Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS398465.roa
File: AS398465.roa (raw, json)
Hash identifier: DB90dZc6//uEmy/j7ezDt8xjlisJJKMZorHGEdMjegY=
Subject key identifier: 94:6E:42:A7:8A:CF:30:AD:B1:71:72:B1:7C:4B:AA:13:9F:34:91:93
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 5F1DFD1945F3834BE1E128FAAA2AD7965743AF48
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS398465.roa
Signing time: Fri 18 Sep 2026 13:28:39 +0000
ROA not before: Fri 18 Sep 2026 13:23:39 +0000
ROA not after: Fri 17 Sep 2027 13:28:39 +0000
asID: 398465
IP address blocks: 90.96.0.0/22 maxlen: 24
90.96.8.0/22 maxlen: 24
90.96.12.0/22 maxlen: 24
90.96.16.0/22 maxlen: 24
90.96.24.0/22 maxlen: 24
90.96.32.0/22 maxlen: 24
90.96.36.0/22 maxlen: 24
90.96.40.0/22 maxlen: 24
90.96.128.0/22 maxlen: 24
90.96.136.0/22 maxlen: 24
90.96.140.0/22 maxlen: 24
90.96.144.0/22 maxlen: 24
90.96.152.0/22 maxlen: 24
90.96.156.0/22 maxlen: 24
90.96.164.0/22 maxlen: 24
90.96.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:1d:fd:19:45:f3:83:4b:e1:e1:28:fa:aa:2a:d7:96:57:43:af:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 18 13:23:39 2026 GMT
Not After : Sep 17 13:28:39 2027 GMT
Subject: CN=946E42A78ACF30ADB17172B17C4BAA139F349193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a1:ec:76:3b:8c:9b:56:de:6d:c0:35:97:9d:
7b:b2:d2:bf:05:d5:df:f5:21:47:a2:6b:e9:91:31:
dc:1d:d8:80:3e:ad:e0:41:13:45:23:de:5b:ed:ad:
78:04:24:2a:c6:0a:a2:c5:e3:f6:02:59:10:28:f9:
39:33:8f:c4:99:92:c8:7d:47:c6:22:58:59:5b:ad:
e1:c0:e8:6e:e8:82:9d:33:ca:03:06:ab:7d:93:b0:
fa:a5:73:33:62:ff:48:e8:16:9a:1d:b2:af:81:d7:
7a:7a:31:6f:d5:10:1a:a8:7c:86:ae:3b:3c:55:ec:
14:22:a2:d1:4a:e9:27:31:76:53:0b:f8:38:44:f8:
10:d2:f2:5d:68:d5:50:6f:d1:9f:a4:7e:fe:87:23:
ae:a8:d6:b8:c9:65:01:10:ea:70:83:b9:00:f8:a8:
2b:66:5b:37:a3:42:18:da:ce:85:bd:8b:ec:6c:3a:
5a:f9:9d:62:e0:91:b2:da:d4:1b:1b:37:b6:df:19:
2c:a0:af:58:ee:cf:36:ef:30:a3:07:a2:1b:81:58:
0b:e7:f4:41:ea:76:7f:8e:8b:73:0b:00:ee:50:98:
9b:fb:4f:dd:1a:62:77:c4:19:d3:5b:de:3f:76:7f:
f5:b8:de:ef:d6:95:47:b0:0e:fa:52:7f:f1:2e:21:
fb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6E:42:A7:8A:CF:30:AD:B1:71:72:B1:7C:4B:AA:13:9F:34:91:93
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS398465.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.96.0.0/22
90.96.8.0-90.96.19.255
90.96.24.0/22
90.96.32.0-90.96.43.255
90.96.128.0/22
90.96.136.0-90.96.147.255
90.96.152.0/21
90.96.164.0-90.96.171.255
Signature Algorithm: sha256WithRSAEncryption
14:c4:98:88:91:a5:b6:4d:0a:fb:85:f3:88:b1:2b:3d:c4:95:
7b:59:dc:13:4a:96:90:07:eb:f8:64:4a:fb:90:75:7d:dc:44:
fa:63:b2:0b:fa:a1:c9:8c:4d:e7:ae:2b:d9:a7:5b:63:11:41:
d3:f2:5c:20:ec:83:94:6f:7d:40:fb:c1:79:47:cc:9f:90:15:
df:7e:6f:c5:29:23:3d:40:ad:a9:bc:56:ef:7d:55:6d:d6:51:
06:9d:80:7e:bc:1c:6f:de:44:d9:56:b6:93:e5:af:39:0b:69:
49:d8:b2:2d:6a:61:7d:37:ea:33:85:67:d4:a9:da:c4:53:fd:
dd:44:f8:9f:b9:59:03:49:ea:f6:8e:89:34:3c:ec:4b:63:9f:
1f:46:7e:5c:f8:4b:6e:59:53:29:60:4b:03:9e:48:7b:8f:90:
40:29:41:ba:0b:3c:d6:dd:63:03:f7:61:5e:7b:67:bb:9e:e9:
6b:f0:63:8a:2a:62:b0:c7:7b:55:c5:f2:b5:f3:fc:b5:69:b3:
93:6c:da:15:39:7a:39:4a:8c:12:c8:5c:21:f5:9b:61:d1:7a:
d7:ea:37:e6:4a:e5:3b:e0:8b:05:18:b8:81:e0:cc:7b:f9:6b:
3d:8e:fb:cf:0a:81:75:f5:32:9b:8d:28:cb:a1:ea:fc:54:48:
73:2e:3b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:44:17 2026 by rpki-client