Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402628.roa
File: AS402628.roa (raw, json)
Hash identifier: F94GWC1FdoQ8v8r0W0hHdxTJ7+1yEH4xND9nFhBT4us=
Subject key identifier: 7F:F0:02:94:39:6C:B3:E5:59:48:8C:57:2C:9E:B0:BE:C3:C2:2C:9E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1312EF14AF4F4C076E67F95FE8C6729E26FC9B60
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402628.roa
Signing time: Fri 30 Oct 2026 00:13:23 +0000
ROA not before: Fri 30 Oct 2026 00:08:23 +0000
ROA not after: Fri 29 Oct 2027 00:13:23 +0000
asID: 402628
IP address blocks: 167.148.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:12:ef:14:af:4f:4c:07:6e:67:f9:5f:e8:c6:72:9e:26:fc:9b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 30 00:08:23 2026 GMT
Not After : Oct 29 00:13:23 2027 GMT
Subject: CN=7FF00294396CB3E559488C572C9EB0BEC3C22C9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ee:66:3e:87:4a:20:1d:d6:0a:00:06:09:f5:
9a:ae:ab:52:9d:2f:19:e8:d4:ac:10:c9:af:19:94:
69:1d:31:bd:30:e5:3e:63:aa:59:bc:2b:54:78:3d:
a4:e7:c7:33:06:c9:b2:59:04:87:e2:c9:39:9e:73:
03:84:8f:ef:d3:ab:96:79:f3:d3:57:93:df:35:4a:
17:44:18:1f:ef:e2:99:45:fa:7c:78:e0:74:58:da:
c8:ec:8a:28:c5:7b:1f:c2:e3:d3:e6:45:2a:9e:7b:
98:d1:95:68:9d:61:d6:0e:f6:b2:4f:f1:c6:b2:18:
5c:dc:0e:4a:5f:b4:69:8b:f0:d9:68:81:df:b9:09:
b4:07:32:43:18:2f:fa:7b:f0:13:94:e0:bf:c9:96:
36:70:a1:cb:c4:48:07:3d:2b:f4:26:01:77:bd:39:
05:66:d6:97:33:d2:2a:f0:50:b1:68:52:05:28:5e:
70:a8:b1:9f:a4:a8:88:38:20:f8:84:25:88:e3:0e:
8b:57:6c:a6:ab:b2:36:e1:31:ee:e3:4d:c1:b2:81:
09:b8:73:68:03:4c:37:93:05:e1:b6:40:ea:9d:e5:
f6:48:55:28:c4:f3:a6:e5:e5:53:e6:b2:e0:ef:75:
25:36:62:17:1e:19:67:e4:30:48:c8:0d:2c:84:69:
09:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F0:02:94:39:6C:B3:E5:59:48:8C:57:2C:9E:B0:BE:C3:C2:2C:9E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402628.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.164.0/24
Signature Algorithm: sha256WithRSAEncryption
27:38:dd:a4:a0:65:cd:25:7a:1b:54:c2:9f:c9:1e:ee:53:fb:
fb:f5:cf:5f:1f:7d:5b:cd:a7:0e:ea:2c:3d:69:a5:a6:86:36:
ba:c5:3b:7f:d6:d7:64:4e:e8:9e:b1:b5:8d:a2:cd:ce:92:d2:
18:30:ff:7e:b8:41:cd:96:f0:34:b5:e8:e6:c2:dd:fc:67:62:
6b:9e:c7:78:1e:39:54:19:81:0e:94:6a:a3:ff:84:b4:b6:4a:
9e:c2:d2:48:4d:58:50:22:59:22:43:71:71:08:6e:7c:48:e2:
1e:04:49:e9:e1:4d:17:92:f5:3e:70:78:1c:b0:38:8d:9f:8e:
fb:cb:ee:87:86:87:a4:0c:74:ea:c0:71:c8:5d:c1:28:70:a6:
fd:77:77:b8:55:19:60:36:59:08:e4:9b:5f:84:e0:22:76:ea:
e5:82:b6:f3:33:aa:7f:a5:6a:85:4f:40:fb:bb:cc:33:fc:9a:
c8:e8:b5:01:66:90:70:84:48:a6:8d:64:22:69:b8:67:c1:9d:
d5:83:c8:81:d6:8b:d2:ee:7f:7b:4d:ab:ad:7a:ac:8d:38:c9:
c0:40:52:f6:32:73:19:51:c8:a8:aa:3f:38:b4:4f:96:bf:9d:
ab:0d:92:0d:eb:ba:58:10:c0:bc:4d:0f:0c:20:84:61:c7:08:
5f:fd:fb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 08:12:01 2026 by rpki-client