Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS41171.roa
File: AS41171.roa (raw, json)
Hash identifier: VRw0JsnZxbgRK1S6RpggAeIog8GBzwFjOszEZzLPUzE=
Subject key identifier: D6:09:DF:46:14:53:3A:E2:9A:77:3C:E0:E0:E3:6B:85:A4:9A:FF:EA
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4769746C11952599C04CE25EC674968FB7FF8AD3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS41171.roa
Signing time: Mon 08 Jun 2026 12:25:15 +0000
ROA not before: Mon 08 Jun 2026 12:20:15 +0000
ROA not after: Mon 07 Jun 2027 12:25:15 +0000
asID: 41171
IP address blocks: 168.222.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:69:74:6c:11:95:25:99:c0:4c:e2:5e:c6:74:96:8f:b7:ff:8a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 8 12:20:15 2026 GMT
Not After : Jun 7 12:25:15 2027 GMT
Subject: CN=D609DF4614533AE29A773CE0E0E36B85A49AFFEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:75:06:4a:3f:3b:39:24:5f:da:3b:2b:60:5f:
8c:c7:ce:16:d6:62:b0:54:4f:8a:73:57:f0:7a:f7:
7a:db:cc:36:af:96:4e:d7:58:49:21:f1:69:6e:ae:
1b:9e:35:d8:d1:90:ed:00:20:58:2d:3c:b1:1e:c0:
ad:05:b3:9e:18:8e:9d:01:fe:51:e8:af:11:d9:29:
aa:95:9f:fc:fc:91:c5:be:db:fa:f1:96:cd:01:d5:
2c:dc:ad:f2:3d:37:b4:d5:80:69:b6:f8:79:cf:6e:
11:8c:ae:b5:08:4c:58:3b:82:6c:00:78:be:b6:f0:
26:30:65:89:95:8a:8d:2b:aa:f2:76:39:cd:35:a6:
6e:75:b2:6b:9d:88:25:ce:28:f0:b0:18:3e:e2:02:
75:c5:c3:2c:da:48:08:12:c9:21:10:ba:43:ef:64:
99:0e:eb:b5:98:90:d3:28:4f:b7:52:ba:cf:16:a3:
fb:f7:de:d7:56:ad:a0:ad:3f:cc:5d:c7:d6:87:ed:
05:2d:d2:28:83:03:e0:04:d5:69:93:b7:f7:5a:9c:
41:21:c8:05:5b:9a:a7:2a:17:87:c9:e6:c8:5d:e7:
14:a2:0a:cd:43:54:42:60:c4:7f:32:b2:29:69:53:
2e:56:15:e1:57:b3:d9:63:77:a2:0a:e7:9b:f9:ff:
37:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:09:DF:46:14:53:3A:E2:9A:77:3C:E0:E0:E3:6B:85:A4:9A:FF:EA
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS41171.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.71.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a5:f7:55:82:72:d8:ba:ca:81:4b:07:e6:db:f6:d8:36:e2:
43:80:f3:bf:03:6e:c1:66:60:f7:4b:f5:da:04:14:c1:e0:5e:
8b:d2:a8:a1:ae:12:4c:a1:51:d5:83:a3:e1:14:c5:f2:d6:bb:
73:60:8d:81:4d:5b:71:43:57:67:46:74:89:c8:aa:91:a8:3c:
5d:fb:cb:fb:b3:5b:62:43:24:98:2d:9a:d3:f0:c3:e4:55:fc:
a7:e6:e5:6b:a7:cc:af:6d:fd:3a:fb:dc:46:86:40:e6:ad:31:
79:cd:90:c8:a0:28:f9:a8:3a:fe:f6:c3:5b:78:3b:14:77:2d:
77:13:22:fb:31:1e:ca:a3:6c:32:0a:93:f1:7b:62:04:7b:97:
2f:3f:05:42:3f:c5:27:4f:fa:b0:b0:c9:7f:ce:dd:13:06:12:
93:b2:4e:f0:88:29:35:bc:d0:5a:52:65:a5:ed:57:7a:f1:9c:
78:80:cf:e0:eb:0f:11:0a:16:42:80:12:94:8f:e4:a6:34:46:
2b:c9:d0:5b:9d:ae:91:f6:9a:58:8c:40:fd:ad:04:0a:ad:ee:
5d:16:c2:30:f4:cf:48:f8:f1:f4:ba:e3:1a:87:b2:b6:11:65:
8b:e7:ca:79:35:ca:58:30:4c:0b:95:a6:b7:ae:15:02:01:74:
1b:52:e4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:37:55 2026 by rpki-client