Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399359.roa
File: AS399359.roa (raw, json)
Hash identifier: XUV9J+AY6b1y9TBbktcXbO7XwtnRebjX/ZzY7edc4U4=
Subject key identifier: 53:6B:91:30:CA:A8:48:6C:0E:B3:AE:76:AF:79:16:D2:46:A3:18:82
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6891C23F101B1E268381E6979C149C1FFC384833
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399359.roa
Signing time: Tue 11 Aug 2026 04:58:39 +0000
ROA not before: Tue 11 Aug 2026 04:53:39 +0000
ROA not after: Tue 10 Aug 2027 04:58:39 +0000
asID: 399359
IP address blocks: 155.117.97.0/24 maxlen: 24
155.117.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 22:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:91:c2:3f:10:1b:1e:26:83:81:e6:97:9c:14:9c:1f:fc:38:48:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 11 04:53:39 2026 GMT
Not After : Aug 10 04:58:39 2027 GMT
Subject: CN=536B9130CAA8486C0EB3AE76AF7916D246A31882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:64:5d:db:7f:07:13:23:82:c3:ac:5c:5f:c1:
7b:7b:38:22:82:3d:be:53:ef:83:07:f1:f7:ec:be:
90:cd:c2:46:ca:ed:89:b6:5b:15:cd:f0:6f:12:43:
78:b8:93:77:a2:ed:d4:43:be:ee:dd:f4:b4:16:30:
ce:71:3c:00:fe:af:a7:ce:53:02:f9:78:83:74:96:
07:9a:90:47:56:1b:57:ec:14:c8:c5:a5:c2:c7:08:
ee:f4:3b:c2:d5:b6:57:1e:ff:64:56:06:ef:e1:9e:
7b:b1:b8:fe:f2:2f:ae:4b:49:5b:aa:c9:2b:0a:8a:
fa:e5:76:87:65:41:10:b9:b7:fa:57:4a:7a:a1:6c:
a4:89:47:d8:c0:44:74:d9:cb:2e:7a:6e:df:a0:9a:
82:93:15:41:68:12:25:fe:2a:50:1b:f5:ab:cb:6a:
f4:25:06:a2:fd:de:3d:ce:42:ec:cd:d8:bd:25:eb:
97:0d:d7:ce:88:ff:8b:0e:d7:21:c2:ee:a4:27:5a:
47:bc:bc:ad:b0:9e:e5:05:9a:7e:0e:18:8e:9f:8b:
94:5e:e2:34:c4:3c:eb:09:c6:fc:dd:41:e1:40:51:
9c:2e:1c:db:06:b6:47:df:0d:ea:ac:c6:81:3b:7f:
7e:7c:0b:f6:bf:e0:cd:cd:0a:60:ce:c0:ee:22:15:
48:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6B:91:30:CA:A8:48:6C:0E:B3:AE:76:AF:79:16:D2:46:A3:18:82
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.97.0/24
155.117.141.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:7a:9c:31:34:50:9b:55:8b:c2:b3:15:0c:70:91:25:bd:f9:
a3:c8:79:99:ba:d1:7a:bc:d4:fc:6c:65:ab:52:e4:be:5c:c2:
8b:62:e9:2e:71:86:37:14:1c:71:42:82:cf:a0:60:83:9b:8f:
fc:0a:21:b4:5c:07:ee:d5:dd:60:0a:d6:71:9f:12:2c:e0:6b:
e6:65:9a:61:5d:b5:d2:54:dc:b3:3a:59:95:f4:60:ec:b1:d3:
17:e6:0d:ec:2d:0e:36:45:26:3d:39:71:41:05:04:c2:36:a5:
81:35:60:8c:42:2d:5d:05:7e:db:b6:7d:23:84:dd:e7:4f:18:
04:36:8d:26:af:46:2d:a8:22:14:ea:6a:7e:8a:0e:07:a3:37:
c9:8f:a0:3f:e3:03:51:47:47:1a:7a:91:bd:2b:f4:fb:fc:bc:
20:ee:08:3e:c4:4b:c7:c0:ac:d1:2a:c7:ff:84:76:81:4e:90:
9d:07:55:33:a6:1d:f8:41:33:68:22:39:3b:e1:2f:72:1a:78:
ce:7a:25:14:cc:86:eb:a1:03:e5:cc:be:fc:d9:09:f4:64:65:
c9:24:c7:94:cb:99:7f:16:03:49:2e:60:7b:cc:20:c6:a0:34:
f3:67:70:5d:48:2d:83:e0:ec:a1:df:e9:ed:3e:7e:3e:23:02:
63:0c:ed:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 08:33:36 2026 by rpki-client