Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393886.roa
File: AS393886.roa (raw, json)
Hash identifier: VcL1be4w7DTk4AAkyR4QX91iJ7ZNw11oLuqQ1sft2I4=
Subject key identifier: 43:16:69:C2:92:24:1F:65:86:A2:22:30:90:79:29:21:08:33:AA:1D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 35B5A20A016A77F58D45C356226329D62CC3DF3C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393886.roa
Signing time: Tue 10 Feb 2026 10:51:40 +0000
ROA not before: Tue 10 Feb 2026 10:46:40 +0000
ROA not after: Tue 09 Feb 2027 10:51:40 +0000
asID: 393886
IP address blocks: 148.135.148.0/24 maxlen: 24
148.135.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:b5:a2:0a:01:6a:77:f5:8d:45:c3:56:22:63:29:d6:2c:c3:df:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 10 10:46:40 2026 GMT
Not After : Feb 9 10:51:40 2027 GMT
Subject: CN=431669C292241F6586A22230907929210833AA1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ed:3b:b1:32:69:68:75:bf:76:ee:63:24:1b:
77:5c:9e:c1:4b:f5:e8:c1:e0:7c:5a:7a:fb:f3:9e:
2d:62:3c:11:3b:35:12:93:73:b0:6e:84:a4:25:ec:
8e:2d:ef:88:38:02:8d:e8:37:65:61:f5:2e:25:27:
85:8c:62:17:b4:35:ca:15:c6:7b:54:49:96:2e:7a:
4b:fd:57:4e:08:ea:27:91:57:75:09:c2:dd:85:89:
c9:c1:1e:cc:3a:3d:fd:6a:40:40:22:7c:c9:e6:fd:
ce:f9:9d:40:90:2f:eb:1a:88:88:57:ed:cd:b6:0f:
8a:8d:42:96:4f:51:35:6c:19:ee:ad:b1:e7:f7:7a:
56:8d:d5:8b:4e:b6:be:fc:37:69:df:b3:ba:e5:b2:
c7:fd:20:36:1c:ef:89:69:6a:03:d8:e2:18:92:ba:
ab:26:5a:9a:c6:a5:5a:a2:17:49:78:c6:94:d1:5a:
28:27:9e:c5:58:f5:c1:cc:8b:16:cf:89:81:c6:57:
6e:39:83:cc:8e:c0:3a:ea:1c:ea:09:0b:9b:9d:c8:
d3:59:87:7c:36:ce:89:33:96:27:cc:37:64:d2:ef:
1c:c6:a2:6d:d3:e3:1b:87:e6:77:3f:48:67:15:5f:
59:4c:de:54:54:3a:a4:d9:ce:82:1f:08:70:2d:65:
06:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:16:69:C2:92:24:1F:65:86:A2:22:30:90:79:29:21:08:33:AA:1D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393886.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.148.0/24
148.135.151.0/24
Signature Algorithm: sha256WithRSAEncryption
25:63:ea:e9:d4:1b:a8:cf:fb:da:e2:a7:75:00:6d:db:aa:2d:
df:2f:4e:65:e3:13:56:21:ba:49:d6:3d:02:d3:55:f5:1c:31:
ce:9d:35:2c:e8:ec:d3:5f:5a:1a:c6:74:20:10:94:1f:32:ef:
9f:17:62:cf:73:a2:e4:e1:9f:33:6e:8f:0b:a1:c4:27:1c:14:
17:01:29:75:31:bb:41:fd:6a:a4:80:42:01:27:7a:61:3e:d9:
9d:b8:28:5e:ba:8a:ff:b7:f2:07:95:ca:a6:2e:27:a3:c4:df:
2f:3d:d7:25:c9:b6:3c:cf:f8:3a:69:2d:ed:ea:96:7f:cf:4f:
d0:93:55:f1:76:2a:53:d6:35:d1:6a:dd:4b:e8:32:5e:54:d3:
b1:fc:2b:60:6e:b4:9e:0d:1e:7e:79:de:7c:07:27:2a:d5:95:
b7:f9:ad:4d:4a:b4:0d:d2:02:1e:aa:bd:81:25:51:5b:b6:b6:
d5:11:3f:7a:49:2a:5f:76:c1:22:10:2a:9f:39:b3:9e:10:fe:
c7:13:d0:53:17:e1:04:d8:ad:bf:9c:95:d0:4b:de:86:70:5a:
79:76:c7:f1:35:ad:93:66:ba:45:1d:49:48:db:18:ec:11:83:
c0:8b:d5:7a:ba:2d:c6:c5:bc:5e:0f:bc:c9:7c:a5:07:f7:2d:
33:c0:b4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 12:16:35 2026 by rpki-client