Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402267.roa
File: AS402267.roa (raw, json)
Hash identifier: WBFYyadr5zgD9EnHlFO1jHbArQlRHdFqioGqItTMsvA=
Subject key identifier: 3D:73:75:3B:76:DA:FA:31:42:D0:C6:99:C6:CB:D1:FF:3A:D3:02:E6
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6F852487A4CCC6A247F70C32691728D73B5FD750
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402267.roa
Signing time: Wed 27 May 2026 08:57:42 +0000
ROA not before: Wed 27 May 2026 08:52:42 +0000
ROA not after: Wed 26 May 2027 08:57:42 +0000
asID: 402267
IP address blocks: 162.141.36.0/24 maxlen: 24
162.141.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:85:24:87:a4:cc:c6:a2:47:f7:0c:32:69:17:28:d7:3b:5f:d7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 27 08:52:42 2026 GMT
Not After : May 26 08:57:42 2027 GMT
Subject: CN=3D73753B76DAFA3142D0C699C6CBD1FF3AD302E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:52:39:f8:c0:67:42:8a:2e:f9:12:24:2c:
85:bc:f6:04:fa:43:42:cb:08:23:cd:ca:39:86:c2:
2b:6c:96:04:4b:1f:17:e2:9f:26:26:58:9b:82:05:
f3:07:7c:0c:49:39:41:cc:fb:45:59:53:5c:96:13:
dd:ed:2f:0c:81:87:c7:9c:bb:8a:b2:05:37:b6:70:
83:dd:7d:16:c8:29:9c:f6:db:bf:a5:ea:a0:b2:35:
bf:b7:57:2e:09:f7:47:f7:74:d5:36:c1:7d:eb:4c:
5e:29:05:1d:ed:fb:77:16:91:c9:d8:91:a2:0b:5c:
93:a4:bb:93:85:ed:41:30:32:82:65:ab:52:2d:23:
65:77:12:13:46:40:85:2b:a2:59:4d:0d:05:47:0d:
97:33:1f:b7:6b:34:99:a4:8e:23:05:72:80:f3:90:
9b:9b:5a:be:df:3a:51:9a:9d:33:af:90:42:c4:02:
22:ea:5d:ae:f0:80:29:db:9d:92:35:16:7a:01:8b:
8a:64:6e:98:11:36:3e:47:34:e3:db:b5:f2:45:57:
d1:3a:b1:ba:08:7d:e0:07:59:f2:3a:ba:85:2b:17:
ce:3f:1e:c5:ad:06:52:62:ae:c9:73:2e:72:c6:b1:
25:70:24:a1:c9:40:05:bc:82:74:66:ba:5c:2c:46:
38:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:73:75:3B:76:DA:FA:31:42:D0:C6:99:C6:CB:D1:FF:3A:D3:02:E6
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.36.0/24
162.141.125.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:67:30:e0:ef:e3:d2:2c:58:18:63:a1:e9:cf:9f:5f:c0:54:
ba:ed:00:ab:1d:ce:0c:da:e3:2d:fb:ba:19:fc:69:e1:1b:30:
bc:8b:37:cc:e0:88:0c:b6:96:49:ba:2b:6e:42:e1:7e:4d:59:
6f:09:b2:f9:0b:99:bd:a5:03:19:ab:69:f3:eb:15:67:62:45:
0b:4b:eb:91:c7:9d:67:e6:01:a6:fb:2c:7e:d8:9b:5a:ab:1f:
4e:94:8b:71:75:9c:41:6f:2b:b8:3c:fd:73:01:84:ed:ac:a4:
b1:3d:97:ee:0c:2d:61:a6:ba:4e:5c:05:fa:99:55:f8:b4:ad:
0e:c5:36:f2:ee:5b:a6:f1:f5:91:02:94:72:f0:e5:af:37:98:
a9:c2:c9:a6:26:54:b7:cb:7e:46:d5:ee:b6:db:9f:aa:14:8a:
7d:4e:cf:c4:47:c3:a9:6e:f6:19:bb:d4:5e:7f:b6:03:b4:56:
77:4e:91:f7:db:40:15:a6:3a:0a:de:c6:26:28:d0:de:28:f2:
89:1f:89:c6:ca:06:0d:a3:07:19:bb:7a:b1:28:95:3a:67:d7:
9e:dc:93:af:a3:1d:c5:af:74:86:56:0d:19:3d:1e:75:07:40:
bf:0a:b5:3a:0a:7c:98:7f:13:73:80:8f:52:70:8b:02:07:55:
80:50:1b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:15:24 2026 by rpki-client