Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401650.roa
File: AS401650.roa (raw, json)
Hash identifier: EMtXM01uxPuJ/3udrrDupUtOD0De8tzaGxvBvDeeJm8=
Subject key identifier: 8A:11:44:B3:11:0B:46:D0:C2:0E:6B:40:8A:FF:41:AC:0A:E2:5F:CB
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 680E6F7A3C066C083292D70D2B6B407792A17209
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401650.roa
Signing time: Fri 07 Aug 2026 03:07:07 +0000
ROA not before: Fri 07 Aug 2026 03:02:07 +0000
ROA not after: Fri 06 Aug 2027 03:07:07 +0000
asID: 401650
IP address blocks: 143.14.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:0e:6f:7a:3c:06:6c:08:32:92:d7:0d:2b:6b:40:77:92:a1:72:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 7 03:02:07 2026 GMT
Not After : Aug 6 03:07:07 2027 GMT
Subject: CN=8A1144B3110B46D0C20E6B408AFF41AC0AE25FCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:35:28:13:24:81:9c:19:a7:9d:b4:f2:ad:
be:4c:c0:2c:25:ce:d0:3c:98:39:c7:61:e7:66:e8:
1e:fc:30:75:6d:26:f1:c3:a6:b4:27:bc:3d:1d:38:
74:02:10:60:5c:cf:bd:5f:d0:6f:e9:f8:01:8c:64:
6b:88:f9:ab:dc:ba:9c:a4:f2:33:a0:86:d1:34:bf:
ed:d4:39:5e:cc:08:3c:dd:a5:29:f6:9e:79:14:3e:
78:a2:87:2c:d3:cf:81:71:16:b2:9a:8e:69:81:b7:
2a:43:5f:9f:d9:3c:6b:8b:12:73:bb:ad:a5:de:b9:
e8:f7:3c:92:f3:10:6b:5e:0c:84:ac:53:fe:28:a5:
7d:70:c2:54:86:75:20:85:5b:b5:f0:cb:c4:ee:f5:
cb:0a:cf:13:5e:32:22:ea:ec:78:e8:97:74:65:68:
23:35:c1:0b:f0:e6:f5:d4:0e:0c:4d:e9:ff:e7:d0:
70:a7:f2:c8:eb:8f:38:b5:45:33:8d:5e:c0:62:92:
92:8d:ef:d5:0d:ee:e9:ce:ef:0b:a3:ab:0a:9b:ad:
f9:d2:51:07:38:b7:40:00:d5:1f:c6:88:20:72:ac:
81:c4:3d:42:07:40:78:c0:a1:d1:dd:c7:be:e4:87:
a4:11:85:b4:97:22:1f:be:f8:ca:13:92:52:ac:87:
44:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:11:44:B3:11:0B:46:D0:C2:0E:6B:40:8A:FF:41:AC:0A:E2:5F:CB
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401650.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.19.0/24
Signature Algorithm: sha256WithRSAEncryption
93:fd:fa:a1:69:5a:13:65:94:50:6e:57:1e:9f:c8:bd:38:7f:
3d:4e:e9:18:7b:16:35:8b:31:01:e6:ce:cb:9b:3b:29:ad:10:
9b:f9:ce:d9:94:a8:44:dd:31:5d:d7:01:46:eb:a3:5d:41:74:
4b:f7:bd:a3:90:9c:df:f5:fe:ed:b3:ca:d2:a1:05:c4:b2:fe:
c5:09:da:4f:7a:ab:6f:a4:d6:16:5d:54:98:7f:4d:76:59:41:
2e:db:11:10:7a:a9:60:d4:36:c8:b2:24:33:a2:7d:0a:4b:69:
c0:ed:8a:d4:03:9c:e5:33:e3:27:3d:6b:48:1c:10:7f:d0:0a:
59:4c:37:b7:0a:28:42:f0:1c:7b:fa:a0:e0:8e:56:d0:98:4f:
a4:55:3d:e8:e1:1c:ff:3c:75:97:ab:99:e8:ff:24:2e:ff:f7:
d3:4c:53:fd:33:a8:e1:25:80:49:3f:80:36:54:37:eb:47:fd:
e6:fa:4b:9c:83:c0:9a:32:cb:63:84:68:0f:a2:b1:07:3f:c2:
60:91:ad:e4:45:ce:8b:39:8e:96:58:19:d7:e6:62:c8:fc:62:
6e:e1:c4:d7:13:cf:08:0f:7a:40:a6:9f:8c:45:74:d3:e3:c8:
4e:a9:e8:85:61:4f:bf:a7:c3:3f:65:86:e7:1a:ea:16:c0:9d:
6f:f5:2f:b4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUaA5vejwGbAgyktcNK2tAd5KhcgkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA4MDcwMzAyMDdaFw0yNzA4MDYwMzA3MDdaMDMxMTAvBgNV
BAMTKDhBMTE0NEIzMTEwQjQ2RDBDMjBFNkI0MDhBRkY0MUFDMEFFMjVGQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmsTUoEySBnBmnnbTyrb5MwCwl
ztA8mDnHYedm6B78MHVtJvHDprQnvD0dOHQCEGBcz71f0G/p+AGMZGuI+avcupyk
8jOghtE0v+3UOV7MCDzdpSn2nnkUPniihyzTz4FxFrKajmmBtypDX5/ZPGuLEnO7
raXeuej3PJLzEGteDISsU/4opX1wwlSGdSCFW7Xwy8Tu9csKzxNeMiLq7Hjol3Rl
aCM1wQvw5vXUDgxN6f/n0HCn8sjrjzi1RTONXsBikpKN79UN7unO7wujqwqbrfnS
UQc4t0AA1R/GiCByrIHEPUIHQHjAodHdx77kh6QRhbSXIh+++MoTklKsh0TNAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUihFEsxELRtDCDmtAiv9BrAriX8swHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNDAxNjUwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjw4T
MA0GCSqGSIb3DQEBCwUAA4IBAQCT/fqhaVoTZZRQblcen8i9OH89TukYexY1izEB
5s7LmzsprRCb+c7ZlKhE3TFd1wFG66NdQXRL972jkJzf9f7ts8rSoQXEsv7FCdpP
eqtvpNYWXVSYf012WUEu2xEQeqlg1DbIsiQzon0KS2nA7YrUA5zlM+MnPWtIHBB/
0ApZTDe3CihC8Bx7+qDgjlbQmE+kVT3o4Rz/PHWXq5no/yQu//fTTFP9M6jhJYBJ
P4A2VDfrR/3m+kucg8CaMstjhGgPorEHP8Jgka3kRc6LOY6WWBnX5mLI/GJu4cTX
E88ID3pApp+MRXTT48hOqeiFYU+/p8M/ZYbnGuoWwJ1v9S+0
-----END CERTIFICATE-----
Generated at Sat Aug 8 00:45:59 2026 by rpki-client