Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS401362.roa
File: AS401362.roa (raw, json)
Hash identifier: x0DXsmSxFGOC5AYESP1nnn3gk5RyD+jrFP9i6JJjwFI=
Subject key identifier: A1:16:8E:AE:E2:91:74:0B:3A:EE:95:08:C9:D6:C8:74:02:4B:8F:75
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 06E360F9D3143E7FEAC3EA4426C2B6E49E7AE5B8
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS401362.roa
Signing time: Sat 19 Sep 2026 06:11:27 +0000
ROA not before: Sat 19 Sep 2026 06:06:27 +0000
ROA not after: Sat 18 Sep 2027 06:11:27 +0000
asID: 401362
IP address blocks: 46.236.207.0/24 maxlen: 24
212.17.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 19:40:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:e3:60:f9:d3:14:3e:7f:ea:c3:ea:44:26:c2:b6:e4:9e:7a:e5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 19 06:06:27 2026 GMT
Not After : Sep 18 06:11:27 2027 GMT
Subject: CN=A1168EAEE291740B3AEE9508C9D6C874024B8F75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:87:54:76:c7:a5:33:90:ac:8e:7e:5d:80:2a:
de:64:a4:af:12:6a:66:60:75:d7:10:71:99:41:cb:
ca:97:9d:0d:a5:79:58:b8:c2:9c:23:5b:f6:b2:cb:
bb:bc:04:08:5b:c0:06:e4:e6:b8:1f:53:37:71:d3:
ec:82:17:b8:51:fe:1a:57:af:9c:cf:d4:bb:8c:be:
90:37:3c:40:e9:e1:91:70:43:ad:96:75:fa:4a:18:
bf:a0:36:89:9f:7c:11:dc:81:bf:26:6f:cf:89:5d:
05:f0:23:0e:1e:8b:c4:f0:dc:44:c6:58:17:37:12:
d7:c7:4a:eb:2e:35:97:a4:c5:1b:8a:dd:44:3c:76:
3b:e1:9a:b4:30:62:25:1b:62:45:cd:10:a6:b5:75:
1c:33:2d:09:97:84:68:7f:c6:e6:f9:f0:b8:e0:e6:
fb:2c:78:ff:24:e9:db:2d:82:f1:9b:89:68:ba:9b:
30:38:07:2d:3b:a3:bd:f5:c7:4c:25:66:01:1d:b5:
5a:39:a3:89:bb:a9:e8:2d:b7:28:59:d6:bd:bb:dc:
ad:38:be:85:c8:4b:4f:5e:90:3e:4a:2b:39:b3:40:
50:0d:ca:b7:e0:19:6f:32:07:31:86:e8:c5:4c:bf:
5a:09:88:67:4b:27:8c:e1:55:68:c1:f8:10:7f:71:
16:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:16:8E:AE:E2:91:74:0B:3A:EE:95:08:C9:D6:C8:74:02:4B:8F:75
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS401362.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.207.0/24
212.17.225.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:71:1a:80:5a:c7:d4:e2:09:93:02:0d:5f:08:bd:da:e0:e7:
a2:aa:94:cf:3a:46:16:3b:aa:91:f3:e6:d2:53:7a:8d:b4:0e:
eb:d6:1d:46:6d:4f:b2:1f:49:99:bd:85:b2:91:07:97:07:17:
51:1b:49:ce:2a:df:dc:4e:22:a3:c6:24:b5:1f:40:c8:18:78:
fe:bf:ab:e1:d8:6e:35:64:b5:ff:06:c6:92:ee:89:d2:c3:36:
fc:6d:b2:16:1d:e6:04:f3:b9:e8:9a:55:2e:bc:ba:62:10:49:
7a:b3:0a:40:78:3b:03:b4:54:d4:ee:b5:3e:b0:48:c6:fc:cb:
7b:4d:55:b8:79:ce:e8:d3:87:54:e1:b9:5f:b5:01:f4:0c:b3:
4c:ad:0b:35:f9:5d:d4:41:83:ba:7f:f4:de:dc:48:be:4c:a1:
42:f0:13:b2:42:f3:67:a5:61:69:87:fc:31:3f:ec:cd:00:45:
b7:4b:be:1c:50:d4:c9:a6:65:73:36:0c:20:e9:c3:ca:74:9d:
a4:24:46:f6:1a:2b:90:b0:db:91:7a:df:54:10:f8:4c:be:14:
d1:78:0a:f4:0b:e3:40:1b:08:10:ad:82:7d:69:67:34:83:3c:
24:e5:50:6c:73:d5:73:fe:cb:93:26:74:48:e2:2a:d2:a5:f2:
5b:e5:91:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:42:19 2026 by rpki-client