Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402289.roa
File: AS402289.roa (raw, json)
Hash identifier: Wc2bAHU1NYOcjXqds/vNwk5gjmumIoe4ZhouHvKMPIo=
Subject key identifier: 8E:14:BC:BD:A6:A7:52:70:8A:93:69:9E:35:FB:33:7C:29:80:3F:FA
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 55302987472042152052531DF3C5627D85C1E93D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402289.roa
Signing time: Wed 27 May 2026 07:02:46 +0000
ROA not before: Wed 27 May 2026 06:57:46 +0000
ROA not after: Wed 26 May 2027 07:02:46 +0000
asID: 402289
IP address blocks: 155.117.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 14:25:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:30:29:87:47:20:42:15:20:52:53:1d:f3:c5:62:7d:85:c1:e9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 27 06:57:46 2026 GMT
Not After : May 26 07:02:46 2027 GMT
Subject: CN=8E14BCBDA6A752708A93699E35FB337C29803FFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:52:3c:f6:7e:95:9e:04:7c:8b:5f:36:45:4c:
1f:dc:1a:1a:67:70:f7:a2:cb:b0:2e:ad:cf:01:a5:
32:c5:3d:2a:42:e0:8a:3e:b8:51:59:0f:ad:8c:9e:
cb:c0:df:ad:cf:5d:d9:c5:7c:5e:80:82:d7:cc:b7:
3f:23:af:7c:26:d2:e4:0c:33:44:cd:46:69:f0:e3:
75:16:7f:e7:18:7a:35:d2:12:1e:b6:61:03:a9:d0:
2c:8b:0d:7d:e6:e2:38:d3:95:94:51:1d:d9:31:26:
ca:77:d8:9e:4b:85:f0:60:9c:e2:2d:60:3b:0a:f8:
bd:a5:24:1f:7e:6a:a0:a1:2b:b3:61:2c:0c:e7:c0:
c2:06:03:13:bb:fb:92:dc:d3:c4:75:e5:46:6c:09:
3a:60:c4:37:ac:a4:c6:c3:48:20:06:a6:c4:2e:4e:
7b:2e:50:3f:ec:eb:97:a8:dd:26:c6:bf:c2:4f:73:
de:ca:c2:af:0f:a1:bf:4a:34:8e:b7:2f:e8:54:40:
10:a3:16:f4:0b:b3:1c:eb:a3:14:f7:35:b4:af:fd:
85:8d:a0:f7:24:a3:e9:88:3c:1d:52:bf:78:1d:d9:
61:9a:ba:4f:31:a1:f8:48:96:4e:d4:12:49:b1:15:
e6:43:34:e7:40:55:53:54:8e:29:f1:d7:56:40:55:
8c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:14:BC:BD:A6:A7:52:70:8A:93:69:9E:35:FB:33:7C:29:80:3F:FA
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402289.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.153.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:5f:89:9e:d0:e7:a7:8c:bc:fa:bf:ac:5b:9b:8b:06:a0:b4:
80:66:c7:9d:db:c1:79:d2:ea:40:28:17:9e:f0:c7:3b:6a:3d:
87:ef:14:63:ca:0f:67:9e:45:99:e0:2c:11:f5:08:15:a1:83:
7a:67:af:09:3d:23:57:d0:66:64:3b:e3:48:5a:00:d3:97:18:
fd:94:a4:f5:a3:ae:ed:d6:a6:e8:4e:f6:10:02:82:ec:97:b1:
56:de:d4:89:08:ea:b9:14:f4:1b:a0:92:90:e5:4e:78:30:6e:
7c:2a:d8:71:b2:78:68:f4:a8:1d:8b:3c:69:4f:87:d7:6c:5c:
46:68:b3:e4:5e:3d:6a:31:78:be:88:77:75:34:03:f4:b6:8f:
78:a4:24:04:c5:72:bd:ad:67:f2:d8:15:0d:83:15:1b:d0:af:
d7:39:d0:fe:fe:dd:bf:62:75:16:e8:e8:86:7e:3f:65:ec:3d:
18:1b:eb:b7:40:c1:66:bf:49:c6:bd:8b:76:a7:cf:26:5e:9a:
70:bd:89:5a:53:cd:f5:66:00:d5:60:90:1c:5a:39:45:fc:a2:
03:e1:e7:e3:fd:54:e2:f8:57:d4:ae:fa:f3:eb:49:a3:67:21:
a1:d6:05:21:b9:05:d4:b2:82:1d:c0:5f:88:6f:70:a3:e4:1d:
08:2f:cd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 17:36:43 2026 by rpki-client