Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS393406.roa
File: AS393406.roa (raw, json)
Hash identifier: 99FwXog28Lq7AXKtVywD+ZZAGwcdZQjjFH6TJfcgu7s=
Subject key identifier: C4:FD:31:3B:46:12:6D:94:38:5D:E2:EE:44:1C:AF:1F:DA:DF:77:52
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 27DC847E9337A03BFD107F391E17E2B39BC5D61A
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS393406.roa
Signing time: Wed 16 Sep 2026 07:25:20 +0000
ROA not before: Wed 16 Sep 2026 07:20:20 +0000
ROA not after: Wed 15 Sep 2027 07:25:20 +0000
asID: 393406
IP address blocks: 212.74.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:dc:84:7e:93:37:a0:3b:fd:10:7f:39:1e:17:e2:b3:9b:c5:d6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:20 2026 GMT
Not After : Sep 15 07:25:20 2027 GMT
Subject: CN=C4FD313B46126D94385DE2EE441CAF1FDADF7752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:44:87:ab:5c:52:9a:78:95:0e:c0:69:32:b0:
13:2c:fe:a4:9e:50:ad:e0:b0:06:5e:22:f7:12:2e:
8e:fe:58:4a:21:fa:2b:49:1b:ff:0b:ed:95:9b:fc:
ed:2a:33:96:e8:23:24:38:88:48:d7:af:7d:11:32:
64:b5:85:ce:03:ac:a9:8c:f2:a7:d1:80:bb:e6:16:
4b:07:95:16:32:19:2c:d6:2f:aa:2e:d8:2a:9e:7b:
3e:a9:1c:00:9c:e0:55:54:d4:5f:76:d2:74:ca:ba:
a8:c2:37:3f:02:7c:ef:81:fa:ad:bc:a6:1b:62:d0:
ae:31:2a:5b:d4:43:e8:57:ff:22:0b:de:e0:a3:37:
53:27:53:dd:ea:76:ff:e8:91:95:4e:ec:33:c3:46:
60:ad:bf:91:ab:85:d4:ab:fb:89:3c:34:f6:79:17:
5a:ad:7d:36:63:11:79:a3:ab:dd:22:60:67:19:50:
87:31:f8:dc:5c:31:e6:81:5b:bd:45:f5:06:62:38:
d8:d0:5d:40:90:e2:11:97:ae:1b:5a:df:a8:4f:72:
69:05:ce:85:07:27:c2:71:0b:d8:b0:d0:dd:b2:81:
bc:73:7b:2c:28:78:2c:cd:13:81:bb:91:49:9a:0d:
e7:1e:1b:cf:b2:eb:d8:5e:4e:4d:2b:b4:47:cc:a4:
e7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FD:31:3B:46:12:6D:94:38:5D:E2:EE:44:1C:AF:1F:DA:DF:77:52
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS393406.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.48.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:11:83:8f:50:c2:bc:94:10:13:f2:b2:5e:a5:c4:65:9d:80:
cb:19:95:91:e1:53:5c:38:ad:6d:70:7a:37:89:c9:fb:d2:2c:
1d:9a:67:2b:51:90:19:d0:74:b2:8d:1e:f6:23:64:ef:ef:7c:
57:4e:6b:08:5c:bf:f4:32:93:9d:f1:0e:eb:12:fc:c1:77:93:
46:03:e1:80:e6:73:fe:57:62:a8:b0:b9:97:bf:12:0b:9a:a2:
29:fe:3b:9f:02:ce:03:0e:ce:5a:e4:99:a7:94:cb:19:f6:54:
4b:19:6b:57:11:a3:5e:e3:47:49:f9:ab:6f:7c:de:e5:17:65:
b4:31:55:37:3e:80:79:f7:72:e7:2e:95:dc:2d:96:b7:64:3a:
b3:d6:13:f2:0b:ac:76:28:75:21:1c:b9:2b:db:6e:af:f8:eb:
5d:26:e9:24:e7:31:50:3f:ca:c3:be:e3:a6:86:d7:26:c3:ca:
3b:62:79:09:08:5a:41:e4:92:60:18:76:82:ab:4a:64:8a:cd:
c0:b4:9d:6b:f9:b9:71:be:5e:13:ac:8b:56:ac:ca:62:70:74:
0a:8a:91:ef:87:ae:b1:ef:a5:e6:07:b0:8f:6d:d8:80:32:d8:
a4:3c:16:24:5b:7c:e5:2d:98:2e:08:42:42:b7:48:03:df:71:
4a:f1:22:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:13:34 2026 by rpki-client