Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402976.roa
File: AS402976.roa (raw, json)
Hash identifier: ScR/75Qh8FbsXNXxoTCZM7plUuHYj9jbWRjw67BqMZo=
Subject key identifier: BA:3A:F8:CA:F0:00:9B:93:B7:14:EE:46:E7:E5:4F:6F:DD:B9:B3:DF
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 19472B8A56DE59EF3A3EEE802C30E4167334290B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402976.roa
Signing time: Sun 20 Sep 2026 08:35:16 +0000
ROA not before: Sun 20 Sep 2026 08:30:16 +0000
ROA not after: Sun 19 Sep 2027 08:35:16 +0000
asID: 402976
IP address blocks: 64.226.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:47:2b:8a:56:de:59:ef:3a:3e:ee:80:2c:30:e4:16:73:34:29:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 20 08:30:16 2026 GMT
Not After : Sep 19 08:35:16 2027 GMT
Subject: CN=BA3AF8CAF0009B93B714EE46E7E54F6FDDB9B3DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b4:4c:c7:31:f6:73:5c:74:3b:7b:85:36:b3:
27:97:db:42:d7:9d:59:72:4b:e0:1f:94:9d:aa:70:
55:1a:e1:78:84:eb:5c:33:17:8d:48:8e:3f:64:51:
d9:75:a1:e2:8f:f9:a7:55:15:d3:21:eb:67:fc:2e:
7b:91:0e:72:f9:30:0f:35:91:fc:29:63:d6:d5:7c:
1b:eb:10:31:46:00:58:38:31:46:5d:b4:c6:13:e3:
4f:06:88:3f:d9:12:59:60:f8:61:84:f7:7b:2c:9b:
d3:76:9e:03:75:77:41:f0:06:f4:e4:a1:a1:88:30:
9f:46:da:c9:3a:b8:bd:51:74:ac:a7:aa:39:e3:b2:
2d:a1:1d:ca:0f:d3:fe:6e:29:19:54:f9:f8:0a:9b:
c3:3e:88:80:7e:67:26:fa:15:4e:cf:c6:9e:57:9b:
98:0b:27:1e:60:ef:cc:e8:e6:e3:d4:ae:ad:a7:2a:
a7:3e:a1:28:25:6c:17:43:9f:97:41:57:b1:9b:b1:
74:15:56:5d:f8:16:46:fb:f7:73:82:cf:61:f5:4a:
1f:4c:1b:c8:2e:7e:4b:86:df:ff:86:67:43:27:b5:
d0:cb:73:4a:37:f6:4b:64:be:f4:aa:6e:45:a8:8d:
82:ef:ef:5b:ec:e7:34:5b:60:d8:b9:58:91:ea:d1:
4d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3A:F8:CA:F0:00:9B:93:B7:14:EE:46:E7:E5:4F:6F:DD:B9:B3:DF
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402976.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.226.204.0/24
Signature Algorithm: sha256WithRSAEncryption
48:0b:1a:75:26:4a:9b:71:e7:9a:a8:96:d0:99:9b:29:19:8f:
29:50:f0:4e:3b:70:24:56:ef:cf:3c:d1:5a:b7:a5:1f:c9:75:
b9:e6:7e:1e:3c:86:dd:92:f0:81:77:02:bf:59:d5:d4:8a:39:
ca:cc:15:d1:7f:b7:22:15:96:e0:ce:93:15:d3:e0:da:10:e6:
a0:a1:54:ab:d2:ed:63:12:2f:b6:83:f9:84:83:e4:8d:cd:f4:
a3:97:46:f0:d0:ed:ac:08:a6:c5:3d:0e:4f:e6:a2:68:bf:51:
22:f4:87:05:4a:f6:d8:a0:95:9a:99:72:4e:55:a7:ea:7f:11:
4b:38:5e:13:01:20:34:84:28:c8:17:ae:6a:b9:d1:9f:95:27:
7d:0c:f8:2c:76:39:8c:50:78:85:bd:46:bd:0e:5b:80:dd:7b:
79:38:3e:d2:57:4f:44:5a:66:64:21:dc:89:0f:c8:74:41:44:
ff:b8:82:d0:58:a7:3d:f6:12:51:b4:5c:f6:4d:33:a6:24:6f:
55:af:de:cb:0c:80:70:25:38:ea:f7:29:fe:48:38:57:8f:f6:
ca:22:f8:47:7d:4f:2e:9d:ce:88:79:4a:7e:b0:c8:41:5d:4a:
60:08:d1:4c:a9:d7:a5:7a:58:ed:f4:c5:37:90:e9:a0:04:ef:
1b:8d:d2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:46:14 2026 by rpki-client