Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS39855.roa
File: AS39855.roa (raw, json)
Hash identifier: rlfryUyFLwT+jjeF+VsSjg0jx1tMgMVkdXM9/8GxEZ0=
Subject key identifier: 86:47:18:FC:91:5C:35:5F:52:F1:69:BD:24:F9:20:7D:DF:32:81:59
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1BB2734A2175578C9B63644CE677E31382B4FFFA
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS39855.roa
Signing time: Mon 12 Oct 2026 14:49:36 +0000
ROA not before: Mon 12 Oct 2026 14:44:36 +0000
ROA not after: Mon 11 Oct 2027 14:49:36 +0000
asID: 39855
IP address blocks: 168.222.56.0/24 maxlen: 24
168.222.57.0/24 maxlen: 24
168.222.58.0/24 maxlen: 24
168.222.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:b2:73:4a:21:75:57:8c:9b:63:64:4c:e6:77:e3:13:82:b4:ff:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 12 14:44:36 2026 GMT
Not After : Oct 11 14:49:36 2027 GMT
Subject: CN=864718FC915C355F52F169BD24F9207DDF328159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:45:1d:2c:ae:16:48:c2:a3:6d:96:1b:8f:d3:
6d:85:26:a9:2a:1b:42:0f:97:cd:0c:2c:ef:2c:c1:
af:c8:b8:03:16:52:36:62:e7:b3:75:11:17:fd:c7:
4b:d1:d7:11:98:af:04:a1:1b:1b:23:52:04:c9:07:
8c:b0:d5:1c:c4:16:2a:35:72:11:6e:23:ae:61:df:
a2:e4:33:3e:73:5e:8a:05:c3:3b:c3:96:67:8d:6a:
c5:8c:8e:57:bb:15:7e:fd:1e:5c:02:e7:fe:8b:02:
32:79:64:cc:21:e3:df:73:5d:8c:4b:bb:3d:51:fe:
85:5e:8d:ad:04:35:76:59:4a:a6:02:4c:b2:37:19:
e7:d1:df:a1:25:08:99:8c:02:91:72:6f:43:f9:58:
0e:ff:c4:5a:b2:5e:0a:97:c7:4d:22:bf:3e:78:e3:
15:24:a4:02:68:c1:8b:6c:fa:06:e6:60:6a:be:16:
a1:a2:ae:5e:5d:64:54:29:db:d6:22:89:ba:f0:33:
2b:66:d5:d0:de:27:df:22:c5:3e:50:e9:e7:5d:49:
ee:f7:1e:eb:35:7b:a0:2f:7f:9b:d4:5e:98:38:b4:
b1:f2:80:cb:6a:a9:a7:fa:e0:c9:61:ee:eb:42:00:
1d:59:5a:51:da:11:e8:9d:82:41:6b:e6:0f:71:8c:
d4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:47:18:FC:91:5C:35:5F:52:F1:69:BD:24:F9:20:7D:DF:32:81:59
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS39855.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.56.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:ea:a0:c3:39:e9:f8:21:92:b3:6c:5c:6b:d4:2d:95:86:b5:
f7:18:95:53:79:80:05:8f:63:75:0b:80:99:9c:17:ef:52:d1:
50:ab:67:07:64:b3:c5:51:f2:93:af:81:e6:5d:32:ac:39:c5:
35:d4:19:d6:2f:3e:9d:a2:84:ee:79:b7:12:f9:90:c7:a9:9a:
99:b0:a6:ce:63:61:53:52:92:0b:4c:9a:bc:06:3c:b3:07:3e:
95:8e:7a:e2:33:e6:d2:c8:90:24:b5:15:39:29:dc:0b:cd:2a:
bc:58:01:73:ee:13:31:14:15:57:64:22:b3:4a:50:66:ae:54:
59:24:eb:e6:fc:1c:da:ff:ae:81:b7:3a:4d:65:34:7d:1f:a4:
55:46:68:3b:28:88:22:3c:4a:aa:72:ea:ad:6f:16:08:03:a4:
45:29:aa:87:7b:13:c8:ff:9a:9f:ad:28:92:d6:be:27:09:84:
61:86:77:f1:53:e6:ee:d4:83:52:fe:74:33:66:d7:6f:33:e1:
41:7b:39:0a:c4:41:a8:73:2b:d3:ac:11:73:d4:09:60:df:07:
19:5f:dc:29:3e:86:60:eb:7e:b4:50:6a:dc:d4:a0:16:2f:f8:
30:fa:92:db:2f:32:33:c7:65:5a:47:7f:99:28:80:b1:a1:4e:
c6:84:b3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:01:00 2026 by rpki-client