Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: DlaJ6IgxAHvzXAlVgwk/4gd1uKZEoLYdwRV6ulMZYwE=
Subject key identifier: F6:FF:FB:F4:B7:BF:42:69:5F:4B:67:C3:AA:93:D5:69:36:E8:B8:FD
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3F531F967A9869D36951142CF422ECA31F8CE224
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402265.roa
Signing time: Thu 03 Sep 2026 05:58:07 +0000
ROA not before: Thu 03 Sep 2026 05:53:07 +0000
ROA not after: Thu 02 Sep 2027 05:58:07 +0000
asID: 402265
IP address blocks: 140.233.161.0/24 maxlen: 24
155.117.23.0/24 maxlen: 24
155.117.218.0/24 maxlen: 24
155.117.241.0/24 maxlen: 24
162.141.80.0/24 maxlen: 24
162.141.158.0/24 maxlen: 24
162.141.161.0/24 maxlen: 24
162.141.163.0/24 maxlen: 24
167.148.8.0/24 maxlen: 24
167.148.81.0/24 maxlen: 24
167.148.86.0/24 maxlen: 24
168.222.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:53:1f:96:7a:98:69:d3:69:51:14:2c:f4:22:ec:a3:1f:8c:e2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 3 05:53:07 2026 GMT
Not After : Sep 2 05:58:07 2027 GMT
Subject: CN=F6FFFBF4B7BF42695F4B67C3AA93D56936E8B8FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:21:0b:50:24:c0:f2:9d:cb:b1:2e:e0:82:84:
58:fc:06:78:40:39:f0:6d:34:8a:40:ee:13:15:e3:
a4:17:c2:39:0e:a0:8b:60:ba:18:f8:ab:50:9b:13:
94:03:19:fa:af:c7:22:77:4e:51:c3:99:c7:23:e8:
f7:6e:37:c7:b1:c5:9c:57:8f:5a:90:cf:4d:39:e0:
ed:8e:19:c7:e9:03:78:05:10:8a:90:b9:b6:2b:d5:
3e:47:ae:27:81:6c:9d:8b:2b:6d:0f:e7:5e:aa:29:
cb:3a:cd:98:36:cb:98:01:24:1b:a5:f8:50:42:f9:
63:d5:41:8c:81:28:ba:cb:e4:61:51:5f:c7:84:b1:
df:2e:36:fa:02:c3:75:31:f5:27:8a:b3:78:a8:90:
bc:67:f3:fc:22:75:e0:0e:a7:87:79:8f:36:62:e1:
72:03:71:20:4e:40:7f:17:93:36:34:92:18:40:ee:
d8:b2:67:60:bf:9a:80:9e:e3:b0:86:62:d9:d9:68:
7b:3d:f2:0e:a9:3d:64:79:5e:56:e9:e2:a4:d5:ff:
fa:34:93:0b:d9:98:ea:40:df:e2:4f:f0:f8:d9:ed:
15:71:6f:7f:3d:b8:ab:ea:24:59:82:dd:e7:b0:b3:
f3:34:40:8c:cf:c4:ad:3d:7c:fa:25:35:4c:41:8e:
7b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FF:FB:F4:B7:BF:42:69:5F:4B:67:C3:AA:93:D5:69:36:E8:B8:FD
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.161.0/24
155.117.23.0/24
155.117.218.0/24
155.117.241.0/24
162.141.80.0/24
162.141.158.0/24
162.141.161.0/24
162.141.163.0/24
167.148.8.0/24
167.148.81.0/24
167.148.86.0/24
168.222.26.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:e1:b9:1c:52:47:34:d7:22:ee:e1:c6:9e:0e:6f:f7:8e:d3:
26:fa:60:cb:81:74:49:3e:2a:ae:17:56:ee:8d:6c:c3:e1:d8:
e3:68:95:72:e0:68:ef:3e:44:1a:ae:83:1d:46:b3:05:f3:9f:
1f:b3:e1:52:68:61:04:c5:ca:02:88:df:4d:28:82:06:a2:9d:
4d:7d:d6:aa:ec:86:df:83:05:00:6a:5a:90:ae:25:ae:73:ff:
b8:95:7e:46:fb:9e:ce:2a:4e:36:fb:26:d4:43:59:86:4b:3b:
22:8e:0a:86:a8:6c:35:3f:8d:6d:74:7c:4f:7b:16:57:d6:fe:
23:02:c5:e2:b6:04:21:38:c0:b4:da:c6:6e:47:d8:df:ea:d0:
4f:49:da:95:32:61:b6:a5:33:bb:b2:10:5a:52:22:7c:b8:8c:
b0:ae:8b:6a:f6:9e:22:1f:9b:19:08:99:28:e2:08:e8:90:1d:
0b:e4:c3:57:53:c3:29:7c:9d:97:99:01:91:ca:d8:23:6e:84:
0d:20:34:ae:1a:ff:db:3e:c8:36:89:0b:5d:4e:99:e3:6d:90:
f9:13:5b:24:ff:b3:c8:79:5a:e5:9d:91:41:4a:10:f4:de:e3:
14:bd:d7:97:0d:bc:b3:91:03:6c:49:49:bf:03:ed:6e:f0:22:
e3:33:42:09
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUP1MflnqYadNpURQs9CLsox+M4iQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA5MDMwNTUzMDdaFw0yNzA5MDIwNTU4MDdaMDMxMTAvBgNV
BAMTKEY2RkZGQkY0QjdCRjQyNjk1RjRCNjdDM0FBOTNENTY5MzZFOEI4RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKIQtQJMDyncuxLuCChFj8BnhA
OfBtNIpA7hMV46QXwjkOoItguhj4q1CbE5QDGfqvxyJ3TlHDmccj6PduN8exxZxX
j1qQz0054O2OGcfpA3gFEIqQubYr1T5HrieBbJ2LK20P516qKcs6zZg2y5gBJBul
+FBC+WPVQYyBKLrL5GFRX8eEsd8uNvoCw3Ux9SeKs3iokLxn8/wideAOp4d5jzZi
4XIDcSBOQH8XkzY0khhA7tiyZ2C/moCe47CGYtnZaHs98g6pPWR5Xlbp4qTV//o0
kwvZmOpA3+JP8PjZ7RVxb389uKvqJFmC3eews/M0QIzPxK09fPolNUxBjnuvAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU9v/79Le/QmlfS2fDqpPVaTbouP0wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNDAyMjY1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAjOmh
AwQAm3UXAwQAm3XaAwQAm3XxAwQAoo1QAwQAoo2eAwQAoo2hAwQAoo2jAwQAp5QI
AwQAp5RRAwQAp5RWAwQAqN4aMA0GCSqGSIb3DQEBCwUAA4IBAQAd4bkcUkc01yLu
4caeDm/3jtMm+mDLgXRJPiquF1bujWzD4djjaJVy4GjvPkQaroMdRrMF858fs+FS
aGEExcoCiN9NKIIGop1Nfdaq7IbfgwUAalqQriWuc/+4lX5G+57OKk42+ybUQ1mG
SzsijgqGqGw1P41tdHxPexZX1v4jAsXitgQhOMC02sZuR9jf6tBPSdqVMmG2pTO7
shBaUiJ8uIywrotq9p4iH5sZCJko4gjokB0L5MNXU8MpfJ2XmQGRytgjboQNIDSu
Gv/bPsg2iQtdTpnjbZD5E1sk/7PIeVrlnZFBShD03uMUvdeXDbyzkQNsSUm/A+1u
8CLjM0IJ
-----END CERTIFICATE-----
Generated at Thu Sep 3 09:23:10 2026 by rpki-client