Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401560.roa
File: AS401560.roa (raw, json)
Hash identifier: riHsXwjDn+CPLcaGtEKthuPxGosAZWSEACrg/4bcYto=
Subject key identifier: CF:9C:C4:5B:F4:2D:0E:57:6A:A7:A7:1B:D5:E3:E1:67:BB:36:2E:B2
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0A77D0BC2547AC737DBC927A5D79CC2FC616967C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401560.roa
Signing time: Fri 11 Sep 2026 03:21:53 +0000
ROA not before: Fri 11 Sep 2026 03:16:53 +0000
ROA not after: Fri 10 Sep 2027 03:21:53 +0000
asID: 401560
IP address blocks: 143.14.6.0/24 maxlen: 24
146.103.54.0/24 maxlen: 24
162.141.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:77:d0:bc:25:47:ac:73:7d:bc:92:7a:5d:79:cc:2f:c6:16:96:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 11 03:16:53 2026 GMT
Not After : Sep 10 03:21:53 2027 GMT
Subject: CN=CF9CC45BF42D0E576AA7A71BD5E3E167BB362EB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e5:db:92:d0:31:65:a2:5e:d7:99:c6:a0:58:
ca:59:c9:2d:29:fb:3d:f0:4e:b8:c7:bd:9e:7d:c7:
0c:ac:d0:2f:28:a5:51:f2:7c:3a:a9:60:0a:64:68:
53:1d:80:8a:53:eb:71:16:ef:30:04:3c:1e:92:50:
41:ba:f7:59:dc:75:ff:3e:59:74:63:73:cf:84:77:
4e:f2:5b:77:51:bf:16:9e:02:3b:16:f4:19:ce:ba:
7e:a7:44:a1:5f:bf:51:e6:08:44:f1:4a:aa:ee:b2:
b3:5b:c7:99:0c:02:75:a6:32:6c:7b:bc:05:b8:00:
1d:38:38:38:e8:6e:d9:f4:15:35:b3:fe:37:4a:fd:
ba:aa:bf:b6:1c:0d:2e:3e:59:a4:b3:fd:1b:aa:dd:
09:95:b2:eb:93:3c:73:40:82:7f:f0:89:b8:61:fe:
19:c2:ce:7a:a3:c4:34:0f:2a:6f:a3:39:74:03:59:
58:73:e5:7a:d5:43:35:73:ff:31:9a:df:5c:e0:c3:
9c:1c:54:6e:ce:6d:aa:15:09:01:d3:85:1d:2e:59:
f5:1c:37:fb:ae:3e:e4:74:aa:12:92:a4:3c:c5:29:
dd:d2:a1:35:1c:49:70:02:33:bf:9e:fc:d7:97:22:
ca:ad:1b:32:ca:a4:c8:29:af:83:19:11:e1:de:c9:
9e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9C:C4:5B:F4:2D:0E:57:6A:A7:A7:1B:D5:E3:E1:67:BB:36:2E:B2
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401560.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.6.0/24
146.103.54.0/24
162.141.68.0/24
Signature Algorithm: sha256WithRSAEncryption
97:1b:29:df:04:6f:9c:ef:2f:df:2e:f0:3c:b3:2b:77:20:55:
57:5f:5b:46:23:1b:d1:e2:82:80:2f:b7:7c:db:1b:9f:a9:e9:
a7:89:04:f2:8a:d2:09:5c:e2:5b:fa:ed:a2:b0:69:44:fb:5e:
20:6b:a8:db:75:d4:d5:11:b9:20:e6:b5:81:84:3c:56:0e:9a:
cf:70:fa:56:1c:e7:bf:b4:55:5e:99:e4:a8:74:ca:ee:82:f6:
b3:d3:fa:20:87:7c:f6:a8:f1:5d:80:02:9d:0a:77:bf:45:f9:
63:40:ef:b6:28:d4:f3:93:4e:53:3a:01:6e:f0:12:ed:fa:9b:
11:66:49:ef:11:43:b1:06:84:61:4c:5c:c4:ef:fe:4a:98:c1:
a7:e3:91:ef:a7:fd:dc:92:f5:94:85:ce:75:b9:a3:43:77:bc:
07:93:0a:26:68:24:f4:e6:c5:32:0d:7b:76:53:e2:5d:56:eb:
24:58:e3:c0:06:33:93:b8:20:aa:a3:50:c8:da:d7:dc:f1:67:
47:f3:52:4c:ed:36:89:e1:f7:28:3d:c8:ed:99:db:2c:e8:4f:
8d:1d:1b:f9:8c:e7:d4:d8:76:cd:8c:5b:a7:5b:54:64:3a:25:
1e:ac:b7:4c:72:3a:45:11:be:87:51:8c:cd:d3:b3:a0:f7:72:
c9:b8:4d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:35:06 2026 by rpki-client