Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402215.roa
File: AS402215.roa (raw, json)
Hash identifier: ZhnxwEyWap+4zJJmtoM93+G8yeO9A+310jqB16ycbvA=
Subject key identifier: 5D:46:2A:21:0E:5F:BF:C8:6A:AD:30:43:0F:25:D0:41:83:91:8B:ED
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0D9348E250CE54664D2F9B6475F66A4902DE8F6C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402215.roa
Signing time: Wed 27 May 2026 05:37:29 +0000
ROA not before: Wed 27 May 2026 05:32:29 +0000
ROA not after: Wed 26 May 2027 05:37:29 +0000
asID: 402215
IP address blocks: 140.233.175.0/24 maxlen: 24
143.14.22.0/24 maxlen: 24
150.241.253.0/24 maxlen: 24
168.222.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:93:48:e2:50:ce:54:66:4d:2f:9b:64:75:f6:6a:49:02:de:8f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 27 05:32:29 2026 GMT
Not After : May 26 05:37:29 2027 GMT
Subject: CN=5D462A210E5FBFC86AAD30430F25D04183918BED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a2:0c:41:0c:f8:d6:ac:09:80:1a:bb:69:eb:
a7:95:4f:b2:7b:9f:f2:17:d2:b8:3e:3f:8a:48:f8:
f6:a4:f9:e7:11:d8:d1:0f:79:73:7b:1a:f6:b4:32:
36:bd:9c:90:b0:f6:ea:2e:10:da:15:d2:e8:86:58:
e2:4c:39:dd:9b:12:ea:d9:02:63:28:f0:ef:a8:cb:
d4:23:f3:63:ef:b0:27:ea:ea:37:c1:2a:22:68:7e:
43:fb:2b:72:22:31:47:bd:f9:51:ba:18:42:b0:7a:
0f:c3:ee:b4:6d:23:ee:46:5f:30:2d:ce:43:b2:47:
37:6f:ac:d1:e2:c3:de:9a:94:fb:ab:43:cc:d3:3a:
de:89:4e:28:6f:c2:96:76:58:7a:5e:c7:5f:e8:ae:
16:05:c8:9e:5a:5c:fe:87:40:8c:15:09:55:9a:e3:
1b:cd:83:82:20:b3:11:eb:35:db:a7:73:59:46:5e:
4e:5e:f4:9a:9a:d2:8e:79:0b:df:b6:45:a4:fd:25:
89:7b:af:a7:4f:03:99:61:36:ab:5c:9f:d3:e0:92:
f0:8a:2a:b1:df:9d:72:c3:ff:78:62:4c:7c:fe:fd:
47:92:54:f1:97:6a:c3:ac:8a:1b:c3:34:ed:43:8f:
9b:9a:ab:71:6f:f0:ab:00:c5:16:e5:ab:b3:66:94:
28:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:46:2A:21:0E:5F:BF:C8:6A:AD:30:43:0F:25:D0:41:83:91:8B:ED
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.175.0/24
143.14.22.0/24
150.241.253.0/24
168.222.24.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:bc:7c:df:38:4e:84:a0:4c:80:6c:a4:e7:4b:fa:8b:e1:59:
f9:0e:da:7e:2d:c1:87:71:fc:83:3b:2f:90:92:09:38:5f:aa:
dd:52:5e:0f:46:67:ea:e2:81:d9:81:c1:0d:0f:af:d7:a6:c9:
6f:7b:a5:ec:d6:c7:b0:99:6d:ef:75:05:38:09:12:7b:8e:2a:
01:5f:97:43:13:0b:fa:d7:d5:80:fb:00:b5:6b:a9:c8:d4:57:
d4:e2:b4:da:7b:22:68:e4:25:fd:75:12:ae:71:66:ad:e2:18:
97:9c:b9:6f:fc:5b:36:ad:c4:1e:9c:fe:c3:2c:fa:0e:e5:43:
1a:1f:2d:99:89:35:0e:3c:10:72:03:0b:00:34:10:fa:55:cf:
a8:39:0f:4c:ab:8c:77:9a:c3:aa:4d:b4:2c:eb:75:cc:5a:6c:
dc:75:83:bb:91:4d:87:bf:84:b9:26:d8:80:ae:fe:5f:3b:a3:
fc:a9:52:2a:ad:5c:fd:59:78:9f:08:f1:95:67:75:f9:c9:f0:
4d:77:a9:65:9d:df:b1:0b:26:2d:28:03:3b:21:80:73:07:c5:
ea:f6:0a:c8:4b:0c:07:d5:d4:05:a6:cf:e2:a1:2c:93:6e:08:
0c:36:23:45:34:6e:78:cb:66:a3:be:9c:5d:18:c6:6d:9e:7e:
63:64:dc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:54 2026 by rpki-client