Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402133.roa
File: AS402133.roa (raw, json)
Hash identifier: TW0f7Y1IDJtGxVooiZE9Rou27pGB/DOQ5ZbydlLlSW0=
Subject key identifier: B5:AD:60:9D:8A:81:D0:4F:44:7C:EA:70:5F:88:76:6E:DF:93:74:CB
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4B08868AD96D626891B01DADBD51B6881D2B4C31
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402133.roa
Signing time: Mon 17 Aug 2026 09:28:36 +0000
ROA not before: Mon 17 Aug 2026 09:23:36 +0000
ROA not after: Mon 16 Aug 2027 09:28:36 +0000
asID: 402133
IP address blocks: 148.135.194.0/24 maxlen: 24
167.148.84.0/23 maxlen: 24
168.222.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:08:86:8a:d9:6d:62:68:91:b0:1d:ad:bd:51:b6:88:1d:2b:4c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 17 09:23:36 2026 GMT
Not After : Aug 16 09:28:36 2027 GMT
Subject: CN=B5AD609D8A81D04F447CEA705F88766EDF9374CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:63:86:a7:9b:9e:da:21:73:7e:ce:16:e0:92:
ae:67:ae:da:4b:64:7d:0e:40:62:ee:69:05:37:49:
bd:69:84:b8:7c:4b:81:ae:8f:a2:35:a6:fb:c5:fb:
ad:e9:f1:a5:8e:8e:b1:8e:63:51:c7:fd:08:f8:5a:
44:81:2a:d3:f9:1e:e6:9a:11:d1:0d:1e:8a:c6:82:
af:ec:87:d0:59:05:21:6e:98:e0:b5:0c:1d:1a:7f:
17:57:a8:31:cd:b0:a8:3e:dc:3b:1f:6e:a7:a0:4c:
6e:af:a9:8c:34:de:ca:40:b6:72:0f:7a:4a:7b:5a:
f5:16:46:6a:67:31:39:2d:ad:6c:9a:67:74:75:c8:
aa:3b:d2:78:74:d1:41:5f:d5:6c:e9:01:bc:a0:06:
6f:ec:d5:71:87:a7:64:85:c2:d2:ca:c2:c9:a7:3d:
3a:46:8c:e6:ae:57:a8:be:75:de:c7:77:f9:bd:44:
43:73:9d:c1:ac:3b:58:2a:fe:5a:0c:3b:f9:0f:ad:
8d:a0:11:7e:d3:94:ce:68:9d:8f:07:4f:3e:fe:fc:
34:94:34:3c:7c:0e:dd:59:45:85:ce:07:9f:0b:c5:
ef:ce:9e:7b:15:c9:cc:d4:0e:8c:7b:1f:f0:16:a0:
f9:a2:52:28:b5:23:0f:7d:80:80:25:91:99:33:ec:
fe:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AD:60:9D:8A:81:D0:4F:44:7C:EA:70:5F:88:76:6E:DF:93:74:CB
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.194.0/24
167.148.84.0/23
168.222.46.0/24
Signature Algorithm: sha256WithRSAEncryption
77:c2:e2:da:44:d9:ec:6f:8e:14:d8:17:10:b6:18:f5:90:36:
a8:35:66:07:60:b4:d4:35:69:25:ca:f4:ad:9c:cd:75:2a:1a:
14:7f:4f:4a:fb:3b:c0:97:f4:a7:dc:58:dc:10:c3:d4:07:86:
67:48:25:4d:e7:28:19:99:3c:8c:cc:96:d5:4f:e6:38:01:99:
65:e0:86:e9:af:2f:c7:8c:79:7a:d9:98:5e:0c:ca:96:33:e0:
d1:fc:f5:9a:72:9a:af:de:a5:3b:d9:ac:c9:6f:ac:b9:01:1a:
9e:06:b4:6b:9e:9b:b8:9d:74:5e:92:9b:a7:4d:89:36:38:16:
32:90:b4:77:a6:fa:b9:66:61:34:9a:a0:67:3c:c9:69:e3:c9:
26:e2:d0:1e:f1:6a:09:35:e0:4b:67:a0:d0:19:d5:41:1c:13:
83:e1:94:f3:87:ba:48:93:27:e5:1e:46:3c:70:fe:9f:04:11:
34:c9:ff:f9:f0:f3:bf:8f:86:58:37:e3:6f:11:8a:58:6c:87:
5c:96:c4:b8:63:ef:f6:35:fe:74:4c:70:59:81:8a:77:51:4c:
9b:06:b4:72:ca:f7:ee:95:ca:94:6b:78:17:48:6a:2e:e2:c9:
b0:fe:7f:d7:d0:53:42:33:e5:4e:e8:0b:14:aa:cb:ab:b6:d2:
ce:49:d7:60
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUSwiGitltYmiRsB2tvVG2iB0rTDEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA4MTcwOTIzMzZaFw0yNzA4MTYwOTI4MzZaMDMxMTAvBgNV
BAMTKEI1QUQ2MDlEOEE4MUQwNEY0NDdDRUE3MDVGODg3NjZFREY5Mzc0Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoY4anm57aIXN+zhbgkq5nrtpL
ZH0OQGLuaQU3Sb1phLh8S4Guj6I1pvvF+63p8aWOjrGOY1HH/Qj4WkSBKtP5Huaa
EdENHorGgq/sh9BZBSFumOC1DB0afxdXqDHNsKg+3DsfbqegTG6vqYw03spAtnIP
ekp7WvUWRmpnMTktrWyaZ3R1yKo70nh00UFf1WzpAbygBm/s1XGHp2SFwtLKwsmn
PTpGjOauV6i+dd7Hd/m9RENzncGsO1gq/loMO/kPrY2gEX7TlM5onY8HTz7+/DSU
NDx8Dt1ZRYXOB58Lxe/OnnsVyczUDox7H/AWoPmiUii1Iw99gIAlkZkz7P4VAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUta1gnYqB0E9EfOpwX4h2bt+TdMswHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNDAyMTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAlIfC
AwQBp5RUAwQAqN4uMA0GCSqGSIb3DQEBCwUAA4IBAQB3wuLaRNnsb44U2BcQthj1
kDaoNWYHYLTUNWklyvStnM11KhoUf09K+zvAl/Sn3FjcEMPUB4ZnSCVN5ygZmTyM
zJbVT+Y4AZll4Ibpry/HjHl62ZheDMqWM+DR/PWacpqv3qU72azJb6y5ARqeBrRr
npu4nXRekpunTYk2OBYykLR3pvq5ZmE0mqBnPMlp48km4tAe8WoJNeBLZ6DQGdVB
HBOD4ZTzh7pIkyflHkY8cP6fBBE0yf/58PO/j4ZYN+NvEYpYbIdclsS4Y+/2Nf50
THBZgYp3UUybBrRyyvfulcqUa3gXSGou4smw/n/X0FNCM+VO6AsUqsurttLOSddg
-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:42 2026 by rpki-client