Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS328608.roa
File: AS328608.roa (raw, json)
Hash identifier: VojrNU5/wmmXOe+bt+FcgFVM+KKDaFRlw+ZIf8CNueQ=
Subject key identifier: EF:D7:95:DA:06:85:2E:5B:F7:CF:72:E8:C3:72:9F:D8:D1:70:4A:18
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 3D4261A1341D690AD2C1B81F5BE03DCF2C3D30B0
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS328608.roa
Signing time: Wed 11 Nov 2026 17:30:56 +0000
ROA not before: Wed 11 Nov 2026 17:25:56 +0000
ROA not after: Wed 10 Nov 2027 17:30:56 +0000
asID: 328608
IP address blocks: 179.77.240.0/24 maxlen: 24
179.77.241.0/24 maxlen: 24
179.77.242.0/24 maxlen: 24
179.77.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:42:61:a1:34:1d:69:0a:d2:c1:b8:1f:5b:e0:3d:cf:2c:3d:30:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Nov 11 17:25:56 2026 GMT
Not After : Nov 10 17:30:56 2027 GMT
Subject: CN=EFD795DA06852E5BF7CF72E8C3729FD8D1704A18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:e7:fd:15:43:89:2c:d1:15:1e:a9:88:35:
23:0e:b6:22:1b:cd:a2:69:a6:09:20:cb:6a:3e:c0:
49:ac:e2:77:9d:4c:12:fc:12:6a:e9:52:c5:ba:8c:
88:1c:ab:58:63:1c:32:94:ff:08:a6:d0:fd:95:42:
26:77:51:55:2f:79:b1:b8:21:d5:2a:1e:89:e3:1d:
32:8d:39:88:fc:b0:c4:a9:e8:e7:00:e4:13:10:14:
18:04:e2:74:f8:d8:ca:a3:f5:fe:ba:0e:fb:3f:e6:
b1:ae:ce:90:df:f3:84:9a:bb:fd:4a:95:de:d3:bc:
21:03:10:0c:f5:5a:ee:3f:18:6b:e7:bb:87:2e:29:
76:e4:18:26:41:31:14:a4:f0:fc:1b:53:42:3c:85:
e3:88:28:2d:34:d8:ff:cf:ee:05:84:3c:e2:72:74:
5c:89:2f:cd:7b:63:36:93:53:ea:a9:9a:b3:0a:16:
78:76:fa:9a:bb:82:bb:67:f3:03:25:f9:35:b5:30:
3a:20:ad:2b:11:f7:3b:f2:fa:e8:e7:2f:8e:b2:f4:
37:a0:fc:b1:45:1f:2c:f8:59:62:d8:7d:85:2b:74:
19:3c:2b:1d:0d:61:b2:1e:f8:fb:24:af:41:47:5b:
84:28:5f:17:5f:56:55:4e:91:7f:18:55:5e:6e:8c:
5d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D7:95:DA:06:85:2E:5B:F7:CF:72:E8:C3:72:9F:D8:D1:70:4A:18
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS328608.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.77.240.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:c0:3e:c7:3d:a3:2b:93:5b:b1:fc:2a:18:31:ef:2c:1d:82:
3e:96:df:79:c2:f9:d3:0d:e3:9a:b8:68:89:f8:ee:35:c6:00:
87:90:91:cd:70:3c:d4:e9:2f:5f:a0:92:63:ff:8f:64:28:25:
b3:98:73:d8:fe:e6:12:7b:2c:c1:38:e5:a3:b0:0e:26:5b:26:
4e:25:95:b0:a3:8a:af:24:55:f9:6f:d9:9a:fb:90:4f:77:31:
9a:1b:d5:e0:2e:94:ad:14:14:42:eb:ce:43:4d:b9:8f:b1:54:
8c:2a:c2:7d:01:db:f7:d4:0b:70:50:fb:fd:77:37:4f:50:01:
26:9f:14:9d:63:43:be:b7:70:43:87:a9:5e:08:32:d5:5f:35:
68:e1:e7:74:28:de:60:bf:54:3e:cb:ee:29:98:59:a7:dd:06:
fa:5a:1a:13:39:16:39:89:ad:95:14:30:1f:09:77:5c:b0:97:
7b:84:28:96:44:a8:0f:9f:07:7a:03:5a:ed:bd:d3:f3:82:d9:
4c:2e:6b:6f:d1:c7:42:25:29:31:49:25:d0:cc:1f:9e:ce:6c:
b1:79:ba:62:30:e7:92:e1:60:27:90:78:df:83:b0:85:40:06:
d7:88:a4:e9:38:e0:37:25:44:35:18:0a:98:12:c7:21:cf:e9:
01:8d:bb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:03:04 2026 by rpki-client