Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402215.roa
File: AS402215.roa (raw, json)
Hash identifier: EXQvOKwcmaTRC/FTXTkEn+X3LJ3xNNMlBUVCCUXms8w=
Subject key identifier: A8:31:D5:98:83:BC:BF:97:F3:0A:A8:61:15:46:1B:D6:B6:11:E8:95
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2A1867B548DCCBA56B60222BC2F981D85197B3A3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402215.roa
Signing time: Mon 13 Jul 2026 08:32:02 +0000
ROA not before: Mon 13 Jul 2026 08:27:02 +0000
ROA not after: Mon 12 Jul 2027 08:32:02 +0000
asID: 402215
IP address blocks: 145.223.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:18:67:b5:48:dc:cb:a5:6b:60:22:2b:c2:f9:81:d8:51:97:b3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 13 08:27:02 2026 GMT
Not After : Jul 12 08:32:02 2027 GMT
Subject: CN=A831D59883BCBF97F30AA86115461BD6B611E895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:a2:dd:12:c4:61:46:f4:44:31:e1:7f:bb:
65:c2:2a:dd:cd:09:4d:24:88:78:1f:30:12:15:90:
65:26:9e:d0:f8:bb:b6:42:1e:68:29:2d:49:9b:30:
8e:f7:c4:21:d7:14:5d:f4:dd:9a:73:3c:3d:c9:ff:
25:cc:da:84:f7:2d:03:45:6b:ff:67:3f:7b:b9:61:
3c:14:03:49:36:b4:cc:b9:08:43:b3:33:5f:b4:e7:
07:e0:b1:01:f4:7b:ae:d6:7c:3a:46:e4:52:93:2a:
8b:31:6e:88:62:97:ac:24:ae:2e:c4:45:17:1f:53:
9a:3c:4a:40:99:a5:6e:51:4d:c8:67:e2:7f:79:2a:
e1:fe:ef:13:0b:10:8f:ac:5d:ec:a9:7e:5a:44:ba:
30:33:a7:52:7b:1a:6b:be:52:e7:09:d9:1a:0d:a6:
20:55:7d:9e:91:14:47:9e:21:00:59:3e:f2:8f:51:
cf:09:26:81:6e:1d:ea:6d:6b:d8:05:24:78:c7:98:
c8:dc:0a:df:85:bb:16:6a:bf:09:89:c4:77:f9:83:
6b:57:e4:64:7a:91:d7:d9:b7:54:b1:3e:b2:7c:bf:
c6:fb:97:2d:68:5c:61:68:4e:21:98:fd:96:75:64:
1e:29:a8:5f:70:bf:19:1f:9f:44:d5:9f:6a:83:2f:
b0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:31:D5:98:83:BC:BF:97:F3:0A:A8:61:15:46:1B:D6:B6:11:E8:95
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.223.4.0/24
Signature Algorithm: sha256WithRSAEncryption
20:18:c4:ec:b0:c3:2c:45:64:10:6c:72:45:ef:0c:b8:0a:ec:
99:6b:e8:bd:88:4f:ac:26:dc:69:f7:e0:e5:ae:cd:26:9c:1a:
ce:75:9b:c6:e0:e9:90:67:45:05:cd:43:e9:d8:e8:c1:aa:9b:
bd:3e:e7:33:de:41:95:0c:72:6b:60:85:c7:cb:8b:59:b1:2a:
c7:49:c0:2e:11:94:bd:eb:89:5f:85:c8:8f:b0:3e:e0:41:7c:
11:7f:f0:47:9c:43:05:75:7f:59:ca:3a:a3:01:a7:15:ee:b7:
7d:dd:5b:59:a4:54:2c:b5:32:3b:3b:01:3f:d8:cc:78:27:25:
77:e9:74:67:65:4c:60:0c:8a:b1:75:11:c1:5e:c4:f6:cf:2a:
69:ab:76:29:28:da:a3:70:e1:46:e4:c6:a1:3c:2d:d9:77:37:
cd:84:de:64:c2:f3:77:8b:4b:17:88:7e:c6:f3:92:51:07:c1:
48:33:cb:2b:c1:6d:9d:56:7d:fd:fc:73:d2:93:64:eb:c8:48:
c4:4d:c6:51:c5:be:95:e9:af:4e:bf:5d:14:90:6d:60:84:a5:
04:b8:79:7c:c3:89:60:88:d5:36:42:d5:f8:02:f1:60:7e:a9:
d5:8e:39:e4:fd:a0:e8:93:fa:29:c2:01:4a:c7:16:1c:9a:15:
05:c8:f7:93
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUKhhntUjcy6VrYCIrwvmB2FGXs6MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA3MTMwODI3MDJaFw0yNzA3MTIwODMyMDJaMDMxMTAvBgNV
BAMTKEE4MzFENTk4ODNCQ0JGOTdGMzBBQTg2MTE1NDYxQkQ2QjYxMUU4OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpp6LdEsRhRvREMeF/u2XCKt3N
CU0kiHgfMBIVkGUmntD4u7ZCHmgpLUmbMI73xCHXFF303ZpzPD3J/yXM2oT3LQNF
a/9nP3u5YTwUA0k2tMy5CEOzM1+05wfgsQH0e67WfDpG5FKTKosxbohil6wkri7E
RRcfU5o8SkCZpW5RTchn4n95KuH+7xMLEI+sXeypflpEujAzp1J7Gmu+UucJ2RoN
piBVfZ6RFEeeIQBZPvKPUc8JJoFuHepta9gFJHjHmMjcCt+FuxZqvwmJxHf5g2tX
5GR6kdfZt1SxPrJ8v8b7ly1oXGFoTiGY/ZZ1ZB4pqF9wvxkfn0TVn2qDL7AbAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUqDHVmIO8v5fzCqhhFUYb1rYR6JUwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNDAyMjE1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkd8E
MA0GCSqGSIb3DQEBCwUAA4IBAQAgGMTssMMsRWQQbHJF7wy4CuyZa+i9iE+sJtxp
9+Dlrs0mnBrOdZvG4OmQZ0UFzUPp2OjBqpu9Pucz3kGVDHJrYIXHy4tZsSrHScAu
EZS964lfhciPsD7gQXwRf/BHnEMFdX9ZyjqjAacV7rd93VtZpFQstTI7OwE/2Mx4
JyV36XRnZUxgDIqxdRHBXsT2zyppq3YpKNqjcOFG5MahPC3ZdzfNhN5kwvN3i0sX
iH7G85JRB8FIM8srwW2dVn39/HPSk2TryEjETcZRxb6V6a9Ov10UkG1ghKUEuHl8
w4lgiNU2QtX4AvFgfqnVjjnk/aDok/opwgFKxxYcmhUFyPeT
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:15:23 2026 by rpki-client