Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: YMVa2D9HZpqC/RIkaSSj/EhIji0tm6KM40yHmJhejzU=
Subject key identifier: 77:0D:EB:14:EA:82:99:96:20:50:65:8A:EC:81:E7:8E:6E:54:00:F2
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 564E2FD5D89C251C2DC0E7D8BC124784C82FE4F5
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402265.roa
Signing time: Sat 03 Oct 2026 10:33:10 +0000
ROA not before: Sat 03 Oct 2026 10:28:10 +0000
ROA not after: Sat 02 Oct 2027 10:33:10 +0000
asID: 402265
IP address blocks: 66.132.235.0/24 maxlen: 24
66.132.252.0/24 maxlen: 24
69.90.34.0/24 maxlen: 24
69.90.116.0/24 maxlen: 24
69.90.118.0/24 maxlen: 24
69.90.157.0/24 maxlen: 24
76.74.214.0/24 maxlen: 24
76.74.215.0/24 maxlen: 24
96.62.127.0/24 maxlen: 24
168.222.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:4e:2f:d5:d8:9c:25:1c:2d:c0:e7:d8:bc:12:47:84:c8:2f:e4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 3 10:28:10 2026 GMT
Not After : Oct 2 10:33:10 2027 GMT
Subject: CN=770DEB14EA8299962050658AEC81E78E6E5400F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4b:14:c5:47:e1:c4:ce:82:d3:7d:e9:ea:b3:
cc:c7:15:31:97:ac:e5:c1:29:f0:d6:ce:86:3e:a7:
83:3f:b4:79:f2:2a:cb:45:06:d4:40:37:95:a1:03:
ef:bf:d4:5d:f7:88:7d:dc:5c:ae:92:be:df:42:51:
4e:e3:84:3f:45:d0:57:c4:4c:8b:38:fc:da:e4:c6:
ae:09:36:4d:87:6b:04:f5:7f:26:ac:1b:f6:bc:18:
34:8c:b7:52:e8:11:64:44:8f:89:d8:ea:f2:ed:03:
3e:e0:20:f7:24:13:44:c3:83:6b:30:15:0d:3d:88:
67:94:80:64:3a:86:cd:94:d3:2f:e7:3f:bb:99:4f:
80:5d:9e:04:71:bf:d7:48:fe:95:85:7f:78:14:dd:
51:25:3f:af:63:bb:04:5f:d8:7c:e4:98:b3:dc:66:
18:85:5b:73:57:df:73:75:e8:f4:d9:ab:2e:c4:65:
e4:5e:69:aa:db:36:0e:d9:e8:f1:db:2a:be:5b:e8:
77:a2:d4:cf:b4:5a:9b:67:c6:81:5e:f4:56:01:f7:
5a:f0:90:cc:6d:d2:61:23:68:a1:a8:e2:29:ee:e3:
06:5f:6b:7a:f4:a7:e9:27:29:83:8e:13:b8:c7:f4:
df:8f:93:1f:6a:ce:7a:5e:44:7a:0b:fe:db:a7:d4:
d0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0D:EB:14:EA:82:99:96:20:50:65:8A:EC:81:E7:8E:6E:54:00:F2
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.132.235.0/24
66.132.252.0/24
69.90.34.0/24
69.90.116.0/24
69.90.118.0/24
69.90.157.0/24
76.74.214.0/23
96.62.127.0/24
168.222.37.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:be:43:ae:a6:93:3e:41:42:a8:fc:4a:47:66:07:47:1b:e7:
9c:d3:f0:7b:ce:a2:d2:fb:da:f9:7b:21:24:9e:5c:27:75:23:
fa:cf:ef:4c:ca:40:53:69:bb:0b:2b:55:af:9b:57:54:91:e7:
2d:55:2c:89:94:07:0d:f3:5d:82:6f:ef:04:8f:82:cb:69:d1:
84:05:17:e3:7a:a8:67:29:37:84:35:d0:a6:28:87:00:dc:28:
80:d9:c0:45:9b:dc:fa:f3:a6:be:aa:7c:f0:a6:c0:a5:23:9c:
28:72:75:90:4a:cf:b1:f6:68:d1:bf:62:87:43:68:04:21:65:
07:b5:be:62:3b:50:ed:f3:36:5a:93:ba:d6:90:b7:e7:49:85:
36:ae:1c:07:f7:e9:52:26:f5:27:b2:26:99:86:53:4d:18:60:
17:81:48:94:b1:36:12:8c:31:25:98:a5:ce:4f:dd:22:fd:f7:
71:cf:97:bf:94:3e:ac:9f:a8:4f:be:4a:e0:bc:f8:2b:0f:cf:
81:cc:8d:84:c6:8c:c8:0a:47:0b:b7:5b:de:27:fc:d2:68:f7:
2a:50:2d:c2:64:fa:bb:52:05:7c:44:e6:6d:27:c9:f8:42:03:
19:8d:56:ac:09:52:c3:6a:6f:86:83:da:5f:3a:24:e8:a4:ca:
08:d8:94:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 13:16:31 2026 by rpki-client