Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS400039.roa
File: AS400039.roa (raw, json)
Hash identifier: yvPep3/ZkyLsTRY8+9bNWnrm54amk/ci8CMBv09k8yM=
Subject key identifier: EC:F5:5A:5A:AA:B6:CC:7E:B7:3F:02:F8:BB:BA:DF:57:7D:97:71:C3
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 7D3C03CDFAE4E3796AA6009090244C012D5B0F80
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS400039.roa
Signing time: Fri 02 Jan 2026 00:55:33 +0000
ROA not before: Fri 02 Jan 2026 00:50:33 +0000
ROA not after: Fri 01 Jan 2027 00:55:33 +0000
asID: 400039
IP address blocks: 141.98.156.0/24 maxlen: 24
192.166.83.0/24 maxlen: 24
195.20.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:3c:03:cd:fa:e4:e3:79:6a:a6:00:90:90:24:4c:01:2d:5b:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jan 2 00:50:33 2026 GMT
Not After : Jan 1 00:55:33 2027 GMT
Subject: CN=ECF55A5AAAB6CC7EB73F02F8BBBADF577D9771C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ca:b9:57:4b:b3:06:bf:7d:30:36:d5:8c:70:
22:f0:e0:2e:a0:4b:57:d3:63:70:99:af:9b:58:ad:
a0:f8:e1:28:65:c6:26:e5:76:d3:96:2d:1a:5e:8e:
94:c9:74:7b:66:ca:25:89:aa:35:4a:02:53:90:b0:
8c:71:07:a9:ed:0c:1c:09:d2:e4:ca:16:d6:3f:81:
6a:c0:3b:05:89:fd:b8:4f:2a:a0:27:79:82:d2:1e:
96:cd:1b:c2:9e:8a:e3:74:46:86:83:17:65:2a:ff:
93:ee:66:a1:6b:dc:db:93:95:44:9d:b8:c0:85:da:
25:8b:6c:44:25:62:2c:99:c6:ee:12:ac:66:75:d4:
b8:2d:c4:c0:66:db:49:2f:2f:27:96:c6:d1:a7:b8:
93:b2:a1:d0:38:f7:86:ff:37:f2:f2:b6:b1:66:fc:
a3:6a:26:be:5a:62:54:9f:2d:e7:8c:e2:69:77:df:
b0:9e:4d:08:81:b5:27:83:7b:64:b2:51:d4:f3:bc:
9a:98:b6:c6:db:4a:29:e0:bc:5e:0d:37:5c:e5:c6:
09:ab:9c:69:d7:d6:e2:5c:f7:71:2f:d1:b3:6b:7e:
d8:db:d9:94:c2:1b:44:5a:07:50:e6:71:8f:ab:1b:
f7:84:a6:76:2c:ef:20:d6:fb:77:17:e1:da:77:e6:
d4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F5:5A:5A:AA:B6:CC:7E:B7:3F:02:F8:BB:BA:DF:57:7D:97:71:C3
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS400039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.156.0/24
192.166.83.0/24
195.20.105.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:5e:ae:35:83:73:93:4f:7a:d1:af:ac:89:b3:0f:2b:68:2e:
65:07:0a:57:23:d7:cd:89:17:9f:5a:36:54:b1:fc:06:52:2b:
35:76:7c:43:83:6b:fb:bd:2a:24:b3:b2:3b:2f:ad:d8:dd:2c:
a8:02:96:0e:78:a9:b8:3b:37:02:91:bd:76:13:c0:7d:12:4a:
16:5b:41:7d:d4:08:ae:c5:f2:f8:e6:61:5f:a6:ce:40:94:de:
bd:41:4a:b4:e6:ef:51:8f:a6:c2:47:5f:89:f8:c2:3c:63:16:
f4:b8:01:62:85:9e:67:22:da:bc:ad:32:46:25:61:65:a0:63:
de:26:bd:05:dc:c0:4d:67:78:19:a5:f6:c6:6d:59:d9:16:51:
0d:e4:37:15:2d:fc:6d:a8:3b:b5:98:52:af:6a:c6:fe:d5:0c:
e9:cd:46:e4:93:d7:7e:61:62:46:de:fa:13:e2:72:89:32:00:
85:de:a6:bf:7e:9c:01:e3:e5:55:21:12:f2:d0:86:c6:21:d7:
ea:fc:46:75:76:c7:bf:c4:0f:de:fe:6e:83:88:e9:f2:8d:eb:
e7:a0:73:a0:ca:72:10:da:01:c4:7c:61:b7:7c:cb:f6:85:b7:
da:53:85:b3:27:b5:3a:c6:b9:70:06:dc:a5:d0:e8:ad:c2:ac:
73:97:f8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:22:20 2026 by rpki-client