Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS7393.roa
File: AS7393.roa (raw, json)
Hash identifier: 9JNyvN82izJSywEBuHxYsrDUY/Vh+FHWhgpBaNIud2s=
Subject key identifier: 25:F2:DF:98:77:3E:4F:BF:CF:3C:EE:F3:D4:8F:76:D5:E5:D8:5D:83
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0F2439AA44B25998750875F4B49923B8CB503E11
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS7393.roa
Signing time: Sat 07 Feb 2026 11:55:37 +0000
ROA not before: Sat 07 Feb 2026 11:50:37 +0000
ROA not after: Sat 06 Feb 2027 11:55:37 +0000
asID: 7393
IP address blocks: 140.150.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:24:39:aa:44:b2:59:98:75:08:75:f4:b4:99:23:b8:cb:50:3e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 7 11:50:37 2026 GMT
Not After : Feb 6 11:55:37 2027 GMT
Subject: CN=25F2DF98773E4FBFCF3CEEF3D48F76D5E5D85D83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:29:fe:6f:ef:df:b6:ad:38:0c:af:61:45:65:
64:d1:5d:8e:c2:87:e8:3b:6b:c2:92:4c:71:a5:d8:
a1:f6:75:a1:ac:41:0c:3b:f9:bc:82:be:8d:06:28:
b7:b4:bb:f9:44:02:22:21:25:5a:21:b5:d2:20:7d:
02:7f:11:4a:a9:3f:85:80:2d:08:73:7c:b6:a7:c0:
88:23:ec:8f:d7:fd:ba:6e:69:ca:93:c3:c4:4d:12:
1d:1a:cb:cf:89:13:3d:5a:bd:d5:e5:a7:2b:67:03:
54:01:62:98:2c:7f:5c:d3:91:f6:7d:bc:9a:f4:65:
68:ea:53:af:4d:4b:37:08:21:98:6f:07:6f:da:da:
e6:6c:18:df:9d:51:6a:b6:8a:db:13:f3:be:cc:a1:
87:83:4a:78:63:d4:98:84:45:41:dc:d5:c0:dd:c1:
b1:3e:f2:dc:7f:07:71:63:0b:10:92:9f:36:19:34:
40:1f:6c:48:92:f9:f9:ce:52:0a:d3:f3:77:55:41:
f8:c5:71:58:4e:c6:ad:14:e9:33:0a:18:c8:03:eb:
cc:04:eb:dd:e4:3e:dd:c1:0c:4d:f7:33:fb:44:bf:
78:7d:ea:ef:a4:e3:45:cc:6b:b4:d3:44:42:ce:e2:
f5:f3:8f:10:88:2c:ca:08:3c:35:b3:9f:a0:4e:90:
6e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F2:DF:98:77:3E:4F:BF:CF:3C:EE:F3:D4:8F:76:D5:E5:D8:5D:83
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS7393.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.192.0/19
Signature Algorithm: sha256WithRSAEncryption
a7:77:84:de:39:ce:21:4f:9f:50:26:b5:0e:77:cb:54:6c:f3:
49:4c:88:e6:06:c6:cf:5f:95:92:c5:c2:f9:61:7a:b2:b6:68:
4c:28:cc:87:1e:21:8f:3e:54:1c:b6:1d:0c:f6:96:bf:c3:ca:
39:1e:19:37:63:98:72:19:70:5c:f8:23:c5:ee:b3:4a:b4:1a:
f7:4d:0e:4f:b6:02:e5:82:d7:9f:7b:71:1a:e7:af:ca:49:52:
df:0d:69:be:8b:a6:25:49:ab:2d:7c:6c:1f:4c:ee:cf:34:fd:
98:76:20:d5:32:d8:7e:eb:4d:74:2f:e6:14:92:51:5c:0b:38:
ca:63:04:81:bc:6a:25:9b:7f:49:46:c1:68:19:76:bf:4f:5a:
02:ca:5e:2d:7e:cf:e1:a4:f1:7c:9c:ac:da:e0:67:07:61:65:
2b:e0:ca:db:8b:ec:7a:4e:26:fe:5d:1a:b8:d2:d2:ef:1d:91:
38:0d:2e:c8:4b:c5:41:d2:57:9d:89:58:0b:b2:37:29:ba:42:
29:1c:f1:a7:66:e0:5d:c9:7d:65:e5:e4:75:d5:35:93:cf:b2:
e6:01:3f:5c:d1:11:a6:08:93:fe:02:28:5c:9a:ec:15:27:05:
56:ab:ae:0c:81:a4:48:f0:56:23:78:f0:f1:c7:78:79:1d:09:
d5:2d:ad:a4
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIUDyQ5qkSyWZh1CHX0tJkjuMtQPhEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjAyMDcxMTUwMzdaFw0yNzAyMDYxMTU1MzdaMDMxMTAvBgNV
BAMTKDI1RjJERjk4NzczRTRGQkZDRjNDRUVGM0Q0OEY3NkQ1RTVEODVEODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpKf5v79+2rTgMr2FFZWTRXY7C
h+g7a8KSTHGl2KH2daGsQQw7+byCvo0GKLe0u/lEAiIhJVohtdIgfQJ/EUqpP4WA
LQhzfLanwIgj7I/X/bpuacqTw8RNEh0ay8+JEz1avdXlpytnA1QBYpgsf1zTkfZ9
vJr0ZWjqU69NSzcIIZhvB2/a2uZsGN+dUWq2itsT877MoYeDSnhj1JiERUHc1cDd
wbE+8tx/B3FjCxCSnzYZNEAfbEiS+fnOUgrT83dVQfjFcVhOxq0U6TMKGMgD68wE
693kPt3BDE33M/tEv3h96u+k40XMa7TTRELO4vXzjxCILMoIPDWzn6BOkG6XAgMB
AAGjggIIMIICBDAdBgNVHQ4EFgQUJfLfmHc+T7/PPO7z1I921eXYXYMwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNzM5My5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBYyWwDAN
BgkqhkiG9w0BAQsFAAOCAQEAp3eE3jnOIU+fUCa1DnfLVGzzSUyI5gbGz1+VksXC
+WF6srZoTCjMhx4hjz5UHLYdDPaWv8PKOR4ZN2OYchlwXPgjxe6zSrQa900OT7YC
5YLXn3txGuevyklS3w1pvoumJUmrLXxsH0zuzzT9mHYg1TLYfutNdC/mFJJRXAs4
ymMEgbxqJZt/SUbBaBl2v09aAspeLX7P4aTxfJys2uBnB2FlK+DK24vsek4m/l0a
uNLS7x2ROA0uyEvFQdJXnYlYC7I3KbpCKRzxp2bgXcl9ZeXkddU1k8+y5gE/XNER
pgiT/gIoXJrsFScFVquuDIGkSPBWI3jw8cd4eR0J1S2tpA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:06:35 2026 by rpki-client