Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS401776.roa
File: AS401776.roa (raw, json)
Hash identifier: B7xePyaaG2zXyPBrIe1ZffbtjtJ9qASQXSZ2M1wgPlQ=
Subject key identifier: 73:3C:9B:BA:CF:26:47:BF:31:06:D6:99:6D:06:76:2A:7D:37:6F:5F
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 7348BC62EE9E684DF33DFC8FF2E6D8B241F3553A
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS401776.roa
Signing time: Wed 16 Sep 2026 07:25:20 +0000
ROA not before: Wed 16 Sep 2026 07:20:20 +0000
ROA not after: Wed 15 Sep 2027 07:25:20 +0000
asID: 401776
IP address blocks: 5.199.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:12:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:48:bc:62:ee:9e:68:4d:f3:3d:fc:8f:f2:e6:d8:b2:41:f3:55:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:20 2026 GMT
Not After : Sep 15 07:25:20 2027 GMT
Subject: CN=733C9BBACF2647BF3106D6996D06762A7D376F5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:11:a1:71:ab:7c:93:8e:02:9e:44:38:ba:aa:
69:cd:55:d6:a6:59:59:d7:7c:d5:ab:c3:6c:7f:e0:
e2:97:4a:d3:e3:69:3a:6b:58:fd:eb:d0:4d:0f:3b:
4e:26:96:1a:f7:9f:a7:a8:8b:13:34:77:3d:e3:8d:
f8:ab:48:12:4b:31:b0:58:20:56:64:41:ea:09:fc:
e5:8f:09:20:db:4f:02:8e:b7:8d:96:21:58:86:8c:
0f:8f:61:2a:3b:9d:89:b1:4d:8c:f9:e8:38:77:8c:
8d:40:79:47:dd:04:83:2e:03:64:51:19:e0:7e:aa:
35:bf:15:8c:b8:81:e1:06:2c:0c:d5:13:fc:f6:31:
71:94:a5:ad:8b:d6:de:be:01:51:40:28:f7:96:b2:
2f:b0:62:ad:cc:62:b2:9e:f8:8f:4f:96:4d:f5:b1:
ec:8c:01:04:c6:51:71:85:da:51:e5:5a:72:e3:04:
cf:02:ef:47:4d:bb:2f:f5:0b:88:d1:0f:0d:d9:bf:
c9:9a:74:fc:11:ed:e3:14:27:f0:74:0a:d3:4e:ce:
a4:bd:b4:8b:7c:3c:db:ea:f0:49:77:f3:64:e8:9c:
1a:a3:4c:c6:cb:89:b3:c1:46:b3:f2:5d:18:b1:3d:
92:c0:a5:9c:09:27:61:93:e6:2b:51:3b:a5:a4:06:
03:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3C:9B:BA:CF:26:47:BF:31:06:D6:99:6D:06:76:2A:7D:37:6F:5F
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS401776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.26.0/24
Signature Algorithm: sha256WithRSAEncryption
35:33:b7:ea:bc:09:99:07:b7:c0:c9:2e:08:24:73:b7:34:e0:
77:b4:de:2d:bb:68:f2:ba:5c:79:e6:82:32:63:58:be:6f:cb:
2b:c5:b9:ca:45:0d:d1:c2:58:32:6f:6a:1d:ae:da:cf:26:9f:
e4:9a:b3:5f:a6:57:30:3d:3d:93:72:e6:77:d3:34:2e:92:d4:
a6:0e:72:aa:0f:fd:12:da:a0:ec:9d:80:8f:9e:71:dd:27:8d:
4a:c8:41:94:54:c9:8b:74:5b:21:95:09:cf:23:51:18:a3:0b:
f1:ac:26:c4:6b:e4:00:b7:30:85:e1:66:e5:13:02:bd:b6:0c:
bf:f0:ed:16:d9:69:e4:35:ac:05:27:57:10:8a:99:f1:7a:61:
fe:a3:1b:5e:23:4b:72:fc:b0:59:02:50:ba:87:df:cc:d0:fd:
a4:30:91:eb:65:ed:1a:46:7c:1a:ee:c4:f8:54:59:52:bd:9c:
18:91:c6:c6:07:ff:7a:fe:ac:d0:43:7d:54:d0:f4:be:9d:e5:
8c:60:60:66:78:39:18:9d:d2:94:3a:70:5d:f4:be:6f:ca:62:
fb:79:12:6a:46:b6:fb:5c:ba:46:e5:63:a5:de:e0:04:a5:2a:
f0:6a:70:2a:3c:59:af:9b:dd:eb:5f:03:11:aa:af:13:2b:a6:
d3:9a:b7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:08:19 2026 by rpki-client