Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401190.roa
File: AS401190.roa (raw, json)
Hash identifier: 7A5LabGotmAN0K8yccPHPrDM+zTmfGwJO6VUOTbj+QY=
Subject key identifier: 91:81:AA:5A:4B:1F:6B:5C:31:20:0C:6E:75:09:EE:77:2D:61:71:68
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 323A0788437B749EB3BE22336CEEE4C81A14726F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401190.roa
Signing time: Mon 16 Mar 2026 00:46:48 +0000
ROA not before: Mon 16 Mar 2026 00:41:48 +0000
ROA not after: Mon 15 Mar 2027 00:46:48 +0000
asID: 401190
IP address blocks: 150.241.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:3a:07:88:43:7b:74:9e:b3:be:22:33:6c:ee:e4:c8:1a:14:72:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 16 00:41:48 2026 GMT
Not After : Mar 15 00:46:48 2027 GMT
Subject: CN=9181AA5A4B1F6B5C31200C6E7509EE772D617168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:50:ba:56:30:f6:38:4f:ec:73:5e:23:b4:c3:
df:e1:b8:ec:13:c6:3b:b4:f1:fb:29:55:14:a4:25:
a2:1b:e2:9f:b6:ca:48:ac:2a:90:9b:a0:0d:85:df:
c0:10:2c:ca:8b:2f:2c:a8:11:b7:00:52:2d:ad:6c:
d2:3b:6d:9c:51:d3:7a:7e:5f:24:dd:5f:e7:ad:18:
a1:f9:e1:c9:df:70:a6:69:de:95:00:62:42:17:b0:
8c:58:22:1f:29:93:8e:53:8d:0a:2e:78:63:83:2d:
07:ef:94:73:b2:dd:68:c8:7b:6e:87:f5:e9:48:fb:
4a:25:99:7e:92:28:35:0c:55:b8:d8:db:ca:17:b2:
98:7f:98:55:21:73:2e:79:96:b3:2f:d0:9f:0b:79:
59:98:17:ce:d7:6e:b2:de:3d:9a:9e:07:0b:bb:76:
aa:cd:eb:70:47:4a:e6:52:17:d5:8d:f3:7c:76:cf:
87:4c:33:73:ed:ff:75:d5:e7:60:5c:ea:1d:f6:36:
e0:06:ac:9d:a2:bb:30:38:35:3f:67:16:f2:a0:0b:
bf:0c:c4:d1:b9:e0:f7:38:13:01:1e:6e:27:13:65:
fb:e8:b3:0d:72:68:f6:77:14:8b:43:74:0b:f9:f6:
f7:03:81:75:b1:a2:31:3f:4e:6e:c6:97:27:b6:f9:
63:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:81:AA:5A:4B:1F:6B:5C:31:20:0C:6E:75:09:EE:77:2D:61:71:68
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401190.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.216.0/21
Signature Algorithm: sha256WithRSAEncryption
63:d0:8a:f1:28:8b:c5:d9:6f:aa:c7:69:8b:91:a3:19:23:0c:
2a:ed:2c:70:ce:8c:7a:bc:03:25:b7:a6:48:67:37:36:29:0e:
49:20:ad:d6:e8:7a:43:13:3d:28:63:c0:1d:eb:3f:11:0a:eb:
c6:49:37:ca:12:5e:f8:f0:ba:c7:3a:ee:12:2c:88:6b:19:91:
94:cc:6a:02:cb:3d:8e:b9:dc:ef:87:c7:15:dc:23:5f:ad:88:
c4:8d:e3:35:65:0e:ec:4b:6f:9b:7b:c2:e5:eb:8e:0b:1c:24:
98:be:e6:7c:dc:9c:d7:4d:99:72:2d:01:c1:5f:a3:bb:69:df:
16:61:f4:07:87:43:88:41:3a:f5:b9:00:a0:a5:38:3a:5a:f4:
ac:f9:e8:ce:14:9e:5f:b4:20:eb:34:54:53:0e:3c:99:7d:d5:
dc:d8:4e:2a:12:87:d4:0b:39:36:f2:93:d3:e9:25:c8:78:b6:
47:d8:6e:5d:d5:fd:f2:a2:38:55:ae:b3:f7:5e:1f:b5:47:98:
37:b3:f5:66:c4:38:d8:0e:3f:f7:20:51:95:02:92:81:83:f1:
19:98:b1:77:3d:29:ca:22:5c:dc:5e:f1:9e:49:d9:78:7d:20:
37:40:b7:48:8e:75:c5:e8:af:49:07:82:d2:39:f0:0a:54:5c:
ac:88:8b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 12:09:16 2026 by rpki-client