Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS57227.roa
File: AS57227.roa (raw, json)
Hash identifier: 7KHxIs4obnuOldiN8Atk2+K9JnvjgXRH8ZEAlKglL40=
Subject key identifier: 9B:7A:E7:F5:46:76:3D:4E:FF:FE:33:DA:8A:1B:A1:BF:06:35:26:FB
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 37F9BE4EC39AC578814AB46E2145240BC3199658
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS57227.roa
Signing time: Thu 12 Nov 2026 06:21:46 +0000
ROA not before: Thu 12 Nov 2026 06:16:46 +0000
ROA not after: Thu 11 Nov 2027 06:21:46 +0000
asID: 57227
IP address blocks: 177.122.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:f9:be:4e:c3:9a:c5:78:81:4a:b4:6e:21:45:24:0b:c3:19:96:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Nov 12 06:16:46 2026 GMT
Not After : Nov 11 06:21:46 2027 GMT
Subject: CN=9B7AE7F546763D4EFFFE33DA8A1BA1BF063526FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:c4:74:14:38:63:d0:99:fa:2d:c6:e6:7e:
12:3e:75:d1:b2:ba:8f:3e:c4:94:38:43:6c:ed:61:
ef:30:2f:96:02:b9:70:49:54:3e:8a:be:2e:df:2d:
b9:21:51:66:6b:fe:74:f1:92:80:b0:c5:8b:86:9e:
51:c1:8f:ec:bd:d4:a8:f8:fa:d5:bf:6a:fc:38:17:
34:35:ad:49:41:55:fe:62:7a:87:5f:68:9d:01:99:
7b:2e:4b:6e:9e:28:8c:23:e6:dc:59:5a:99:1a:61:
4e:16:4b:56:61:e7:15:90:89:1d:92:92:bd:0f:fe:
b0:05:a3:e5:32:92:a4:72:98:1f:f1:5a:05:0b:f2:
32:8f:0a:93:01:b0:8f:61:86:b2:50:1c:89:a3:a6:
29:a9:cb:e8:70:24:55:ac:50:fc:47:fd:72:1b:2a:
5a:3d:92:01:e7:70:99:00:cf:aa:c5:f0:21:f3:49:
d7:72:99:be:78:23:11:d2:01:ee:b0:66:af:69:d7:
fa:63:05:4d:dd:f8:a9:10:6f:18:5f:56:e2:9e:27:
ec:13:4c:c3:03:07:fa:b7:14:97:1a:63:53:54:a8:
6a:0b:71:0e:59:b9:80:33:f4:72:95:df:ba:52:8b:
ab:d3:af:3d:b4:b2:09:42:86:1f:c6:c2:bf:73:1a:
69:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7A:E7:F5:46:76:3D:4E:FF:FE:33:DA:8A:1B:A1:BF:06:35:26:FB
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS57227.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.122.107.0/24
Signature Algorithm: sha256WithRSAEncryption
11:af:3b:cc:c8:6c:37:52:72:f3:65:bb:83:23:ad:d6:50:dd:
60:f4:22:ab:3c:f5:f0:a9:41:96:fa:69:3a:3d:60:7e:9d:78:
19:69:69:a6:8b:e7:a1:c6:1b:c5:10:01:dd:57:55:1b:fc:3b:
ca:f5:55:78:3b:cc:27:84:85:36:98:da:fc:ef:9a:19:51:17:
25:ad:d4:55:71:c8:5d:48:8a:95:5e:bb:64:b4:f3:fd:8e:fc:
bb:58:b1:7c:fa:e9:c1:06:c3:51:77:64:8c:de:37:51:07:72:
91:93:5f:80:82:f6:97:37:51:6d:86:6d:cf:66:9f:9b:8b:71:
db:f7:61:96:39:0b:87:b1:49:78:08:f1:c4:c7:65:4b:3f:cb:
f8:dc:a7:1b:69:cb:1e:26:d9:f9:b5:b7:a7:6c:3f:17:e9:f2:
0a:7b:9a:00:b6:89:cb:d0:6c:8c:10:8c:f5:56:09:3f:7b:73:
3c:73:a3:2b:c3:6f:9c:3f:c0:d5:01:e9:a7:0a:9f:13:62:fb:
c3:15:47:1c:13:91:5d:b2:9f:99:f6:3e:d0:63:7d:d1:a2:f5:
c7:9f:ef:96:67:2a:77:a4:c4:30:45:32:0f:0d:52:ac:cb:65:
e5:7a:e7:52:00:06:ad:d7:e1:72:d0:9b:a1:6f:79:ae:42:00:
81:5f:6c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:02:49 2026 by rpki-client