Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS398256.roa
File: AS398256.roa (raw, json)
Hash identifier: kJuuZhZZvVaOrg3IpTqZmUKgN0jWjPNiBgTWDMSyrJE=
Subject key identifier: 1F:06:1F:46:13:6E:61:2F:59:3D:95:65:DE:3F:C6:52:7C:FC:8C:B7
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5D06B36794891556AE7A9E7499FC14AE71394B37
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS398256.roa
Signing time: Sat 29 Aug 2026 13:07:57 +0000
ROA not before: Sat 29 Aug 2026 13:02:57 +0000
ROA not after: Sat 28 Aug 2027 13:07:57 +0000
asID: 398256
IP address blocks: 96.62.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:06:b3:67:94:89:15:56:ae:7a:9e:74:99:fc:14:ae:71:39:4b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 29 13:02:57 2026 GMT
Not After : Aug 28 13:07:57 2027 GMT
Subject: CN=1F061F46136E612F593D9565DE3FC6527CFC8CB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ab:d0:8b:02:9c:b0:87:d5:d2:5b:82:6e:69:
e7:09:4c:41:17:74:f6:4c:7e:81:17:53:4b:c3:24:
ec:ab:32:36:42:00:62:6c:74:d3:54:85:77:2c:fc:
2d:41:7b:f2:fb:4f:55:1f:2f:49:e9:8c:cf:2d:1f:
29:ab:c0:cd:5d:f5:70:6e:dc:7f:bc:ce:34:72:13:
75:a6:b3:c7:d3:cd:ef:13:d0:a6:12:81:5b:97:5d:
25:78:54:8a:81:5c:16:47:e7:a2:d4:c4:07:4c:79:
36:18:e9:36:28:04:a9:8f:7f:a3:33:a7:51:2b:03:
27:d4:36:d9:61:2b:5c:14:f5:3d:bd:3b:fb:f8:76:
82:7d:33:3f:de:8a:99:16:ef:5b:57:5e:1c:d0:f0:
3c:cd:61:f3:7a:3c:df:5e:c9:83:a2:ae:c2:b1:28:
c7:ac:b6:49:d9:e9:5f:50:0e:67:ce:74:bd:af:76:
ea:30:cb:28:59:0c:b3:65:5d:7b:ed:c8:7b:d7:17:
4a:6c:1c:0c:09:2c:cd:07:26:81:fe:a3:25:7a:d9:
12:cd:b7:cb:f5:53:00:ec:b4:5d:31:1f:da:32:a9:
87:fd:0d:42:3e:00:93:31:ed:3b:86:e8:0e:c7:1a:
45:97:7d:b6:68:0c:b1:46:80:00:c5:e1:c4:37:07:
4e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:06:1F:46:13:6E:61:2F:59:3D:95:65:DE:3F:C6:52:7C:FC:8C:B7
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS398256.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.77.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:cf:bb:e5:ff:c8:db:08:db:72:47:9c:14:19:c2:fa:11:a3:
21:c3:29:c0:93:cd:38:c0:7e:c7:49:fb:b7:e7:fc:71:25:f3:
80:5c:d4:46:ee:dc:af:59:3a:45:7c:9f:91:29:7f:4c:e3:6c:
27:08:24:1a:b5:4e:6d:65:a8:6b:e2:8e:84:d2:ed:e5:49:42:
00:a4:1c:13:5c:4e:be:8e:c6:5c:d1:69:e3:b4:af:be:19:dd:
94:a3:63:b3:7f:5c:0e:d5:05:db:34:39:bf:43:bf:a0:bc:4a:
28:ec:bc:f7:0c:8e:7a:db:65:56:6a:92:60:0e:6b:ac:64:d4:
ec:2a:9b:7e:fb:b3:01:b1:66:70:54:7b:76:92:f7:5f:6f:f0:
dd:fc:65:b2:b8:08:66:1d:2f:0e:c2:ef:93:74:46:cb:3f:31:
a5:07:ca:99:38:bb:b9:25:82:a2:57:2c:88:7a:04:39:0c:3e:
1e:5b:ad:b7:96:ca:ea:3f:ea:3a:a3:09:3a:1b:73:ab:06:2a:
42:cd:5b:65:d8:80:a3:a3:c8:47:38:3d:17:8e:fa:dd:22:db:
38:6f:a0:49:c3:b5:43:ee:e7:87:1a:be:ea:07:c9:2e:10:93:
75:66:82:6f:3b:5b:69:48:c0:8b:4c:4c:c7:69:36:3d:4f:d6:
5b:e0:13:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 07:12:22 2026 by rpki-client