Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: ZkKidk/ogB4CTjo3aDVhapwWRUhxI6SZmH9hiN+Vfe8=
Subject key identifier: 78:42:36:2D:20:78:EB:5A:CF:74:FA:9D:2B:6D:2F:71:C2:AE:21:FA
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1AC85FDE0987DEB3A90A8E38F37E9E137ADC19AC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402265.roa
Signing time: Tue 07 Apr 2026 04:14:13 +0000
ROA not before: Tue 07 Apr 2026 04:09:13 +0000
ROA not after: Tue 06 Apr 2027 04:14:13 +0000
asID: 402265
IP address blocks: 143.14.91.0/24 maxlen: 24
155.117.119.0/24 maxlen: 24
155.117.220.0/24 maxlen: 24
162.141.66.0/24 maxlen: 24
168.222.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Apr 2026 17:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:c8:5f:de:09:87:de:b3:a9:0a:8e:38:f3:7e:9e:13:7a:dc:19:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 7 04:09:13 2026 GMT
Not After : Apr 6 04:14:13 2027 GMT
Subject: CN=7842362D2078EB5ACF74FA9D2B6D2F71C2AE21FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e6:da:28:61:85:82:fe:17:a8:a7:31:07:5a:
7b:06:04:95:6f:d1:52:3a:0a:cf:c9:45:34:30:fb:
82:15:4a:d0:a1:54:2e:21:49:b9:ad:c1:ef:ce:70:
c4:98:6b:b6:32:42:ce:fc:b6:cc:07:32:33:71:bd:
ee:37:ac:65:ec:77:21:11:98:bf:b0:e9:f0:65:dc:
57:6c:25:c3:de:e8:e8:4d:ba:dc:af:b0:44:50:68:
2f:a5:14:5f:a4:da:fd:37:a7:81:b4:c7:f6:d7:60:
2a:55:72:b3:d4:d4:38:82:17:3b:b6:fd:41:54:e2:
15:8f:d3:07:67:dd:fb:0c:8e:69:77:dc:c2:e9:b4:
90:fb:de:65:77:af:7c:c8:ff:be:4e:91:fa:25:d2:
16:4f:15:c2:74:77:29:8e:b9:87:65:ce:21:12:49:
c6:a0:a6:2f:e2:54:67:73:5a:29:fd:4b:ad:54:f9:
e0:d7:65:98:f2:89:43:93:3e:ec:3e:03:12:61:37:
59:59:b1:5b:ed:d5:58:fc:95:67:c5:2b:6d:74:12:
62:47:4c:3e:6e:01:f8:60:26:1d:39:80:8b:0b:00:
c9:68:bf:63:39:bc:84:32:29:95:8e:ba:d6:6a:f8:
17:94:ac:52:df:35:22:f0:5a:70:e3:c7:2b:c9:ab:
06:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:42:36:2D:20:78:EB:5A:CF:74:FA:9D:2B:6D:2F:71:C2:AE:21:FA
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.91.0/24
155.117.119.0/24
155.117.220.0/24
162.141.66.0/24
168.222.18.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:9a:57:9b:06:de:b3:ba:02:d5:b0:94:9d:b8:70:bd:63:ee:
12:bf:68:09:03:72:35:47:6a:ec:9f:85:89:1e:be:41:5a:34:
06:ba:6e:04:0f:ee:89:d9:48:b3:2c:00:9b:c0:ec:a6:66:14:
14:6b:6e:68:ee:29:d3:d2:3e:67:a2:23:0c:ec:77:80:43:c8:
30:8b:89:d4:67:f0:ad:bc:8b:5c:77:39:b0:8c:88:cc:a6:6e:
d7:95:bc:87:18:ff:ff:58:70:19:29:3d:09:f2:5f:63:0b:ba:
3b:4a:64:02:1b:cb:ba:ad:05:c9:39:b2:9d:3b:62:b1:e8:22:
82:6d:18:af:3d:2d:a4:23:6e:f0:41:bb:ae:d6:f9:f1:e5:ec:
0b:ef:c2:f9:49:bf:30:60:0a:db:88:ce:ae:3c:16:2f:c4:0a:
08:a6:54:46:5c:cc:93:e2:76:1c:84:9a:2b:5e:96:81:87:3a:
99:4b:b9:35:6e:1a:83:1a:85:99:28:42:e5:06:04:e2:6a:ab:
5a:eb:c3:87:76:ec:18:a1:86:b5:40:f0:ec:a1:51:cd:ee:5f:
32:7e:c9:59:ee:86:81:27:62:03:16:a2:39:dd:7f:45:13:b6:
71:65:e4:73:32:e4:c4:7d:b2:d0:58:a6:03:7f:76:59:f0:cd:
64:e5:b8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 01:28:37 2026 by rpki-client