Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS15440.roa
File: AS15440.roa (raw, json)
Hash identifier: dLDD8ZqxQeemT11eZ8bGLJN2dcHTWPLMHDAPG7dg61Y=
Subject key identifier: BD:BA:CF:1C:F3:B9:59:F3:DB:FE:AA:E2:B8:52:EC:36:4F:AC:23:DF
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 43036561E048A734BE1E80634EECDE5863C1D43B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS15440.roa
Signing time: Wed 07 Oct 2026 08:36:33 +0000
ROA not before: Wed 07 Oct 2026 08:31:33 +0000
ROA not after: Wed 06 Oct 2027 08:36:33 +0000
asID: 15440
IP address blocks: 146.103.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:03:65:61:e0:48:a7:34:be:1e:80:63:4e:ec:de:58:63:c1:d4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 7 08:31:33 2026 GMT
Not After : Oct 6 08:36:33 2027 GMT
Subject: CN=BDBACF1CF3B959F3DBFEAAE2B852EC364FAC23DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ed:62:64:37:13:63:bc:aa:ff:d0:78:b4:d1:
27:84:07:b0:71:91:89:93:f4:43:81:0f:ca:aa:cd:
ab:98:ef:f8:7b:be:69:b4:27:b8:c0:a5:2b:9d:12:
6b:f5:4f:75:0c:ab:37:a4:71:68:6f:c4:3d:c7:50:
a6:65:44:33:f9:77:0d:29:f7:ea:4c:02:f6:43:41:
23:fb:38:e9:b3:bf:87:73:4b:25:ea:b7:71:3a:50:
ca:3b:58:1b:7e:8b:a0:50:c9:72:ba:95:3e:c4:91:
e9:46:ee:39:9b:b9:64:be:ca:8d:ec:ee:3d:49:95:
bd:33:6a:e5:1d:5a:46:7f:43:16:c8:36:1f:4c:bb:
70:39:37:2c:5c:99:ee:a0:c5:1f:3b:e9:f6:3b:7b:
cc:1f:8c:38:96:19:e2:07:34:96:2e:1a:87:47:b9:
46:7c:65:9d:25:f9:77:73:bc:dd:83:86:8e:e9:2d:
da:32:80:a8:d3:b4:c4:38:5a:4d:3f:3d:8b:9f:c5:
b0:fd:43:a0:97:9f:0c:50:ee:4b:91:cb:14:64:a7:
32:f0:4d:f2:1c:24:23:e8:fe:cb:7d:5a:0a:d9:7a:
45:b1:76:87:b1:7c:ba:7a:15:3d:b4:15:ff:da:11:
43:5c:33:02:1f:a6:45:70:84:6b:82:ea:4e:6b:8b:
b9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BA:CF:1C:F3:B9:59:F3:DB:FE:AA:E2:B8:52:EC:36:4F:AC:23:DF
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS15440.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.38.0/24
Signature Algorithm: sha256WithRSAEncryption
70:47:d7:50:be:ba:54:dc:ba:04:2f:dc:94:e9:d0:b7:ea:dd:
f4:6e:5a:ee:cb:8e:ea:0f:35:c4:bd:7f:7a:4a:d6:15:b8:93:
e2:c3:24:79:0f:6e:fe:da:bf:4c:d7:9a:ba:b2:b0:9a:ab:c8:
c4:5d:c0:05:94:de:a0:21:aa:45:2a:a9:5e:5a:2c:7d:ca:e9:
77:87:3f:d4:01:72:9c:21:2b:49:d5:35:04:08:1f:0c:0a:8c:
9d:ec:64:b2:52:a7:52:33:db:88:74:00:14:39:c3:14:f1:28:
73:83:08:9b:ad:85:0d:47:b0:d6:34:48:bf:3e:0d:fd:21:2f:
1f:32:90:8d:d6:df:45:05:dd:70:f9:cd:04:b4:b0:87:bf:6c:
cb:fd:e4:08:13:8d:89:2b:13:e9:3f:1b:d9:0c:c6:4c:1f:0c:
1d:36:5b:92:ef:50:6f:2d:ab:ae:0b:94:b2:84:d9:0d:02:e2:
57:76:51:c5:f1:76:bd:bc:58:03:52:df:b8:5c:d6:75:af:29:
30:f7:03:2e:79:f5:3e:7b:3e:29:eb:f6:73:a4:e3:c3:87:05:
d5:83:2f:98:88:e7:ec:d8:73:07:f8:bd:47:54:f3:6c:bf:3d:
4e:a3:1b:a9:ef:f2:1d:1a:66:1f:79:89:d5:9b:2c:60:2d:e1:
2e:cd:88:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:06:54 2026 by rpki-client