Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399955.roa
File: AS399955.roa (raw, json)
Hash identifier: NcdUTt+WKA+UdYCMxpW0MbZ9+ghe8x/OIGhimRtlpN4=
Subject key identifier: 9F:05:CC:99:B4:7F:82:1D:12:82:D1:97:31:03:13:24:D4:4E:3A:6F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6864DEC767CF07560D52B4D48D268DE5562102
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399955.roa
Signing time: Sat 08 Aug 2026 00:02:05 +0000
ROA not before: Fri 07 Aug 2026 23:57:05 +0000
ROA not after: Sat 07 Aug 2027 00:02:05 +0000
asID: 399955
IP address blocks: 143.14.232.0/21 maxlen: 24
162.141.2.0/23 maxlen: 24
162.141.6.0/23 maxlen: 24
162.141.22.0/23 maxlen: 24
162.141.24.0/22 maxlen: 24
162.141.28.0/22 maxlen: 24
162.141.32.0/22 maxlen: 24
162.141.40.0/22 maxlen: 24
162.141.56.0/22 maxlen: 24
162.141.60.0/22 maxlen: 24
162.141.72.0/22 maxlen: 24
162.141.76.0/23 maxlen: 24
162.141.134.0/23 maxlen: 24
162.141.144.0/21 maxlen: 24
162.141.156.0/23 maxlen: 24
162.141.168.0/21 maxlen: 24
162.141.184.0/21 maxlen: 24
162.141.192.0/21 maxlen: 24
162.141.200.0/21 maxlen: 24
162.141.208.0/21 maxlen: 24
162.141.216.0/21 maxlen: 24
162.141.224.0/21 maxlen: 24
162.141.232.0/21 maxlen: 24
162.141.240.0/21 maxlen: 24
162.141.248.0/21 maxlen: 24
167.148.16.0/21 maxlen: 24
167.148.24.0/22 maxlen: 24
167.148.43.0/24 maxlen: 24
167.148.44.0/23 maxlen: 24
167.148.48.0/21 maxlen: 24
167.148.56.0/22 maxlen: 24
167.148.60.0/22 maxlen: 24
167.148.64.0/22 maxlen: 24
167.148.75.0/24 maxlen: 24
167.148.76.0/22 maxlen: 24
167.148.88.0/21 maxlen: 24
167.148.108.0/22 maxlen: 24
167.148.145.0/24 maxlen: 24
167.148.185.0/24 maxlen: 24
167.148.220.0/23 maxlen: 24
167.148.224.0/21 maxlen: 24
167.148.232.0/21 maxlen: 24
167.148.240.0/21 maxlen: 24
167.148.248.0/21 maxlen: 24
168.222.6.0/24 maxlen: 24
168.222.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:64:de:c7:67:cf:07:56:0d:52:b4:d4:8d:26:8d:e5:56:21:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 7 23:57:05 2026 GMT
Not After : Aug 7 00:02:05 2027 GMT
Subject: CN=9F05CC99B47F821D1282D19731031324D44E3A6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:34:43:ab:c4:df:62:8b:02:e2:19:9e:0e:
3e:c5:b4:a0:36:4f:72:a9:9e:d5:b9:a3:96:73:97:
2d:19:d8:fc:b7:85:b8:73:1d:88:7d:d8:5d:d2:31:
56:f3:11:27:3d:92:d4:63:d0:5e:f2:07:2d:e6:59:
7d:df:54:8d:5b:48:f4:ce:5d:07:eb:e2:ba:0c:f0:
0d:f8:db:14:05:37:56:c4:65:91:9d:c1:91:e5:80:
66:91:16:00:a3:ee:b8:50:31:39:de:ec:86:47:43:
aa:18:1f:28:3f:39:26:d7:d2:3a:3f:b5:8b:d0:b9:
bc:29:a4:d0:34:0b:5f:67:f9:2e:19:f7:12:9a:f1:
f6:82:be:26:4e:32:23:c8:13:d0:c5:f9:56:e8:f9:
01:b6:70:e2:89:ca:f3:bb:fb:8d:97:23:09:e6:5f:
e9:2e:de:52:13:70:e4:ce:c4:91:9a:be:50:af:28:
9b:f7:b6:30:b0:fe:fe:5a:52:1a:c5:fe:76:e2:23:
6d:e7:5f:a2:10:3d:f8:68:67:96:92:8a:85:be:cb:
6d:39:c6:d3:a4:af:29:a1:e3:32:47:6f:a0:6e:c5:
ad:e8:48:bc:89:94:62:dd:6f:27:02:fe:95:b6:04:
6e:33:78:0e:ef:04:c3:96:c7:89:69:d9:c5:3c:7f:
9d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:05:CC:99:B4:7F:82:1D:12:82:D1:97:31:03:13:24:D4:4E:3A:6F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399955.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.232.0/21
162.141.2.0/23
162.141.6.0/23
162.141.22.0-162.141.35.255
162.141.40.0/22
162.141.56.0/21
162.141.72.0-162.141.77.255
162.141.134.0/23
162.141.144.0/21
162.141.156.0/23
162.141.168.0/21
162.141.184.0-162.141.255.255
167.148.16.0-167.148.27.255
167.148.43.0-167.148.45.255
167.148.48.0-167.148.67.255
167.148.75.0-167.148.79.255
167.148.88.0/21
167.148.108.0/22
167.148.145.0/24
167.148.185.0/24
167.148.220.0/23
167.148.224.0/19
168.222.6.0/24
168.222.126.0/23
Signature Algorithm: sha256WithRSAEncryption
62:32:a6:c9:00:d7:9e:c9:8d:a5:59:05:1a:b7:90:f0:00:3e:
85:08:78:64:9d:cc:1d:f1:fe:9d:e5:34:8d:ba:c3:1f:91:10:
cc:89:9f:78:a6:e3:7c:c9:73:75:c8:36:0e:c0:4f:38:5b:e0:
38:aa:63:33:54:f6:53:14:10:37:f8:07:9c:d6:0c:02:e1:e8:
51:61:3d:60:1e:0b:a2:31:91:0d:1f:75:28:8e:93:16:ba:20:
fb:ee:71:e5:15:b3:40:2b:71:7f:f5:81:2e:e1:1e:d7:8a:4a:
70:77:85:9c:67:0d:27:1a:55:43:ad:c2:ef:0d:c2:5a:bd:90:
09:6f:bb:39:34:6f:46:62:2b:21:65:8e:ae:42:c7:dc:c0:13:
75:ee:59:53:3e:ea:18:50:da:1a:12:ba:47:85:09:ab:9e:ae:
e9:e1:4a:f6:82:81:5b:d8:1b:16:32:95:6f:d3:89:29:be:04:
9c:9e:0e:25:5d:ad:90:91:f3:a9:ec:52:f5:ab:80:38:93:bc:
c4:23:40:a0:22:a4:42:96:42:e1:31:aa:82:5f:ab:40:ae:76:
a8:e7:58:4e:83:49:13:c0:f4:32:c7:99:3d:3d:3a:2d:f2:87:
b8:3c:20:ae:62:b1:b3:e9:aa:9d:2e:3e:32:85:d2:6f:ba:ee:
8b:91:57:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:30:06 2026 by rpki-client