Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397373.roa
File: AS397373.roa (raw, json)
Hash identifier: kXEpKKs+LAdmcFxMcYT+UVrOkgozQ1sObirJMLp8Xmw=
Subject key identifier: 09:F3:16:54:66:7B:29:06:00:30:13:49:B6:C0:03:E5:1F:98:73:7C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1F8AF3B0EA53EFD16542EE7EC76CD1D6470CA408
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397373.roa
Signing time: Thu 13 Aug 2026 21:28:59 +0000
ROA not before: Thu 13 Aug 2026 21:23:59 +0000
ROA not after: Thu 12 Aug 2027 21:28:59 +0000
asID: 397373
IP address blocks: 162.141.20.0/24 maxlen: 24
162.141.50.0/24 maxlen: 24
162.141.113.0/24 maxlen: 24
168.222.34.0/24 maxlen: 24
168.222.44.0/24 maxlen: 24
168.222.51.0/24 maxlen: 24
168.222.82.0/24 maxlen: 24
168.222.90.0/24 maxlen: 24
168.222.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:8a:f3:b0:ea:53:ef:d1:65:42:ee:7e:c7:6c:d1:d6:47:0c:a4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 13 21:23:59 2026 GMT
Not After : Aug 12 21:28:59 2027 GMT
Subject: CN=09F31654667B290600301349B6C003E51F98737C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ea:80:b1:dc:41:89:c9:9f:e9:f9:52:e7:f0:
11:b6:eb:e0:b7:0f:e1:ff:9e:7a:c2:4a:6a:5f:6f:
5c:93:b5:5b:1f:76:11:95:60:34:b6:09:4b:e9:20:
cc:1c:51:39:26:c9:ab:8f:64:c0:02:fb:eb:1d:8e:
e5:c8:89:75:ec:b6:b4:3f:9c:13:d5:7e:0a:c2:f6:
e3:a4:37:d8:c0:99:d1:c7:f8:ad:9f:dc:b4:2e:8b:
42:9b:f6:75:08:43:5b:2e:c4:d4:26:e9:f9:cf:e5:
32:d6:ff:c4:7d:d1:ae:9e:a7:3a:d2:5d:f1:cf:7e:
57:6d:77:c8:42:26:9a:58:14:f6:ef:fd:c4:36:ef:
70:76:d0:25:1c:d7:32:b2:fc:b3:5a:66:c6:97:4d:
7e:aa:5c:04:02:30:1c:5e:71:71:1d:1a:82:35:b7:
a7:05:03:62:f7:ea:bf:46:a6:e5:64:1f:d5:77:40:
c9:e7:ad:8f:a2:a4:f2:9a:20:a2:59:15:80:5f:4d:
be:f0:52:da:3f:90:5f:bf:98:e4:91:65:62:f6:d7:
17:14:fe:b1:a4:40:bc:54:c7:9b:3a:fb:e1:be:f0:
e7:62:96:16:c7:23:c0:e8:95:c8:e1:fd:b3:96:32:
82:2a:e4:bc:a6:69:23:3c:af:06:08:21:dd:07:aa:
7a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F3:16:54:66:7B:29:06:00:30:13:49:B6:C0:03:E5:1F:98:73:7C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397373.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.20.0/24
162.141.50.0/24
162.141.113.0/24
168.222.34.0/24
168.222.44.0/24
168.222.51.0/24
168.222.82.0/24
168.222.90.0/24
168.222.106.0/24
Signature Algorithm: sha256WithRSAEncryption
98:d6:e5:de:e4:17:22:59:01:97:e8:25:36:d7:a2:ed:0f:b0:
34:04:70:8f:e1:ee:bc:d1:1d:ce:fe:bd:a7:db:04:ac:8b:94:
12:f4:94:c0:18:4b:b1:50:d2:a5:77:be:ee:bd:4c:86:3d:88:
75:98:c3:99:43:34:05:ba:30:63:31:b5:8b:84:ae:06:cc:1e:
7a:22:0a:e3:2a:1e:f2:bb:7d:3d:0b:70:3a:4f:00:3e:5c:f3:
45:c6:5e:36:84:29:5e:00:d0:62:67:d5:f1:16:25:ff:20:de:
78:76:72:1a:ed:ec:79:b3:95:ed:b5:6b:02:ad:61:42:3a:1a:
b6:12:06:f3:df:b7:af:c9:57:38:51:63:70:74:a1:47:34:f9:
ad:f1:ed:7c:d0:ce:69:1d:3c:19:98:2d:98:5b:33:3b:f9:55:
18:5b:aa:ae:28:7f:41:d2:c4:9a:bb:0a:b9:9e:09:41:65:03:
2b:3e:31:7c:9b:75:a9:1b:08:b4:4e:a4:c9:2c:65:59:25:36:
0c:0c:93:35:53:91:89:39:11:4a:99:34:31:58:e1:d7:aa:7f:
77:7f:a9:a9:bf:ac:60:ff:3a:ec:08:ae:88:6c:e8:b2:b6:8a:
63:fc:bd:70:b3:4f:c1:b4:49:64:6e:11:61:cf:a7:ae:e0:a9:
e4:09:54:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:41 2026 by rpki-client