Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS400342.roa
File: AS400342.roa (raw, json)
Hash identifier: HAdBFckCSaXsAND+XJ8jg5Nh45jTICYyuk+79pPDlyY=
Subject key identifier: 06:51:58:50:51:36:8A:7A:C3:23:F5:CD:31:AA:50:82:FD:7F:A7:49
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 680CFCB33A4FD9D2F69D9BC37A76F3C40B7E0E1A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS400342.roa
Signing time: Sat 18 Jul 2026 14:49:13 +0000
ROA not before: Sat 18 Jul 2026 14:44:13 +0000
ROA not after: Sat 17 Jul 2027 14:49:13 +0000
asID: 400342
IP address blocks: 155.117.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:0c:fc:b3:3a:4f:d9:d2:f6:9d:9b:c3:7a:76:f3:c4:0b:7e:0e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 18 14:44:13 2026 GMT
Not After : Jul 17 14:49:13 2027 GMT
Subject: CN=0651585051368A7AC323F5CD31AA5082FD7FA749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b9:c1:49:b8:07:55:1a:be:13:f7:a3:a0:44:
b0:5d:d5:5e:62:2e:bb:24:7c:ed:8f:e0:c2:81:05:
6f:09:e0:af:d4:ad:87:b5:3c:bd:93:41:60:c7:d5:
68:48:c4:6f:53:37:f9:e6:4e:74:e7:05:fd:1a:90:
ed:5c:fc:f1:ad:49:27:6a:9f:6b:3d:ea:c4:58:65:
35:bc:48:59:90:04:00:91:44:2a:dc:78:83:78:0b:
13:74:73:1e:8e:b6:2d:8f:44:65:94:d4:f9:fa:ad:
a3:1e:e4:27:f2:26:0e:50:d4:0e:4e:29:5e:c7:03:
93:db:51:0d:ef:d9:34:b8:e0:da:80:fe:0e:f4:81:
59:71:32:6b:ed:39:d1:5a:c9:b0:43:ff:a2:58:b2:
73:e0:56:14:ba:a7:d2:dd:5c:69:63:de:5f:38:37:
1a:83:b6:b1:ca:ec:c8:1c:11:f7:34:22:5e:6d:cb:
72:b1:22:f3:75:e2:19:64:98:a8:67:eb:80:3c:e0:
75:e9:e6:15:82:0b:d2:a9:6b:10:4f:54:1c:d5:dc:
db:26:b6:aa:f0:05:6c:a0:c2:32:e2:ae:24:50:f6:
9b:64:64:93:1c:0c:ab:15:1d:5e:89:8b:f9:53:cc:
26:df:d1:c4:12:65:61:9a:59:02:45:0a:b7:a2:c6:
17:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:51:58:50:51:36:8A:7A:C3:23:F5:CD:31:AA:50:82:FD:7F:A7:49
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS400342.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.148.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:39:80:36:a3:43:e8:64:08:fa:6b:b2:8b:1d:cc:5f:ee:c6:
8f:91:59:20:5c:d8:15:c0:07:4d:93:69:39:29:40:e6:a9:0c:
07:85:c3:92:98:83:60:fa:e6:e8:03:e1:cb:f8:70:50:78:3c:
a7:73:8a:c4:fa:c7:c2:3d:de:ac:94:4c:ad:c6:47:cc:2a:6e:
8f:93:bb:19:17:e0:52:91:32:93:93:a6:24:e4:c4:92:90:95:
d4:26:d0:14:60:c9:be:a0:08:45:2c:cc:20:1e:12:9c:f4:a0:
af:be:ac:af:e3:b9:5c:97:ef:3d:c7:b1:01:96:ef:e3:fe:45:
33:37:0c:c3:54:a1:f3:f8:5d:86:fc:2f:42:b9:d0:b5:da:9e:
f2:6c:08:eb:1b:50:19:38:ef:4d:a1:d5:62:9d:25:43:73:99:
ca:f5:8b:87:a7:70:23:55:4d:10:d7:da:cd:e2:b0:85:0d:42:
46:e3:cf:7b:0d:a8:97:1c:ca:58:1e:ce:94:bf:8a:84:ff:a3:
5a:2d:59:a3:38:e3:01:08:42:27:4e:c5:1f:d3:f8:de:2e:30:
4f:80:63:74:5c:de:fc:40:2e:55:0e:73:6a:13:96:29:ac:62:
a4:51:c0:55:d0:6c:66:58:bf:a1:97:61:4b:57:b5:f7:4c:d2:
0d:90:36:2f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUaAz8szpP2dL2nZvDenbzxAt+DhowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA3MTgxNDQ0MTNaFw0yNzA3MTcxNDQ5MTNaMDMxMTAvBgNV
BAMTKDA2NTE1ODUwNTEzNjhBN0FDMzIzRjVDRDMxQUE1MDgyRkQ3RkE3NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHucFJuAdVGr4T96OgRLBd1V5i
LrskfO2P4MKBBW8J4K/UrYe1PL2TQWDH1WhIxG9TN/nmTnTnBf0akO1c/PGtSSdq
n2s96sRYZTW8SFmQBACRRCrceIN4CxN0cx6Oti2PRGWU1Pn6raMe5CfyJg5Q1A5O
KV7HA5PbUQ3v2TS44NqA/g70gVlxMmvtOdFaybBD/6JYsnPgVhS6p9LdXGlj3l84
NxqDtrHK7MgcEfc0Il5ty3KxIvN14hlkmKhn64A84HXp5hWCC9KpaxBPVBzV3Nsm
tqrwBWygwjLiriRQ9ptkZJMcDKsVHV6Ji/lTzCbf0cQSZWGaWQJFCreixhePAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUBlFYUFE2inrDI/XNMapQgv1/p0kwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNDAwMzQyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAm3WU
MA0GCSqGSIb3DQEBCwUAA4IBAQCkOYA2o0PoZAj6a7KLHcxf7saPkVkgXNgVwAdN
k2k5KUDmqQwHhcOSmINg+uboA+HL+HBQeDync4rE+sfCPd6slEytxkfMKm6Pk7sZ
F+BSkTKTk6Yk5MSSkJXUJtAUYMm+oAhFLMwgHhKc9KCvvqyv47lcl+89x7EBlu/j
/kUzNwzDVKHz+F2G/C9CudC12p7ybAjrG1AZOO9NodVinSVDc5nK9YuHp3AjVU0Q
19rN4rCFDUJG4897DaiXHMpYHs6Uv4qE/6NaLVmjOOMBCEInTsUf0/jeLjBPgGN0
XN78QC5VDnNqE5YprGKkUcBV0GxmWL+hl2FLV7X3TNINkDYv
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:40:40 2026 by rpki-client