Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402288.roa
File: AS402288.roa (raw, json)
Hash identifier: 6oDK0oQBoGdXhmyA+Kx9lvb7rjX3zHDl4dB6kenWhSo=
Subject key identifier: 6D:F5:AB:2A:2D:D0:C4:62:B5:D8:29:AB:C2:19:6E:17:3E:D0:62:ED
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 72C53585630D50FB3D18C5C3C05AE85751D76849
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402288.roa
Signing time: Fri 14 Aug 2026 12:12:39 +0000
ROA not before: Fri 14 Aug 2026 12:07:39 +0000
ROA not after: Fri 13 Aug 2027 12:12:39 +0000
asID: 402288
IP address blocks: 143.14.182.0/24 maxlen: 24
155.117.228.0/24 maxlen: 24
162.141.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:c5:35:85:63:0d:50:fb:3d:18:c5:c3:c0:5a:e8:57:51:d7:68:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 14 12:07:39 2026 GMT
Not After : Aug 13 12:12:39 2027 GMT
Subject: CN=6DF5AB2A2DD0C462B5D829ABC2196E173ED062ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:48:e2:11:72:89:d5:34:19:5d:60:87:53:f6:
66:86:d4:b3:b7:4f:53:d1:84:68:8d:02:b4:7f:a7:
b2:b4:c4:75:cf:ca:db:15:29:76:01:b4:c9:5c:8b:
e9:ec:e4:9a:d3:ad:6b:d6:fb:8c:5d:bf:64:65:ca:
75:28:63:55:32:50:3a:f7:13:32:cf:0b:e9:cf:70:
57:ea:8a:68:b0:ea:9b:cf:11:1c:46:07:91:2c:40:
a3:db:e1:16:6a:9a:7b:18:8c:4e:ff:54:83:4a:21:
19:36:4c:d6:7a:b7:de:cc:32:8b:55:e8:67:de:4b:
a0:14:f8:02:1d:b1:96:ce:25:00:a0:24:20:aa:f0:
e9:c1:ed:73:7e:9e:60:2d:5e:eb:f8:ae:f0:44:74:
ea:77:c8:9d:84:12:b6:ad:10:19:d0:d7:ff:89:a8:
63:37:b5:44:a5:e0:01:b0:69:18:4c:8f:52:96:47:
bd:88:3b:67:ba:b3:46:83:2d:7b:98:68:04:42:fc:
7e:98:1c:d0:5f:78:24:0e:f6:8e:dd:31:f2:91:d2:
35:ce:61:ba:ad:7f:2f:73:30:41:01:d7:8a:8b:02:
64:e1:d3:a8:54:cc:8c:a0:b1:79:33:4f:e6:2b:33:
80:a2:30:d3:0c:23:8f:e1:68:0b:1e:92:14:b1:f5:
99:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F5:AB:2A:2D:D0:C4:62:B5:D8:29:AB:C2:19:6E:17:3E:D0:62:ED
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402288.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.182.0/24
155.117.228.0/24
162.141.44.0/24
Signature Algorithm: sha256WithRSAEncryption
05:cb:f9:f8:c6:ff:1e:60:e7:72:4f:a9:3b:07:2c:7c:f9:3a:
21:46:cb:b2:87:7a:25:08:f2:1c:d3:e3:2e:6f:50:53:c5:b9:
57:79:13:34:d1:f5:b9:5f:82:bb:83:0c:80:2c:9e:0a:5e:2c:
97:2a:9d:8d:9e:f8:69:68:86:bd:a1:52:0f:1a:da:14:20:c9:
8a:93:ec:35:83:30:8b:6e:c1:c1:02:f7:d1:07:be:89:d2:67:
e4:7c:1c:ef:e4:81:c2:ea:ca:55:91:a1:8b:6e:2a:25:32:65:
0a:34:92:49:ab:c7:95:29:c8:d1:c1:24:ac:07:78:65:7c:f7:
74:e4:11:d1:88:4c:1f:06:b5:b7:a6:59:0e:26:47:c0:b3:2b:
1e:37:d8:0a:50:85:03:61:ff:d0:a0:16:8d:7c:ef:4a:73:0b:
4a:0a:24:18:2a:ed:37:fb:6d:84:0d:1f:8c:32:ab:90:da:48:
c9:68:5c:bc:fd:47:24:2f:7f:09:84:fa:3e:ce:1b:22:c2:53:
af:30:92:df:7f:46:8b:02:16:36:b0:e0:fd:cb:40:56:dc:f6:
17:f3:c9:9f:bc:f5:fb:51:8f:1f:8d:60:62:0f:e1:d0:b1:c2:
fe:76:73:31:92:8d:4d:0e:13:99:77:87:8c:92:61:29:ac:f5:
c8:57:b6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:28:32 2026 by rpki-client