Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS398698.roa
File: AS398698.roa (raw, json)
Hash identifier: u0UUSFCbqzrHkCXiC6WAeosULqUIYs2GDKtue+THBQY=
Subject key identifier: DC:5B:D6:48:34:9D:F6:87:EB:86:22:BE:5D:E8:B2:17:14:4D:64:9D
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1F450D9B86C1FB654FC2174967F437E6F4A2AA70
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS398698.roa
Signing time: Thu 05 Feb 2026 12:44:19 +0000
ROA not before: Thu 05 Feb 2026 12:39:19 +0000
ROA not after: Thu 04 Feb 2027 12:44:19 +0000
asID: 398698
IP address blocks: 2a14:7583:5f00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:45:0d:9b:86:c1:fb:65:4f:c2:17:49:67:f4:37:e6:f4:a2:aa:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 5 12:39:19 2026 GMT
Not After : Feb 4 12:44:19 2027 GMT
Subject: CN=DC5BD648349DF687EB8622BE5DE8B217144D649D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ce:41:b4:1a:4c:94:ea:b6:fb:9b:52:97:73:
8c:85:fc:f4:dd:e3:08:c7:22:d0:8d:6a:31:a9:97:
15:7d:b8:a4:a6:3d:14:97:bd:9e:d1:a7:9b:cf:7b:
af:16:a5:56:98:a2:16:42:1b:44:fb:db:91:18:3d:
8b:2c:c1:cd:b7:fd:19:5c:e2:ba:1b:7c:a7:fe:f7:
59:f7:03:8a:5e:44:dc:12:9e:fc:e4:7e:f4:5b:1a:
c4:9d:01:03:02:02:4b:44:f3:69:c6:bb:7e:9b:29:
bd:4e:1d:0e:28:84:b4:9f:42:05:e7:33:19:5b:bc:
f4:d9:18:32:a5:21:89:bf:6c:47:a0:f1:23:d6:0b:
32:5e:b5:bc:e5:3d:7f:80:6b:a9:72:fb:c8:36:75:
01:f9:77:63:ac:9b:30:c5:b4:fa:bf:17:bd:47:c4:
bf:47:44:bd:b9:b0:37:bd:dc:55:d0:2b:3a:67:30:
a9:de:56:e2:3d:e8:4e:25:26:ca:b1:a1:b1:e4:70:
2c:3c:0a:36:be:10:89:da:b7:b0:22:8c:93:a8:ce:
2c:23:9d:85:4b:e3:32:d4:0e:36:2a:62:a6:fa:94:
60:86:0d:9e:0a:4f:0d:1b:1f:86:62:94:ac:ab:78:
a0:e4:9a:02:05:16:29:05:5a:37:1a:87:8e:ed:ab:
17:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5B:D6:48:34:9D:F6:87:EB:86:22:BE:5D:E8:B2:17:14:4D:64:9D
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS398698.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:5f00::/40
Signature Algorithm: sha256WithRSAEncryption
8e:37:ce:24:b7:ce:77:16:9c:45:e6:e6:9c:de:51:62:79:f4:
ee:54:50:da:19:e6:67:e2:a6:05:7c:a9:31:51:a2:3d:2b:12:
6a:42:a1:70:17:4d:b3:8a:71:72:db:ce:ea:a5:1d:44:04:4b:
f4:c9:dc:cd:47:ce:d9:91:57:8e:48:5c:8e:1b:39:0b:32:ba:
9e:5b:ea:2d:99:1d:73:8b:d5:6e:76:63:87:c9:c9:16:db:df:
a1:f9:81:3a:7f:9b:21:b9:c3:d9:e5:f4:34:c9:9b:c9:ed:c4:
ca:37:1c:3b:69:66:42:39:25:8d:1c:5e:cb:be:f0:52:fe:95:
f7:5e:28:7e:81:da:5e:19:6d:79:c4:84:fd:74:a7:d4:2e:2e:
fb:f2:b3:df:84:21:73:8a:ab:f5:ca:4d:17:57:24:76:bc:7f:
86:e5:b6:7a:1f:a6:5c:31:82:c7:3b:c8:22:6b:e0:3e:45:7d:
00:63:aa:eb:a5:ac:a1:b6:4d:03:09:8f:a2:3e:bd:59:8d:84:
0f:b8:f2:19:c6:29:6c:d1:85:07:b3:b9:cb:10:ca:d2:84:a2:
75:cc:9e:00:e6:22:1c:e0:58:32:41:68:94:7e:51:fd:eb:fe:
ed:08:59:86:61:d3:7b:b0:2c:d0:13:e6:ed:79:c1:d9:c9:17:
29:f7:d3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:56:47 2026 by rpki-client