Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401948.roa
File: AS401948.roa (raw, json)
Hash identifier: IaUatquhwZp2bEwbyB8BrAk1MifY/KJd+OzdjjClt+Q=
Subject key identifier: CD:52:99:15:26:39:39:D7:54:0D:3F:52:7B:12:11:2C:A6:7A:9B:B8
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6EE053AE24627CC6C53C254505B8104DD31C0C2D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401948.roa
Signing time: Mon 03 Aug 2026 14:49:18 +0000
ROA not before: Mon 03 Aug 2026 14:44:18 +0000
ROA not after: Mon 02 Aug 2027 14:49:18 +0000
asID: 401948
IP address blocks: 143.14.145.0/24 maxlen: 24
155.117.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:e0:53:ae:24:62:7c:c6:c5:3c:25:45:05:b8:10:4d:d3:1c:0c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 3 14:44:18 2026 GMT
Not After : Aug 2 14:49:18 2027 GMT
Subject: CN=CD529915263939D7540D3F527B12112CA67A9BB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7c:79:dd:7b:94:9e:f4:20:a8:0e:ef:53:04:
4e:c6:85:a2:3f:41:73:bc:67:da:95:71:13:0b:d3:
df:dd:30:ef:7f:73:aa:86:8d:ba:09:93:bf:26:59:
0b:ff:39:ef:1d:46:e7:9a:e7:22:4e:10:6f:41:fa:
99:39:96:3a:c3:24:0a:93:7d:0a:99:47:79:63:5d:
1d:dd:bd:7d:2b:08:77:fb:04:b9:92:58:d5:09:cf:
74:0c:44:1b:ff:18:c5:33:65:73:ee:44:ba:54:dc:
c9:c4:ec:e4:03:6c:f0:aa:bc:00:04:ec:68:1b:d2:
f9:e5:ae:67:b1:8a:bb:56:38:3d:cf:48:24:22:b4:
0b:f9:59:4f:6d:8c:e1:46:03:d6:d7:12:41:0b:83:
2e:0f:1b:0c:05:9b:0d:9b:0c:2d:d5:fb:01:c9:e6:
43:23:e9:71:de:26:33:aa:d4:ff:f5:78:ce:01:ed:
35:50:b6:44:c9:24:55:5b:38:6c:aa:cf:25:61:c3:
29:f8:0c:dd:87:70:b7:58:49:ff:be:8e:eb:49:4c:
76:84:15:70:10:8a:e8:b0:b0:39:c4:fb:b8:dd:9d:
1d:71:c8:4b:cf:ef:b0:a3:2b:cf:99:87:35:76:9c:
40:6d:65:c3:21:76:8f:34:8c:12:98:d6:42:ee:b8:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:52:99:15:26:39:39:D7:54:0D:3F:52:7B:12:11:2C:A6:7A:9B:B8
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401948.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.145.0/24
155.117.194.0/24
Signature Algorithm: sha256WithRSAEncryption
47:a4:6c:7a:8a:f6:60:77:ec:8b:ec:08:17:dd:77:5f:dd:cb:
f0:42:de:6a:11:74:6a:96:e5:a8:83:76:3f:62:bf:ac:96:d7:
7d:0d:d3:e0:0e:78:e8:2b:d8:ab:8c:4e:9a:73:dd:65:05:05:
fe:e5:8b:c7:7b:72:49:10:dd:f6:3b:53:84:d2:53:60:7c:a8:
f7:e9:ed:2a:23:07:b5:60:c3:0a:4d:f3:63:8e:ec:7e:cc:be:
fb:d0:60:b8:da:2e:f6:25:43:a2:8d:95:03:4d:5d:1f:58:4c:
5a:4f:fe:f7:19:4d:1c:6d:78:ba:91:09:ce:90:2b:0b:dc:f7:
29:31:9b:84:f8:84:a9:6e:40:cb:7e:6f:19:3b:89:2a:66:cf:
50:bc:fd:46:18:22:fc:44:77:93:f6:96:1f:66:e9:2c:71:68:
9d:cd:c9:71:3e:7a:3a:93:87:ba:6c:2e:80:95:cc:0c:a5:26:
0d:9b:d1:c3:05:48:a2:98:d6:2e:95:71:e8:71:79:f8:da:ca:
a6:52:de:db:05:4c:ae:c3:56:92:89:26:c1:4c:a4:12:a7:52:
e1:c1:89:82:0f:50:3f:54:26:1d:8f:ba:c0:50:a1:3d:59:84:
81:57:6b:d8:f6:9b:0c:9c:7b:56:d9:02:3a:4f:96:66:df:b5:
30:a9:31:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:52:29 2026 by rpki-client