:50:
e6:6e:e6:14:e1:7e:25:3c:4c:84:69:87:6a:6e:94:
24:ad:35:20:97:84:20:c0:bf:f3:db:e5:ff:49:26:
84:a5:58:8f:9c:91:63:29:22:96:af:75:92:33:af:
56:4b:9d:6f:67:80:5c:40:43:15:48:b0:05:fb:89:
a8:fa:58:ad:05:f2:36:a7:cb:fd:86:91:44:a8:90:
2e:e5:e2:5b:c9:1a:db:34:00:b9:de:f3:fc:c5:c5:
b5:94:5d:08:53:d6:12:5d:08:6b:b7:8f:92:42:fb:
a2:9d:a0:aa:2d:7b:97:83:d4:d1:f7:fe:89:76:10:
df:70:e2:34:d6:26:aa:df:64:a2:4f:3f:6b:dc:cf:
81:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:96:FA:3A:C7:FC:AA:15:C6:19:3D:A0:F9:75:EF:F7:23:F9:09:1A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402493.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.123.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:7b:00:98:09:df:20:5e:f4:6f:60:8d:9a:65:f2:88:63:e1:
76:24:b5:65:53:a9:97:a8:30:70:59:35:42:33:92:5a:d5:51:
aa:2e:2c:cc:58:9d:56:df:30:b5:36:bf:9d:0b:96:9f:60:a7:
90:d9:d0:1c:82:96:85:f4:4f:df:9d:db:a3:8a:e6:f4:34:21:
71:b3:57:0b:5d:d6:3e:69:b3:3b:37:68:8a:92:b1:7e:9a:1e:
60:67:3b:8d:35:d1:50:d7:10:54:ba:e5:97:43:be:da:f8:02:
d5:60:f0:ca:45:07:1a:50:d1:4e:4d:a6:fd:a3:07:ec:8f:99:
13:7c:52:f9:d6:4f:f4:86:59:59:54:3d:71:79:03:79:70:2b:
69:ac:22:bd:22:3a:1b:39:4d:6e:29:fc:e2:e6:ca:ff:90:51:
81:e2:cf:a6:07:85:9a:6c:ca:14:f1:dd:0f:1e:9d:c1:c4:8c:
e8:3e:65:fe:c6:71:32:df:30:ce:f3:fc:07:6c:9f:1a:a8:34:
69:42:c8:79:43:63:0e:0c:49:0c:e1:e0:e5:73:37:8d:08:43:
ff:63:d0:9c:ec:53:23:f9:5c:9c:da:1e:e2:30:a0:fa:be:16:
33:bc:70:bd:f3:7a:ef:2f:84:5b:e7:ed:14:19:e2:aa:12:f6:
0a:2a:c0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:53:46 2026 by rpki-client