Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397630.roa
File: AS397630.roa (raw, json)
Hash identifier: 1iq5rolLwRp2X7Us9Ef0bUGCnJ89UBtPVLIR+Fthz+Q=
Subject key identifier: 5F:EE:57:B7:EF:E6:A1:FD:2B:D6:A1:61:E3:5D:7D:92:5D:E4:BC:E9
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 57DCF068E361058808E942BED377AD04D1BBB3C8
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397630.roa
Signing time: Fri 22 May 2026 06:37:56 +0000
ROA not before: Fri 22 May 2026 06:32:56 +0000
ROA not after: Fri 21 May 2027 06:37:56 +0000
asID: 397630
IP address blocks: 143.14.188.0/24 maxlen: 24
150.241.136.0/24 maxlen: 24
150.241.174.0/24 maxlen: 24
150.241.234.0/24 maxlen: 24
155.117.81.0/24 maxlen: 24
162.141.48.0/24 maxlen: 24
162.141.116.0/24 maxlen: 24
162.141.138.0/24 maxlen: 24
167.148.136.0/24 maxlen: 24
167.148.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:dc:f0:68:e3:61:05:88:08:e9:42:be:d3:77:ad:04:d1:bb:b3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 22 06:32:56 2026 GMT
Not After : May 21 06:37:56 2027 GMT
Subject: CN=5FEE57B7EFE6A1FD2BD6A161E35D7D925DE4BCE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5e:59:e2:df:83:88:ee:e3:9b:f7:43:69:21:
10:f1:d8:17:d7:ac:c6:c7:ba:5d:97:3d:55:90:05:
16:f2:ca:f0:35:c5:36:d2:1d:4d:10:53:06:ca:fd:
a3:d2:23:35:18:4f:eb:c8:c3:47:c9:e9:5d:22:f8:
a5:f5:8d:d2:11:bc:cb:2e:ed:24:96:c4:b9:9e:ba:
03:f3:65:82:c9:3e:12:6b:cd:19:c9:bb:8f:7f:e5:
18:2e:c1:be:b7:be:9f:e4:7a:ac:a5:96:32:af:64:
b6:36:4e:91:18:e4:1b:2f:ee:83:a8:de:ff:71:b7:
d6:f7:0b:aa:e2:c6:1c:32:9e:94:db:43:01:6f:bc:
9e:cd:ea:c7:7d:84:09:3a:28:0d:2c:a4:fb:87:6f:
d9:c0:37:8a:a3:76:21:e8:1b:b1:45:e2:40:82:e8:
26:c3:89:ca:6f:03:b3:21:7d:7b:49:71:9e:65:be:
37:29:ae:26:19:f2:2c:2c:8b:bb:6a:70:b8:e3:fc:
a3:3f:44:e8:75:3d:bb:41:60:7a:6b:9e:c7:b2:c0:
46:9f:5e:9c:26:65:b0:da:05:a0:20:d4:e8:81:1f:
10:da:dd:12:1e:1d:f5:e1:c6:dd:fd:6d:26:b7:6a:
0e:9a:2a:59:38:a3:d7:91:2b:0b:3f:78:fd:78:7a:
36:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EE:57:B7:EF:E6:A1:FD:2B:D6:A1:61:E3:5D:7D:92:5D:E4:BC:E9
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.188.0/24
150.241.136.0/24
150.241.174.0/24
150.241.234.0/24
155.117.81.0/24
162.141.48.0/24
162.141.116.0/24
162.141.138.0/24
167.148.136.0/24
167.148.162.0/24
Signature Algorithm: sha256WithRSAEncryption
33:f2:69:fe:8d:43:2d:ef:fc:29:f9:ac:ff:45:60:98:dc:fe:
99:55:71:a6:a0:2a:22:52:fd:a8:ad:b9:32:35:88:03:4f:91:
2e:b1:c6:cc:eb:45:e6:d4:78:ff:65:72:26:5d:44:d2:1d:90:
d1:dd:04:2a:f0:97:1a:e8:83:d7:c3:2c:17:c4:0d:85:b8:9d:
5b:01:1f:44:c3:05:92:ae:1c:c8:18:8c:c9:66:27:96:7f:ef:
47:b6:fc:06:7a:72:ff:08:24:5a:02:ba:5b:0b:a3:ff:c7:61:
6b:25:67:5b:92:70:41:c1:cc:6e:17:d2:c4:9a:bb:36:6a:26:
2a:ef:8d:e3:b0:e9:cf:2c:ce:35:b9:a3:32:ee:1f:df:37:a7:
fa:72:13:75:31:5c:f7:e3:e8:47:85:e2:64:94:53:df:65:69:
32:f8:bf:fa:18:ba:58:f5:4b:e2:35:e3:f8:0d:1d:8d:4e:3b:
b3:d9:4d:80:5b:81:4e:aa:c8:b6:5a:a1:dd:69:27:5f:6b:87:
a3:2e:7f:25:03:b3:d4:1e:3d:67:f4:ce:48:6f:50:b6:40:e6:
d8:84:67:47:af:8b:c0:bd:ef:9f:23:b2:ef:f5:4f:9d:9c:72:
15:04:f9:5d:1c:20:89:4d:43:e7:82:55:4e:a6:36:83:3f:f7:
64:15:6a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:17:05 2026 by rpki-client