Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393446.roa
File: AS393446.roa (raw, json)
Hash identifier: csgSTq1+qBOFs2MWZwL2iVZxhWCgbTqkp8tFchKH2AA=
Subject key identifier: D7:04:95:20:86:81:8C:5F:54:26:B1:EA:2A:D0:2B:7A:7A:CE:36:26
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2EF67716450AF1A40E93BB686B1481D60B0FAA8D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393446.roa
Signing time: Wed 07 Oct 2026 02:49:35 +0000
ROA not before: Wed 07 Oct 2026 02:44:35 +0000
ROA not after: Wed 06 Oct 2027 02:49:35 +0000
asID: 393446
IP address blocks: 155.117.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 10:56:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:f6:77:16:45:0a:f1:a4:0e:93:bb:68:6b:14:81:d6:0b:0f:aa:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 7 02:44:35 2026 GMT
Not After : Oct 6 02:49:35 2027 GMT
Subject: CN=D704952086818C5F5426B1EA2AD02B7A7ACE3626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:67:9a:00:02:3b:a6:f7:12:04:ac:3c:93:11:
2b:5a:9e:a4:c4:8d:c5:7f:4b:1d:34:09:3b:de:df:
13:f2:8b:6d:83:46:2f:14:77:e9:30:44:4e:6c:db:
fa:17:07:bc:21:4f:cb:47:3b:d5:b6:3f:50:41:e9:
d2:a0:1f:98:f7:9c:07:0d:68:09:23:92:54:2a:8a:
3d:9d:fa:ad:e9:18:fe:63:c6:06:eb:79:1d:68:46:
b5:cc:77:8f:5a:09:55:c9:ba:03:80:e0:5b:49:3d:
e6:67:43:ed:35:bf:d2:b3:aa:41:8e:29:df:50:f9:
9c:5b:be:48:1c:77:d3:91:85:e2:0d:21:6e:7f:fc:
88:eb:a3:ca:9e:07:92:9a:63:72:72:1a:ea:e8:ea:
8c:6e:ef:66:e6:dc:f9:f0:02:ea:c5:bd:80:57:a5:
95:69:d0:1a:77:6c:6d:e2:8a:bb:24:40:e9:ff:b9:
a2:92:02:bc:f3:80:df:2f:f5:ec:3e:28:d6:3f:42:
07:58:03:ab:10:c3:65:a6:01:17:85:b1:dd:97:69:
b7:d2:48:49:64:46:36:de:e0:af:00:40:4b:3d:cc:
55:e8:36:ee:5c:1f:a2:a7:eb:b5:11:a6:5f:9a:f3:
ed:8f:f9:fd:72:cf:7c:10:88:a8:22:83:92:df:68:
65:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:04:95:20:86:81:8C:5F:54:26:B1:EA:2A:D0:2B:7A:7A:CE:36:26
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393446.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.34.0/24
Signature Algorithm: sha256WithRSAEncryption
90:63:37:07:4b:59:f6:05:8d:ce:9f:f2:29:52:f7:c0:94:7d:
00:e8:f8:54:3e:fb:63:db:1e:5a:8c:2a:f0:98:2d:b9:d5:e2:
02:6b:8f:84:bb:a2:12:35:71:50:4d:c7:a7:95:15:c8:7e:2f:
90:5d:87:0f:8b:90:5d:04:09:d6:dd:ee:89:e6:63:42:03:2b:
39:79:80:db:9b:53:e2:09:cd:12:88:d6:31:1b:64:e7:89:cd:
02:d7:dd:2b:db:f5:c0:ca:25:ae:ea:f0:02:b6:29:46:9d:60:
84:aa:03:94:c3:e9:6d:91:0e:92:ef:0a:06:ef:2b:b1:ab:0e:
af:a8:c2:85:e8:45:bf:25:9d:a5:c4:d0:ed:2f:1a:31:ef:99:
28:a0:d0:11:26:fb:80:2b:59:02:26:69:6d:30:3f:d6:83:7a:
ba:1a:b5:db:65:d5:5b:a9:46:07:42:7f:58:42:d2:a2:38:ce:
9b:05:fc:d8:58:4a:c1:9f:8b:84:7f:f4:b2:7d:f1:d8:cb:d1:
f0:f7:de:4d:f3:40:45:29:b6:aa:5a:96:fb:05:44:19:f0:bb:
16:fc:c3:9d:1f:0e:7a:8f:fa:41:58:bc:e6:e2:43:01:92:4f:
c3:18:f4:3e:2a:04:cc:36:57:16:d3:7a:9e:83:45:af:51:e2:
b6:de:50:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 23:48:17 2026 by rpki-client