Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS395839.roa
File: AS395839.roa (raw, json)
Hash identifier: pbkRucURmaVd6mNSfCSlmar6A0s9NN0KnSKd2LSQ2vw=
Subject key identifier: E7:73:7F:D6:25:FC:40:79:CA:C2:CE:0F:E2:15:5A:FF:28:94:5B:12
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 27287B83E96F68FBE1FBA9CC7776800C7C058C9F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS395839.roa
Signing time: Wed 26 Aug 2026 16:10:44 +0000
ROA not before: Wed 26 Aug 2026 16:05:44 +0000
ROA not after: Wed 25 Aug 2027 16:10:44 +0000
asID: 395839
IP address blocks: 162.141.78.0/24 maxlen: 24
162.141.123.0/24 maxlen: 24
167.148.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:28:7b:83:e9:6f:68:fb:e1:fb:a9:cc:77:76:80:0c:7c:05:8c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 26 16:05:44 2026 GMT
Not After : Aug 25 16:10:44 2027 GMT
Subject: CN=E7737FD625FC4079CAC2CE0FE2155AFF28945B12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3f:4f:00:c9:b6:d5:df:72:98:a9:7e:d6:79:
77:6b:e9:b1:77:93:79:7a:6c:7d:e9:c6:dd:87:dc:
ef:7c:1a:b3:65:8a:1e:1c:c4:aa:e5:86:2d:a5:ad:
2f:0f:57:6b:55:0a:78:d5:3a:51:14:7c:0d:30:d6:
ef:0e:ae:30:41:6d:9c:ff:84:36:36:31:aa:03:d3:
1e:55:fc:ab:ac:4f:83:e9:44:5f:fa:81:b4:c5:50:
22:47:85:f2:30:f7:a7:b3:30:10:2d:c5:e3:a6:e5:
58:94:62:27:b5:c1:04:cf:c9:5a:ad:ab:f3:5a:91:
29:53:4c:9d:f5:a3:a1:e6:7b:d6:d9:ec:55:db:14:
a8:46:71:26:20:8c:a3:89:5b:dc:3c:ef:c2:65:0d:
01:0a:c0:43:ff:86:8c:2e:1a:b5:93:88:e9:11:8f:
de:ac:6e:d2:75:6b:7e:0d:5a:85:74:53:41:14:1d:
bb:d0:3e:36:ca:b4:fc:e1:58:11:27:e0:2b:2f:95:
df:09:7a:4c:fd:a2:89:df:16:ad:8d:e4:ba:e1:e7:
92:59:2a:c9:56:d4:77:a2:a0:48:b8:61:80:d9:42:
64:4b:8d:f7:83:37:5a:bb:dc:e6:26:0e:3d:b7:23:
c5:b7:f4:0f:41:88:30:be:91:ae:91:5f:c7:92:b5:
32:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:73:7F:D6:25:FC:40:79:CA:C2:CE:0F:E2:15:5A:FF:28:94:5B:12
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS395839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.78.0/24
162.141.123.0/24
167.148.170.0/24
Signature Algorithm: sha256WithRSAEncryption
06:e0:90:57:4a:f7:f8:b0:83:bd:97:c7:6a:37:9f:44:d5:ae:
62:22:9f:5a:5b:cb:fa:23:9e:f0:4e:a3:7b:4c:e1:c7:ef:5a:
89:ff:0f:28:b7:3b:e8:1f:78:9e:df:f1:9a:56:3b:bb:5d:fd:
be:3e:03:dc:ac:02:91:dc:d5:48:16:4d:42:6f:f7:ad:95:45:
5b:f2:db:72:47:22:70:2e:6a:0e:37:51:a9:71:33:27:0e:49:
fe:ce:32:de:84:ee:3f:9a:90:42:df:83:60:af:49:b8:3d:73:
f8:9d:de:ac:33:f4:d8:7a:83:b7:c2:a4:a8:47:42:0b:59:1e:
1a:cf:df:11:84:0f:02:23:48:72:9b:0f:39:8e:ce:85:b9:14:
fb:4a:17:e8:fe:63:38:41:15:54:ee:9b:2c:ef:a0:28:69:f5:
13:00:12:ea:f3:40:b1:01:75:2b:ae:13:79:0c:a9:14:06:6f:
38:2a:e1:cb:64:01:fa:b7:5f:cd:b7:c8:5d:66:c4:4c:31:1b:
83:22:f7:27:e6:c2:a8:f0:6f:fe:f4:5f:e1:76:cb:81:e2:c3:
dc:2e:43:1f:58:44:5d:f9:71:ff:89:9d:b6:6a:73:50:99:b4:
b6:00:0c:67:40:8d:8a:66:dc:85:66:d6:36:83:b4:fb:be:db:
0f:23:1a:ad
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUJyh7g+lvaPvh+6nMd3aADHwFjJ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA4MjYxNjA1NDRaFw0yNzA4MjUxNjEwNDRaMDMxMTAvBgNV
BAMTKEU3NzM3RkQ2MjVGQzQwNzlDQUMyQ0UwRkUyMTU1QUZGMjg5NDVCMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKP08AybbV33KYqX7WeXdr6bF3
k3l6bH3pxt2H3O98GrNlih4cxKrlhi2lrS8PV2tVCnjVOlEUfA0w1u8OrjBBbZz/
hDY2MaoD0x5V/KusT4PpRF/6gbTFUCJHhfIw96ezMBAtxeOm5ViUYie1wQTPyVqt
q/NakSlTTJ31o6Hme9bZ7FXbFKhGcSYgjKOJW9w878JlDQEKwEP/howuGrWTiOkR
j96sbtJ1a34NWoV0U0EUHbvQPjbKtPzhWBEn4Csvld8Jekz9oonfFq2N5Lrh55JZ
KslW1HeioEi4YYDZQmRLjfeDN1q73OYmDj23I8W39A9BiDC+ka6RX8eStTJpAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQU53N/1iX8QHnKws4P4hVa/yiUWxIwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMzk1ODM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAoo1O
AwQAoo17AwQAp5SqMA0GCSqGSIb3DQEBCwUAA4IBAQAG4JBXSvf4sIO9l8dqN59E
1a5iIp9aW8v6I57wTqN7TOHH71qJ/w8otzvoH3ie3/GaVju7Xf2+PgPcrAKR3NVI
Fk1Cb/etlUVb8ttyRyJwLmoON1GpcTMnDkn+zjLehO4/mpBC34Ngr0m4PXP4nd6s
M/TYeoO3wqSoR0ILWR4az98RhA8CI0hymw85js6FuRT7Shfo/mM4QRVU7pss76Ao
afUTABLq80CxAXUrrhN5DKkUBm84KuHLZAH6t1/Nt8hdZsRMMRuDIvcn5sKo8G/+
9F/hdsuB4sPcLkMfWERd+XH/iZ22anNQmbS2AAxnQI2KZtyFZtY2g7T7vtsPIxqt
-----END CERTIFICATE-----
Generated at Sun Sep 13 07:09:18 2026 by rpki-client