Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401776.roa
File: AS401776.roa (raw, json)
Hash identifier: DkyHpMTj/A3K52zVoDYjsbIgwJNBSrpllCtnHFVL84k=
Subject key identifier: 71:EB:AE:0E:81:79:CA:88:BE:04:4A:25:76:58:0F:4A:0B:07:6A:8C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 295F582DC1F3E00760D83513E4524A0FAACB2F72
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401776.roa
Signing time: Sun 20 Jul 2025 00:02:03 +0000
ROA not before: Sat 19 Jul 2025 23:57:03 +0000
ROA not after: Sun 19 Jul 2026 00:02:03 +0000
asID: 401776
IP address blocks: 96.62.152.0/24 maxlen: 24
143.14.90.0/23 maxlen: 23
143.14.160.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:5f:58:2d:c1:f3:e0:07:60:d8:35:13:e4:52:4a:0f:aa:cb:2f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 19 23:57:03 2025 GMT
Not After : Jul 19 00:02:03 2026 GMT
Subject: CN=71EBAE0E8179CA88BE044A2576580F4A0B076A8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:03:22:dd:f7:f1:c1:16:ce:39:a2:b0:3d:2c:
6f:34:1c:4e:26:7f:17:33:1f:4a:b0:5f:c4:77:3b:
64:80:be:f1:af:90:dd:88:e5:8a:0f:93:5c:e1:db:
8b:35:73:6c:a2:29:6d:02:c7:4e:3c:10:8e:ea:c7:
c1:de:e2:6a:f9:f3:4b:56:bb:6b:27:1b:0c:df:be:
d5:71:2f:a7:95:c2:8f:83:d1:02:7b:20:ce:99:7b:
07:3e:49:1a:a3:50:33:59:cb:ad:0d:a7:4f:5a:bb:
7a:1b:ea:07:50:3a:b3:33:50:76:3a:3b:0f:ba:9f:
12:8f:19:66:9d:0a:cb:f6:d8:90:26:cb:c7:81:45:
08:25:d4:4f:0f:a2:19:74:1a:87:63:96:10:6b:17:
91:6f:97:24:65:ad:84:83:48:4e:19:04:31:1b:0e:
b8:40:d0:61:c6:10:1d:fd:13:93:54:e4:dc:d2:3c:
28:7f:c2:24:f0:8e:58:52:e3:66:aa:4a:3c:b3:ca:
dc:5a:56:5a:e6:9f:ed:6c:52:3a:e2:76:db:5d:a0:
e1:5a:79:12:f0:4a:53:64:2a:62:5a:19:9c:a6:75:
1c:b5:87:84:9c:13:95:07:e0:6e:87:07:5b:f3:b5:
b9:4e:de:7d:0a:f6:fd:72:e8:fa:e3:aa:c2:29:a1:
50:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EB:AE:0E:81:79:CA:88:BE:04:4A:25:76:58:0F:4A:0B:07:6A:8C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.152.0/24
143.14.90.0/23
143.14.160.0/23
Signature Algorithm: sha256WithRSAEncryption
30:bd:f0:0d:e6:29:15:03:b1:b5:af:2e:30:93:86:e9:f8:60:
ba:9e:59:d5:8f:2b:86:e7:b3:11:ce:79:ac:fe:b6:3c:4d:31:
b7:67:4d:0f:cb:3f:75:80:80:f6:01:7c:bc:d1:63:46:26:63:
28:12:0e:2f:c7:12:08:63:1f:87:47:ae:80:ce:68:2e:58:2a:
1f:72:b3:1d:31:36:6f:8b:11:09:f4:13:d3:18:ba:fd:62:a6:
b4:48:c8:74:33:aa:54:e3:48:9d:fa:12:90:2c:16:d8:19:e7:
00:cc:dd:a4:45:eb:bc:33:4c:c5:87:f4:13:6e:8f:5d:f8:1e:
7c:51:b1:e7:a1:08:50:23:08:65:62:7f:b7:43:1e:03:c8:90:
ff:26:56:be:c0:60:6b:84:10:2e:e1:51:40:8f:ba:0f:40:89:
c5:a6:02:5c:f7:9a:57:d8:e2:12:92:05:d2:12:69:70:7e:d7:
a2:b1:d8:e3:0a:0a:a5:f9:e3:80:1b:ec:1f:e5:bb:2c:20:d0:
d7:d9:c4:4b:c4:47:86:1b:de:a8:3d:9f:11:d9:35:c3:8d:ba:
95:2a:ff:90:f8:cf:e0:4c:86:ce:94:6d:82:9f:2c:91:a4:a3:
79:b3:90:61:50:e1:b6:84:50:8a:da:d2:ae:9c:74:c3:10:15:
18:25:e9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:05:34 2025 by rpki-client