Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397630.roa
File: AS397630.roa (raw, json)
Hash identifier: 6ohLhGh7EO+FBj5RAj+xSO0Ui4+cVJn4SAiuHLfZ5RI=
Subject key identifier: 89:32:84:B9:17:81:9E:28:A3:62:98:20:37:24:C3:09:0C:46:49:04
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2EE829BE9CC81BB352891D913C28C4D847D5EAF6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397630.roa
Signing time: Mon 15 Jun 2026 00:02:53 +0000
ROA not before: Sun 14 Jun 2026 23:57:53 +0000
ROA not after: Mon 14 Jun 2027 00:02:53 +0000
asID: 397630
IP address blocks: 143.14.188.0/24 maxlen: 24
150.241.174.0/24 maxlen: 24
150.241.234.0/24 maxlen: 24
155.117.81.0/24 maxlen: 24
162.141.48.0/24 maxlen: 24
162.141.116.0/24 maxlen: 24
162.141.138.0/24 maxlen: 24
167.148.136.0/24 maxlen: 24
167.148.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:e8:29:be:9c:c8:1b:b3:52:89:1d:91:3c:28:c4:d8:47:d5:ea:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 14 23:57:53 2026 GMT
Not After : Jun 14 00:02:53 2027 GMT
Subject: CN=893284B917819E28A36298203724C3090C464904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:52:48:26:8f:da:ae:23:2d:3f:2f:8a:3c:
23:7b:3b:24:f2:22:22:9e:f4:a0:e4:9d:89:02:c1:
35:a0:c1:5e:a3:67:12:62:dc:e4:73:c7:e1:88:c5:
d5:9c:7c:e4:fc:4d:98:71:d7:6f:b4:67:af:30:67:
30:5d:aa:8b:d1:8c:ff:9e:ca:a7:74:69:32:2b:58:
47:d2:1f:ce:8b:d0:d7:da:6c:46:96:6a:6a:38:bf:
5b:d2:f5:2b:8b:37:9c:f6:12:2c:67:93:44:10:93:
10:fc:ce:30:01:12:b2:ce:c7:d0:93:5c:ae:f3:d9:
f9:3d:8d:ef:59:f3:dc:ba:4d:d5:ec:2f:22:68:72:
0b:5a:47:63:3a:77:6d:f7:4b:82:1e:4f:37:3a:ff:
ac:b5:b3:af:86:c0:54:e3:6d:ef:ed:c4:61:94:31:
6d:18:26:d8:57:3b:84:80:ee:c9:9e:c9:78:74:49:
46:41:5f:e4:fb:a4:78:5b:00:c2:01:48:0c:ca:52:
a2:83:df:6c:a8:77:08:46:3a:fc:a7:58:a8:5f:eb:
d8:3c:d7:f5:70:e3:24:5b:26:94:02:d7:8f:2e:62:
47:ef:1a:34:f0:fd:e4:42:f7:bf:26:d1:d6:45:38:
76:e4:5c:87:89:fd:08:d9:c4:a6:ea:38:33:9e:46:
8b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:32:84:B9:17:81:9E:28:A3:62:98:20:37:24:C3:09:0C:46:49:04
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.188.0/24
150.241.174.0/24
150.241.234.0/24
155.117.81.0/24
162.141.48.0/24
162.141.116.0/24
162.141.138.0/24
167.148.136.0/24
167.148.162.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:42:99:44:92:9a:f4:6d:02:b1:25:04:c6:6a:5b:35:f9:97:
b7:d8:61:b1:b4:12:69:72:b9:16:7d:86:2b:ca:7d:3f:ec:b0:
e5:db:af:a6:97:00:1e:67:50:4c:a2:40:d2:1b:10:e4:2b:92:
68:92:2d:5c:08:07:8b:b9:ea:e5:12:00:ea:b0:f0:cd:35:b6:
a5:6e:20:a5:24:af:bd:a4:49:86:eb:0e:95:20:4f:66:a4:c3:
d3:4e:26:b0:cf:18:e7:f9:f3:c3:c9:71:45:d9:85:2b:77:5e:
df:02:17:aa:66:b9:b2:57:b4:bd:97:5d:ea:ed:f4:30:4b:16:
53:f2:6f:4f:47:2c:04:d4:7a:c5:76:be:8d:8d:cd:20:37:a6:
ab:4e:1f:73:35:5e:1c:0c:91:73:27:d8:46:54:9d:1c:52:97:
43:95:95:93:d7:f4:8c:56:01:dc:8d:88:ed:a6:50:57:3d:00:
88:62:69:bb:a0:65:c6:b0:08:fd:83:62:bd:83:2e:86:f4:36:
45:fb:4d:e1:cc:7f:84:89:d0:a6:62:91:2f:e0:83:db:b7:cf:
55:26:5e:c4:03:3d:4e:43:3c:cf:b9:b2:73:05:ef:82:cf:4a:
70:8e:5e:c4:ed:34:cd:c7:c0:c4:75:04:aa:3a:a9:ea:a9:74:
99:cf:eb:17
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIULugpvpzIG7NSiR2RPCjE2EfV6vYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA2MTQyMzU3NTNaFw0yNzA2MTQwMDAyNTNaMDMxMTAvBgNV
BAMTKDg5MzI4NEI5MTc4MTlFMjhBMzYyOTgyMDM3MjRDMzA5MEM0NjQ5MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtulJIJo/ariMtPy+KPCN7OyTy
IiKe9KDknYkCwTWgwV6jZxJi3ORzx+GIxdWcfOT8TZhx12+0Z68wZzBdqovRjP+e
yqd0aTIrWEfSH86L0NfabEaWamo4v1vS9SuLN5z2Eixnk0QQkxD8zjABErLOx9CT
XK7z2fk9je9Z89y6TdXsLyJocgtaR2M6d233S4IeTzc6/6y1s6+GwFTjbe/txGGU
MW0YJthXO4SA7smeyXh0SUZBX+T7pHhbAMIBSAzKUqKD32yodwhGOvynWKhf69g8
1/Vw4yRbJpQC148uYkfvGjTw/eRC978m0dZFOHbkXIeJ/QjZxKbqODOeRouTAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUiTKEuReBniijYpggNyTDCQxGSQQwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMzk3NjMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAjw68
AwQAlvGuAwQAlvHqAwQAm3VRAwQAoo0wAwQAoo10AwQAoo2KAwQAp5SIAwQAp5Si
MA0GCSqGSIb3DQEBCwUAA4IBAQCrQplEkpr0bQKxJQTGals1+Ze32GGxtBJpcrkW
fYYryn0/7LDl26+mlwAeZ1BMokDSGxDkK5Joki1cCAeLuerlEgDqsPDNNbalbiCl
JK+9pEmG6w6VIE9mpMPTTiawzxjn+fPDyXFF2YUrd17fAheqZrmyV7S9l13q7fQw
SxZT8m9PRywE1HrFdr6Njc0gN6arTh9zNV4cDJFzJ9hGVJ0cUpdDlZWT1/SMVgHc
jYjtplBXPQCIYmm7oGXGsAj9g2K9gy6G9DZF+03hzH+EidCmYpEv4IPbt89VJl7E
Az1OQzzPubJzBe+Cz0pwjl7E7TTNx8DEdQSqOqnqqXSZz+sX
-----END CERTIFICATE-----
Generated at Mon Jul 20 18:34:57 2026 by rpki-client