Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401322.roa
File: AS401322.roa (raw, json)
Hash identifier: vGh8+5jeSsgwwDgycyyDM/w7d9i+fhI0/NZsLIPzfKI=
Subject key identifier: 81:E6:DD:6E:59:15:61:27:EF:1D:FA:D0:5B:67:46:A7:0E:31:13:EE
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6F66D03135864FB6068D828F9E9982BA11887408
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401322.roa
Signing time: Wed 20 May 2026 08:11:03 +0000
ROA not before: Wed 20 May 2026 08:06:03 +0000
ROA not after: Wed 19 May 2027 08:11:03 +0000
asID: 401322
IP address blocks: 168.222.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:66:d0:31:35:86:4f:b6:06:8d:82:8f:9e:99:82:ba:11:88:74:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 20 08:06:03 2026 GMT
Not After : May 19 08:11:03 2027 GMT
Subject: CN=81E6DD6E59156127EF1DFAD05B6746A70E3113EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:e3:f6:24:96:41:96:47:2c:b6:fc:54:9e:
fa:9f:03:fc:87:45:1d:a7:d2:15:ae:c0:b4:ae:4f:
b8:ac:a2:04:1f:c8:57:b6:66:13:a1:cb:61:6c:3c:
1c:5c:89:23:cc:ca:24:8b:b1:e2:ec:89:44:c6:b4:
68:14:fd:93:c5:ab:05:06:4f:ca:c9:38:a5:00:4d:
41:7a:0f:50:39:17:f9:dd:78:4b:37:36:43:40:e8:
22:a4:fe:5f:2f:78:b0:e2:6e:1e:50:86:18:c4:bb:
83:a3:9a:d8:86:fe:c4:8d:95:03:39:69:08:cc:75:
35:42:8a:9e:52:91:10:7a:36:c9:cb:40:b4:28:f8:
92:77:08:86:5d:b6:b2:1f:c4:88:eb:b2:f1:d1:6c:
f3:79:29:b4:2d:92:61:78:eb:1c:0f:7c:6c:1f:c0:
07:8b:4c:cf:b7:2b:c7:88:f3:69:4a:a4:40:9c:df:
90:05:4c:03:ff:42:f8:ff:33:41:3f:a9:3b:5a:b3:
c5:fa:dd:48:fa:60:f5:07:88:92:04:17:03:58:ea:
d7:2f:ae:00:34:85:da:9d:de:7f:cc:1d:75:99:b5:
14:bc:4f:ac:d4:f1:2d:62:56:0f:47:59:76:02:07:
d8:d5:69:79:e5:9b:86:dd:a5:d5:27:b1:70:20:27:
42:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E6:DD:6E:59:15:61:27:EF:1D:FA:D0:5B:67:46:A7:0E:31:13:EE
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401322.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.25.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:10:61:7e:7d:b1:73:eb:8a:32:76:64:2e:bf:2b:fa:5f:2c:
26:7a:4e:e5:ad:df:ac:97:81:a7:77:a9:6b:5a:ac:5c:4d:78:
d3:3a:35:ce:40:48:97:bc:fd:d2:3e:27:aa:6e:52:50:09:4a:
e6:25:ac:b7:43:6f:77:33:fc:5b:8b:10:4c:e2:8b:10:c4:10:
b2:be:19:03:ac:d7:fd:66:9b:fe:ee:78:86:98:d0:b5:94:e0:
d9:ec:21:69:dc:19:29:89:1f:c6:d7:f5:da:d8:cb:e5:7e:67:
73:2e:71:a4:b4:59:f2:b5:69:b7:8e:70:28:15:79:1e:8e:e8:
33:d8:ad:35:b9:f2:da:09:71:0e:2f:7d:48:ca:87:76:68:ca:
6e:51:45:83:b2:0d:47:b5:12:bd:4e:c1:18:10:1a:26:99:5c:
8e:6e:b1:df:cc:54:2b:30:f8:f5:71:e1:21:cf:0c:eb:ff:e8:
76:da:ba:47:7d:49:ca:08:7a:b5:39:04:14:ee:73:63:7f:d0:
cd:aa:b7:e2:72:04:ab:5d:c0:56:19:40:17:09:e8:4e:a6:a8:
4f:da:58:42:8e:c7:be:9d:80:7a:05:45:65:bf:f5:26:60:88:
f6:db:4e:d3:8e:1d:56:72:59:07:61:ea:14:f7:d4:14:60:fa:
dc:84:e5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:17:09 2026 by rpki-client