Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402475.roa
File: AS402475.roa (raw, json)
Hash identifier: CyXZrHLyrcxdrs5x2zXHAY4tXtsqofxFMxfGkYWikFY=
Subject key identifier: 86:EA:02:39:70:9C:0D:6A:A3:FD:B1:F7:EF:C1:72:83:B2:BD:C5:CE
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 655F8FD76C2B67F163FC85AA31EB578BBFAE5A99
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402475.roa
Signing time: Thu 25 Jun 2026 19:58:08 +0000
ROA not before: Thu 25 Jun 2026 19:53:08 +0000
ROA not after: Thu 24 Jun 2027 19:58:08 +0000
asID: 402475
IP address blocks: 162.141.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:5f:8f:d7:6c:2b:67:f1:63:fc:85:aa:31:eb:57:8b:bf:ae:5a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 25 19:53:08 2026 GMT
Not After : Jun 24 19:58:08 2027 GMT
Subject: CN=86EA0239709C0D6AA3FDB1F7EFC17283B2BDC5CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2f:db:2c:6b:71:65:10:6c:7a:32:40:54:85:
42:b7:47:59:b3:b4:23:31:0e:9a:e2:73:a4:46:00:
0d:fb:b4:18:93:51:5b:0a:76:80:e8:4f:af:5f:1a:
08:b9:73:89:5e:44:c0:18:b4:ff:00:2b:79:d2:fe:
7f:fc:66:bc:1a:1d:8e:c6:c4:cb:4f:fe:3f:cd:11:
a3:e2:d8:e2:19:27:1d:cf:73:ca:ec:62:a8:95:6d:
ea:59:13:20:a5:77:f0:97:cd:50:a1:b9:86:59:e1:
5c:ae:e9:66:86:d8:ca:01:4d:c6:b0:c4:61:85:2d:
1e:18:af:86:e5:df:dd:f6:2b:5f:0a:2f:18:c6:e4:
c0:6b:93:af:36:68:48:c1:0e:45:d9:07:2a:32:6e:
9d:a4:86:88:62:f4:77:24:38:45:2e:d4:9b:e4:f1:
fa:bf:a1:87:64:11:39:d8:e0:69:2f:ff:3b:df:ec:
15:6b:17:01:5f:e2:a6:d2:d6:68:b5:89:20:a3:92:
64:32:48:53:35:09:66:b8:bc:ac:3e:34:c6:04:e1:
48:7d:86:26:aa:67:b5:d9:64:f0:b8:8f:5b:8c:85:
d8:42:d9:9c:1f:8c:42:e0:90:11:ba:79:1a:89:14:
56:00:f0:c8:e7:a9:f4:6e:8d:cb:15:08:f1:b8:ec:
b2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EA:02:39:70:9C:0D:6A:A3:FD:B1:F7:EF:C1:72:83:B2:BD:C5:CE
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402475.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.90.0/24
Signature Algorithm: sha256WithRSAEncryption
70:02:d3:c5:23:ba:21:95:d7:9c:95:03:09:92:df:d6:a1:c9:
70:39:a3:ce:71:64:58:43:27:3f:c7:31:b4:9b:66:b8:d7:0e:
45:68:c4:ff:7b:b8:02:7f:55:ad:06:01:14:ad:7f:23:2f:39:
3f:54:1c:1d:4d:ef:71:2d:f7:73:ac:da:ea:09:29:6b:4a:2e:
9f:a5:f6:94:2f:19:f2:c1:4b:cf:fa:9e:6a:cb:3b:6a:0f:a0:
00:6b:bd:05:77:82:f9:a2:b7:5c:c7:72:b4:92:46:af:b0:59:
4a:d3:7a:19:9f:34:87:64:21:b0:45:c5:38:59:d1:57:47:03:
d0:4b:cc:54:82:21:9f:7b:ae:e4:ea:bd:77:fa:c2:58:07:7f:
24:53:5f:b2:da:29:cc:ba:76:16:17:af:bf:81:38:62:95:9f:
cd:96:61:b3:39:3d:55:8e:64:80:7f:ec:52:af:94:76:46:ce:
39:8a:86:6f:3a:53:ae:e4:e4:f4:b1:fb:42:01:24:de:aa:31:
22:1a:c6:fa:b4:ef:d5:a5:6d:c8:01:d2:6f:eb:96:bf:56:75:
87:b4:db:f9:c6:ae:d5:f7:2e:27:29:0e:b8:2a:31:58:88:cc:
e2:a9:a3:44:6d:1d:e2:13:f0:37:f7:79:35:f1:90:ce:7e:aa:
f4:0d:d2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:33:28 2026 by rpki-client