Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS396982.roa
File: AS396982.roa (raw, json)
Hash identifier: JFqdy1YlMwVaQBUlhK1bnwMLrtbo9/j+ndcPUKQk5dc=
Subject key identifier: 1B:3E:D6:76:3B:81:7C:EC:DC:F7:FE:67:82:12:F8:A8:C9:A1:4F:45
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 58369F387ADEA6592276AE19D71122E948E04832
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS396982.roa
Signing time: Mon 29 Jun 2026 15:14:33 +0000
ROA not before: Mon 29 Jun 2026 15:09:33 +0000
ROA not after: Mon 28 Jun 2027 15:14:33 +0000
asID: 396982
IP address blocks: 145.223.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:36:9f:38:7a:de:a6:59:22:76:ae:19:d7:11:22:e9:48:e0:48:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 29 15:09:33 2026 GMT
Not After : Jun 28 15:14:33 2027 GMT
Subject: CN=1B3ED6763B817CECDCF7FE678212F8A8C9A14F45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:08:7a:8e:61:8e:db:bd:72:44:c3:4f:ae:7d:
b8:dd:fe:88:cc:b1:59:47:67:2f:85:a7:51:04:fe:
99:d3:72:bc:28:b8:bb:12:89:65:7d:2a:bf:6d:65:
e9:f0:8e:06:70:9c:00:e0:60:cd:ee:12:71:0f:63:
64:a9:8c:b9:4b:3b:44:ca:1e:48:f9:9d:11:05:69:
bb:26:d1:94:25:a4:da:c4:f1:50:4a:5b:cb:45:05:
f3:81:d6:15:6c:ef:7c:33:dc:0f:4d:44:71:cb:12:
1d:94:3d:1f:3f:35:53:0d:da:84:d1:fd:fc:41:70:
63:ac:bf:90:83:e9:77:fa:17:d0:2c:39:5f:ff:e4:
e7:e2:53:d5:93:06:e1:bf:60:64:83:20:c4:fc:29:
e7:34:b4:52:96:3d:0d:8f:40:49:de:ec:97:a7:69:
be:c0:76:fc:2a:72:ea:b0:28:c2:f3:ff:a7:79:cb:
62:f7:9a:7d:4a:78:16:6d:28:7f:7a:7d:dd:39:a1:
fe:75:78:36:ea:a6:c1:38:d1:88:73:10:be:a6:a5:
30:d8:ff:9c:ec:84:f7:f3:93:ea:93:be:43:42:8e:
e0:42:aa:be:63:2d:30:02:db:50:6e:9e:95:15:f5:
b4:0b:13:f8:01:82:a3:87:b3:03:62:8b:67:9c:d8:
d3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3E:D6:76:3B:81:7C:EC:DC:F7:FE:67:82:12:F8:A8:C9:A1:4F:45
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS396982.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.223.66.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:d3:41:b2:94:b6:30:d5:bd:85:fa:08:4b:2d:de:e9:4e:fc:
9f:8e:18:69:43:83:fd:b6:12:60:6d:18:32:7c:1d:4f:b1:8c:
c3:3f:fa:a0:ac:44:c8:94:e6:1d:5c:f3:a1:d7:a9:de:f0:ca:
9c:c7:8a:84:a0:3c:bf:f5:18:15:2a:7b:9c:83:cd:75:df:b6:
43:81:2a:f5:62:8e:f9:c4:16:f9:29:fe:0b:bb:65:53:d8:ac:
6f:2f:63:fa:51:50:d9:26:fb:9b:8d:d2:09:c0:2f:f8:7f:c8:
af:ad:fb:9a:41:1c:7e:8a:77:d7:ba:67:1b:52:21:33:96:1c:
bb:95:f4:ec:4d:4e:ea:8c:5d:48:29:81:15:9c:a7:cb:e5:ad:
dd:b7:bc:8e:2e:80:f7:6c:e8:58:f4:94:1e:82:b9:0b:31:50:
05:3e:d5:4a:5e:20:43:45:40:92:7e:aa:9a:16:24:9e:aa:26:
45:af:c7:03:3b:10:60:eb:b0:07:c1:46:b1:fa:64:45:f4:92:
db:38:d2:21:b9:97:61:cd:f1:ff:69:04:1a:c0:38:7c:47:8b:
8a:de:5d:06:3b:21:6c:07:d9:1e:dc:78:1c:d3:be:56:ea:62:
77:44:0a:7f:30:17:55:95:f8:a4:76:7b:ae:5a:e3:c6:de:fd:
dc:02:2d:0d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUWDafOHreplkidq4Z1xEi6UjgSDIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA2MjkxNTA5MzNaFw0yNzA2MjgxNTE0MzNaMDMxMTAvBgNV
BAMTKDFCM0VENjc2M0I4MTdDRUNEQ0Y3RkU2NzgyMTJGOEE4QzlBMTRGNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTCHqOYY7bvXJEw0+ufbjd/ojM
sVlHZy+Fp1EE/pnTcrwouLsSiWV9Kr9tZenwjgZwnADgYM3uEnEPY2SpjLlLO0TK
Hkj5nREFabsm0ZQlpNrE8VBKW8tFBfOB1hVs73wz3A9NRHHLEh2UPR8/NVMN2oTR
/fxBcGOsv5CD6Xf6F9AsOV//5OfiU9WTBuG/YGSDIMT8Kec0tFKWPQ2PQEne7Jen
ab7AdvwqcuqwKMLz/6d5y2L3mn1KeBZtKH96fd05of51eDbqpsE40YhzEL6mpTDY
/5zshPfzk+qTvkNCjuBCqr5jLTAC21BunpUV9bQLE/gBgqOHswNii2ec2NM/AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUGz7WdjuBfOzc9/5nghL4qMmhT0UwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMzk2OTgyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkd9C
MA0GCSqGSIb3DQEBCwUAA4IBAQAv00GylLYw1b2F+ghLLd7pTvyfjhhpQ4P9thJg
bRgyfB1PsYzDP/qgrETIlOYdXPOh16ne8Mqcx4qEoDy/9RgVKnucg81137ZDgSr1
Yo75xBb5Kf4Lu2VT2KxvL2P6UVDZJvubjdIJwC/4f8ivrfuaQRx+infXumcbUiEz
lhy7lfTsTU7qjF1IKYEVnKfL5a3dt7yOLoD3bOhY9JQegrkLMVAFPtVKXiBDRUCS
fqqaFiSeqiZFr8cDOxBg67AHwUax+mRF9JLbONIhuZdhzfH/aQQawDh8R4uK3l0G
OyFsB9ke3Hgc075W6mJ3RAp/MBdVlfikdnuuWuPG3v3cAi0N
-----END CERTIFICATE-----
Generated at Wed Jul 8 17:33:39 2026 by rpki-client