Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS401322.roa
File: AS401322.roa (raw, json)
Hash identifier: W4cMpPKmxhD6uwt7Rw0QCZ+NWoDsMZpiT0qHt8rao6I=
Subject key identifier: 01:04:33:B3:BD:CC:53:78:49:E3:3D:A4:0A:95:DB:C5:33:04:CA:AB
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 0AE98F4EB1E43811EBE2DB703630161552078CEB
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS401322.roa
Signing time: Thu 05 Feb 2026 06:05:50 +0000
ROA not before: Thu 05 Feb 2026 06:00:50 +0000
ROA not after: Thu 04 Feb 2027 06:05:50 +0000
asID: 401322
IP address blocks: 46.236.192.0/24 maxlen: 24
46.236.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:e9:8f:4e:b1:e4:38:11:eb:e2:db:70:36:30:16:15:52:07:8c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Feb 5 06:00:50 2026 GMT
Not After : Feb 4 06:05:50 2027 GMT
Subject: CN=010433B3BDCC537849E33DA40A95DBC53304CAAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a0:65:1e:11:dc:92:f2:08:67:81:83:0b:0a:
ee:ff:9f:cb:96:fe:0f:0f:03:da:61:5f:10:4d:c8:
d7:dd:a3:19:c5:e6:bf:85:29:a1:54:7f:f5:c0:0e:
d4:33:14:4a:c5:3a:a8:97:fe:87:54:38:1e:5d:9a:
0f:ca:79:31:fb:e1:1c:85:fa:f1:67:25:2a:b5:cf:
73:f2:e1:f3:5a:40:0e:16:fb:a7:4d:5f:ae:2e:cd:
73:fe:22:f0:ba:a1:97:2f:1c:4e:c6:d4:d9:f1:d3:
1f:53:16:b0:e9:b0:db:30:f0:e8:cc:ed:9f:05:71:
ff:44:2b:31:a2:32:ab:44:62:8f:b6:16:c7:11:2c:
d0:82:c6:34:40:d4:78:b6:17:d1:26:c6:fe:ca:27:
1a:8a:66:44:44:b6:96:48:1b:6c:9d:b5:ba:ac:fb:
ec:a3:4a:c9:e8:13:32:b0:f1:47:6f:e4:55:30:9f:
34:5c:c0:f1:b4:77:f1:40:57:b5:2a:4a:b6:c3:41:
49:2c:6a:d7:d0:bc:08:38:dc:74:64:43:7b:a7:44:
fa:40:ed:7c:80:af:38:8c:e7:48:2f:48:50:8e:95:
cf:2c:b1:e0:32:c2:d9:5e:47:b7:ec:db:76:78:ed:
af:0e:42:5f:5c:36:82:a7:92:78:64:01:e3:99:a6:
e6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:04:33:B3:BD:CC:53:78:49:E3:3D:A4:0A:95:DB:C5:33:04:CA:AB
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS401322.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.192.0/24
46.236.243.0/24
Signature Algorithm: sha256WithRSAEncryption
95:dc:9b:41:ed:ff:2d:04:97:9d:33:58:33:43:3d:8c:2b:cd:
c1:bb:c9:b0:3a:37:f0:dc:83:59:ac:f6:df:e2:63:86:f9:14:
e2:ed:74:b0:87:2e:d2:8b:9e:03:0d:9a:49:cf:14:4c:c2:8e:
1d:62:84:60:e6:cb:f1:c7:1d:91:2e:a1:49:24:16:29:fe:6d:
99:85:1a:2f:66:fe:da:5a:7c:26:57:7b:6e:46:c4:e1:15:0a:
fd:b7:46:83:1b:a9:b2:7f:dd:b4:11:7d:03:11:8f:f8:73:58:
c0:b0:7c:c4:47:74:32:17:9f:25:8e:6d:34:95:07:0e:df:77:
b8:1e:a4:e8:3f:a1:ea:06:f0:dd:9f:49:9e:e5:11:46:b8:cd:
90:4d:f3:a6:aa:2f:f0:23:e4:d7:88:03:77:4c:bd:50:f8:97:
ea:d9:18:ea:16:27:76:fb:ab:1b:a2:97:6c:d8:d4:08:dc:40:
ff:76:11:a5:c4:56:01:f6:ac:98:ea:2f:a5:9c:73:6a:8b:e9:
84:87:f3:7b:8e:6e:d6:57:c3:38:48:00:d6:c4:bf:f6:f2:88:
1d:b5:06:8a:76:eb:98:f4:08:d2:d1:6a:3b:e2:69:80:8d:74:
50:f6:06:a6:8a:72:b5:c7:ff:b5:53:cf:d3:fe:3c:62:56:76:
e8:3f:33:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:59 2026 by rpki-client