Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402215.roa
File: AS402215.roa (raw, json)
Hash identifier: 8rh9ujzTDzZYHGxk5i4vva4PcbqcCwlLxmBpTWTlT2w=
Subject key identifier: 44:07:28:C1:7D:7B:9B:C5:0F:6D:24:F0:36:C2:99:07:84:FE:7E:CF
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1915DED7F8AC2587E354766DC4BA5DD2F172F51F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402215.roa
Signing time: Mon 17 Aug 2026 06:06:49 +0000
ROA not before: Mon 17 Aug 2026 06:01:49 +0000
ROA not after: Mon 16 Aug 2027 06:06:49 +0000
asID: 402215
IP address blocks: 143.14.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:15:de:d7:f8:ac:25:87:e3:54:76:6d:c4:ba:5d:d2:f1:72:f5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 17 06:01:49 2026 GMT
Not After : Aug 16 06:06:49 2027 GMT
Subject: CN=440728C17D7B9BC50F6D24F036C2990784FE7ECF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:04:e6:ae:bd:2f:8e:c0:60:2b:a2:4a:72:
06:31:5e:f4:97:e5:82:b1:eb:9e:2d:cf:3b:27:67:
b0:5e:f5:05:20:7e:ef:ce:17:0b:87:0a:57:0c:c5:
d4:08:1e:55:90:6f:81:ba:2a:75:88:3e:47:ae:12:
79:f7:dd:0f:04:13:04:b6:74:c8:11:1f:26:25:a1:
4d:e5:3b:4e:ff:30:66:4c:46:22:35:ad:0d:84:b2:
1d:73:d4:23:52:1e:4a:54:bc:59:e5:48:20:77:12:
f7:98:dd:de:86:fa:2c:de:b2:23:db:ee:f3:72:c1:
da:db:af:96:f9:56:d6:4f:1b:ff:f6:44:a2:58:8a:
34:8b:3f:60:6a:c3:42:dd:94:ac:09:1d:71:52:4c:
65:4b:58:5b:85:9e:52:b2:5d:59:3a:60:d3:35:c4:
76:61:d3:52:2a:8f:97:91:02:48:79:89:8c:71:ba:
77:01:a5:27:b1:b4:b3:19:cf:8d:25:2d:df:36:37:
e8:a1:cc:5c:73:40:c6:81:4f:33:b1:05:92:cc:e4:
67:28:9c:83:aa:ed:22:b2:28:7a:fd:eb:40:6a:73:
85:96:4b:55:44:3f:55:18:42:4c:7a:04:bf:92:d8:
b4:98:ec:be:9d:89:ed:e4:57:05:d4:bc:bb:2f:6c:
44:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:07:28:C1:7D:7B:9B:C5:0F:6D:24:F0:36:C2:99:07:84:FE:7E:CF
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.19.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:31:eb:55:6b:03:5c:31:6e:5a:89:b2:30:a4:5b:fb:c4:74:
d4:54:67:39:1c:77:ed:6b:ff:fe:c4:39:be:64:4f:ea:6a:17:
f5:d5:56:a8:a6:53:49:3f:7b:cb:74:3a:72:bb:b3:33:0f:80:
f8:bf:9b:fb:63:03:44:e6:83:ae:e7:e8:77:01:65:d2:ea:a7:
db:68:fd:bd:5c:31:86:69:0a:31:b8:4c:37:cc:1d:34:fb:c5:
2d:4e:0f:64:a2:9f:2a:56:5e:55:a6:d9:b2:3e:fe:4f:d0:f4:
f5:9e:7d:72:9d:80:d4:e2:6c:df:e9:dd:7d:5e:b7:6e:88:57:
49:e7:81:ec:8b:03:45:fd:6c:9f:cb:b7:62:84:da:5f:78:27:
ac:1d:98:9e:3b:71:85:b1:7a:47:e0:72:8d:cb:f0:80:91:21:
ce:c9:3e:15:48:2a:1a:eb:4e:f3:53:5d:c0:45:22:cc:bc:8b:
bc:db:d3:c9:51:3b:df:bb:16:ac:16:2d:c8:b8:fd:4d:46:27:
c9:bf:17:cb:f3:90:97:0d:02:5e:70:c9:38:b2:f0:70:9e:27:
1e:96:af:68:39:66:d3:d1:fc:94:2f:92:ad:a9:b4:d2:a7:4d:
df:76:25:0e:41:35:a6:58:ac:ae:aa:6d:b2:0e:07:cc:14:67:
a9:3c:e2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:35:21 2026 by rpki-client