Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397423.roa
File: AS397423.roa (raw, json)
Hash identifier: 04wGFu+eMXaylNxFJRL5GLTpFvx6UwDDAKashnptKPI=
Subject key identifier: 11:E1:14:A9:30:AA:F6:0F:63:DF:52:F9:F3:75:DF:9C:BD:24:41:8B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7D70964F24BC5199317FE65802D05D70DA3302D4
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397423.roa
Signing time: Sun 16 Aug 2026 05:10:36 +0000
ROA not before: Sun 16 Aug 2026 05:05:36 +0000
ROA not after: Sun 15 Aug 2027 05:10:36 +0000
asID: 397423
IP address blocks: 143.14.180.0/24 maxlen: 24
145.223.44.0/24 maxlen: 24
145.223.54.0/24 maxlen: 24
145.223.58.0/24 maxlen: 24
146.103.5.0/24 maxlen: 24
150.241.226.0/23 maxlen: 24
155.117.164.0/24 maxlen: 24
155.117.246.0/24 maxlen: 24
162.141.124.0/24 maxlen: 24
162.141.127.0/24 maxlen: 24
167.148.15.0/24 maxlen: 24
167.148.158.0/24 maxlen: 24
167.148.175.0/24 maxlen: 24
167.148.217.0/24 maxlen: 24
167.148.219.0/24 maxlen: 24
168.222.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:70:96:4f:24:bc:51:99:31:7f:e6:58:02:d0:5d:70:da:33:02:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 16 05:05:36 2026 GMT
Not After : Aug 15 05:10:36 2027 GMT
Subject: CN=11E114A930AAF60F63DF52F9F375DF9CBD24418B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:03:a7:75:fa:82:96:08:77:ef:9f:c8:f8:99:
2c:f3:30:2e:a9:0d:ab:ad:7f:41:9f:7d:1e:49:1a:
10:0f:1e:e4:be:75:0f:70:18:3b:80:ef:b3:d0:47:
e3:25:3a:88:df:d0:8c:ed:60:02:e0:13:bc:01:bf:
be:28:45:6d:0a:b1:23:06:1f:c2:7d:72:9c:46:9c:
18:0f:f8:7c:b5:8f:38:4f:bd:24:49:68:e3:66:8a:
20:d8:50:0e:ca:f0:ed:c8:e3:6a:83:e4:60:fa:78:
7c:77:2d:02:fb:9c:ba:8a:bd:a3:3b:df:cd:2c:99:
fe:bc:40:97:70:8f:2d:0c:78:51:12:db:d9:dd:9f:
2b:1a:54:53:bb:84:6e:cb:13:a6:96:0a:be:a2:40:
ad:23:03:8a:80:3f:b2:d9:0d:81:bf:78:8d:80:e6:
1a:83:7f:a5:ae:a2:75:8e:59:a1:d4:3a:e2:5c:17:
69:39:21:48:8e:37:58:5a:36:fc:fe:52:2c:d8:cd:
ed:0b:ed:2a:0d:84:16:0c:f4:e6:4f:5a:4f:a4:61:
d3:c1:e1:44:9e:0d:14:71:ec:97:fd:cd:d5:4e:03:
1c:bf:a2:ca:4b:1d:04:2a:9a:28:7b:46:c2:91:8a:
10:18:e5:8d:45:df:e4:8b:11:7e:f5:0a:ee:85:0b:
6b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E1:14:A9:30:AA:F6:0F:63:DF:52:F9:F3:75:DF:9C:BD:24:41:8B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397423.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.180.0/24
145.223.44.0/24
145.223.54.0/24
145.223.58.0/24
146.103.5.0/24
150.241.226.0/23
155.117.164.0/24
155.117.246.0/24
162.141.124.0/24
162.141.127.0/24
167.148.15.0/24
167.148.158.0/24
167.148.175.0/24
167.148.217.0/24
167.148.219.0/24
168.222.50.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:c1:f0:1c:f4:e3:15:1a:f7:d4:7a:f6:7a:1a:69:91:e1:b9:
f6:02:17:9a:8c:07:5a:4c:33:64:23:99:13:0c:31:d1:72:5f:
a2:8c:0c:44:7d:60:f0:76:df:cb:19:2e:cf:a8:20:ea:19:b4:
07:76:f2:50:04:21:34:0d:0e:6a:82:aa:48:70:83:63:c4:5c:
53:80:25:94:d7:51:64:dc:c5:e9:42:55:7d:ea:7b:f1:92:f3:
3b:bd:e2:fa:8e:1b:8c:e9:38:54:01:f6:3f:a8:37:6e:cd:cf:
38:07:3b:df:e5:22:b6:0c:a1:09:78:5b:88:c3:9c:3f:11:c8:
a7:a1:76:2e:79:33:fc:c8:13:e9:79:3c:53:0a:69:98:e2:dd:
f8:84:29:ed:d3:c2:d3:7c:9a:4f:de:06:6b:7a:60:0b:55:67:
76:33:be:5b:dc:72:2f:61:4f:c4:8e:06:60:6e:b8:d0:13:d7:
37:a8:0a:0b:b8:42:49:a2:24:e6:2d:0f:95:5e:76:f1:e4:7a:
02:90:bf:57:5a:9b:93:a6:b7:ff:65:89:33:f1:8a:0e:75:88:
65:fe:35:9d:d8:71:a1:ee:a5:2f:e8:f2:6d:e1:04:2d:70:72:
78:d9:54:12:96:69:64:9a:cf:b4:1e:97:4e:39:8f:23:59:c5:
f9:aa:fa:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 06:45:04 2026 by rpki-client