Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS395839.roa
File: AS395839.roa (raw, json)
Hash identifier: 9K0Ifjcn1bMSa++vonfbKazrdvHkLNhbCoAKFmdbtxk=
Subject key identifier: 4C:E3:3F:2C:AA:C2:10:FB:5F:EF:DC:8F:98:67:87:80:EC:BA:11:80
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 19DFB6968322B9EF325AAFBE8BE38151D7E8DC61
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS395839.roa
Signing time: Mon 13 Jul 2026 11:06:28 +0000
ROA not before: Mon 13 Jul 2026 11:01:28 +0000
ROA not after: Mon 12 Jul 2027 11:06:28 +0000
asID: 395839
IP address blocks: 162.141.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:df:b6:96:83:22:b9:ef:32:5a:af:be:8b:e3:81:51:d7:e8:dc:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 13 11:01:28 2026 GMT
Not After : Jul 12 11:06:28 2027 GMT
Subject: CN=4CE33F2CAAC210FB5FEFDC8F98678780ECBA1180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4e:b7:08:46:66:5b:49:2a:33:a5:a1:d6:fa:
46:1d:7a:89:cf:8b:01:df:4e:a9:79:60:1c:9f:a7:
43:c7:b1:9e:1d:b6:96:52:9f:7b:13:0e:00:ff:b1:
bc:23:78:e7:f5:0d:5d:0a:88:8c:51:7b:29:60:ea:
7f:3b:83:a9:7e:cf:6f:75:33:2f:46:58:aa:e1:69:
d3:15:68:74:77:eb:74:14:73:32:df:9b:58:41:a3:
1e:18:80:e1:80:43:c1:29:74:79:69:bd:15:4a:a7:
a4:e8:a3:e4:49:92:0f:ba:90:97:4c:2e:76:fc:44:
54:bc:31:b9:b6:26:a8:58:3c:77:3e:7f:91:6a:52:
2f:48:fc:26:64:96:9e:ed:0a:46:b4:e4:46:68:c5:
2c:19:19:8f:e4:b0:20:fc:fc:83:c1:91:0d:3b:ec:
d4:11:92:66:d1:5f:fb:2c:1b:fd:57:91:44:34:f7:
00:39:d1:8a:a2:d2:45:b7:05:55:88:a7:1a:68:27:
6f:42:36:5d:18:4b:ee:56:a7:d3:fa:29:ea:37:ec:
05:38:a8:bb:86:f7:af:d1:43:7f:58:f2:9c:ad:a7:
f0:7c:15:4c:03:1d:24:e4:00:66:1e:b0:40:fe:64:
7b:ac:d0:1d:b1:db:a3:97:72:c7:bf:6e:13:20:0b:
1e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E3:3F:2C:AA:C2:10:FB:5F:EF:DC:8F:98:67:87:80:EC:BA:11:80
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS395839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.78.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:92:6a:55:98:e9:16:39:c7:51:03:f9:8c:5c:95:db:7b:4b:
61:15:fd:ff:aa:bf:d9:53:15:e5:25:b3:f2:67:2d:59:c3:0e:
f5:34:09:b3:59:c3:b0:2c:19:ed:a5:d5:00:d0:9f:d3:7c:8a:
e6:fa:39:08:78:67:6f:3f:95:8e:7d:ce:87:52:1c:36:a2:e0:
2c:d6:c6:2f:ef:bd:3f:19:ee:7a:d7:a3:13:2a:31:1f:cc:87:
0c:ff:4c:17:66:b0:a4:30:f8:d4:8c:29:ed:43:9b:eb:dc:52:
0c:ef:a9:c8:7f:81:84:ac:3c:53:e8:68:91:c1:eb:2e:b2:94:
ab:7f:5b:d8:c6:b9:21:82:83:1e:ba:56:7c:27:f3:4d:0c:e9:
49:7e:7c:37:e3:bc:f2:4f:08:20:13:c5:12:13:67:f7:1f:6c:
47:85:7b:79:e1:a6:1e:42:c9:b2:07:1a:6a:36:b2:9a:cb:b9:
6c:cb:7d:cc:22:bd:8d:9a:29:5b:54:94:51:1b:78:66:03:6d:
66:85:c8:88:6a:3b:66:d6:83:dc:08:c3:41:08:fd:fb:0b:cf:
c9:83:01:54:2d:72:d3:28:24:f1:55:76:92:2c:80:ed:7c:7d:
b2:87:f0:f7:fc:be:2f:ab:1c:ed:73:bc:77:81:69:f7:82:27:
ed:81:a6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:36:41 2026 by rpki-client