Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS41666.roa
File: AS41666.roa (raw, json)
Hash identifier: KM+Tnb6ZLNrpYgXB1ZuDYV10ACH8EH2mRUAjCDLrHIk=
Subject key identifier: 10:DC:6B:5F:4E:F7:AE:33:B6:73:3A:56:E6:AC:AC:22:CA:54:AE:69
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 76783608935CA26DDFCFC04D6103883F752D04E2
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS41666.roa
Signing time: Wed 04 Nov 2026 20:32:50 +0000
ROA not before: Wed 04 Nov 2026 20:27:50 +0000
ROA not after: Wed 03 Nov 2027 20:32:50 +0000
asID: 41666
IP address blocks: 195.138.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 00:14:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:78:36:08:93:5c:a2:6d:df:cf:c0:4d:61:03:88:3f:75:2d:04:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:50 2026 GMT
Not After : Nov 3 20:32:50 2027 GMT
Subject: CN=10DC6B5F4EF7AE33B6733A56E6ACAC22CA54AE69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:54:12:7e:fa:61:98:57:9a:9f:1e:4b:34:af:
1e:20:4b:85:2b:27:8e:6c:1d:97:78:9d:69:7b:e5:
4f:bd:7b:b6:a6:5d:5d:17:a3:45:2b:8c:ed:78:2d:
52:b8:ab:ba:3d:38:42:5a:55:cd:2f:9b:d7:e5:27:
68:ce:9f:de:a1:2c:02:ee:1c:aa:2f:fe:51:22:22:
07:4f:d3:db:a1:4b:11:df:4a:89:1f:a0:a6:aa:b6:
fb:fe:1b:36:aa:a7:a0:e8:23:c3:f3:14:33:bd:02:
5d:23:36:60:e2:18:e2:2b:18:25:20:45:45:b0:2f:
8e:ca:a0:cb:cc:c6:3e:20:32:29:32:93:6b:a6:17:
8a:26:58:02:2b:aa:a1:a5:40:92:bb:9e:89:2e:0e:
ca:ce:94:c9:42:22:4c:d1:86:59:e4:85:ce:f9:69:
f9:39:f5:2f:66:62:81:51:ab:49:09:78:00:94:10:
31:ee:a1:94:98:ca:8b:ea:6f:4e:8f:02:fc:f3:00:
51:28:19:ad:56:42:5b:0d:a1:a6:62:95:2a:72:a0:
f3:16:f8:fa:fb:d3:60:4e:10:f7:72:dc:8f:54:37:
57:5d:c3:c6:9c:86:f5:e8:81:9e:02:2a:e0:27:9c:
96:3a:98:70:53:af:be:b8:eb:1e:87:84:97:3c:b9:
d9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DC:6B:5F:4E:F7:AE:33:B6:73:3A:56:E6:AC:AC:22:CA:54:AE:69
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS41666.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.203.0/24
Signature Algorithm: sha256WithRSAEncryption
43:af:26:9c:60:e9:10:eb:7b:93:97:d7:63:ce:eb:f2:89:0c:
f3:e5:1c:a1:be:01:a5:e6:92:7c:e5:f9:7d:20:88:5a:d4:4a:
8b:95:73:82:87:82:92:34:1d:4b:c8:95:4b:c3:b8:94:eb:44:
fa:7b:6e:ff:9c:52:33:e9:1d:70:40:f7:41:6e:a2:2b:4a:df:
ec:8d:2a:57:6e:9f:a1:1b:66:cf:3a:ba:08:89:20:eb:6f:a1:
95:ad:74:fb:43:e6:93:91:53:aa:a6:ba:a3:5e:86:a6:f9:fa:
27:be:32:da:d9:e2:33:6c:58:02:5a:bf:3a:37:93:de:af:6f:
d6:21:ea:5c:8a:c2:1e:b9:34:03:f5:fb:fb:b7:df:a5:63:6d:
df:6b:37:d9:9d:c2:ae:c7:52:7d:f1:7a:65:53:a3:1c:18:c1:
82:4a:3c:2c:6f:8d:78:a4:72:c3:d5:b4:21:51:26:8a:01:01:
65:8d:35:78:14:ca:ff:c8:53:d0:b1:6e:0c:41:0d:7e:39:bd:
e6:30:e9:3e:38:04:94:eb:ec:89:f4:be:1b:c0:cd:05:4e:8f:
8d:82:ba:bb:04:bc:75:80:d8:c5:31:da:a1:07:ee:1e:db:96:
d2:28:55:34:75:59:43:2b:9f:ff:38:36:1a:b8:17:df:29:22:
9d:e0:e9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:41:14 2026 by rpki-client