Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402628.roa
File: AS402628.roa (raw, json)
Hash identifier: s+dKCZoGQBWjCgQYl3OKh1jmiNcP3eupXCXz+7bv3Mc=
Subject key identifier: A4:F5:86:F2:CE:9E:03:D9:FD:51:9F:75:71:F3:0C:B3:EF:8D:2B:3D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 057EAB03E9B97EDD25B7E0FD3758FD0247464013
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402628.roa
Signing time: Thu 30 Jul 2026 05:12:05 +0000
ROA not before: Thu 30 Jul 2026 05:07:05 +0000
ROA not after: Thu 29 Jul 2027 05:12:05 +0000
asID: 402628
IP address blocks: 155.117.4.0/24 maxlen: 24
168.222.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 22:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:7e:ab:03:e9:b9:7e:dd:25:b7:e0:fd:37:58:fd:02:47:46:40:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 30 05:07:05 2026 GMT
Not After : Jul 29 05:12:05 2027 GMT
Subject: CN=A4F586F2CE9E03D9FD519F7571F30CB3EF8D2B3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:61:9c:7b:a0:37:7a:2d:b7:29:f4:ac:4a:49:
10:78:ac:1b:93:01:e6:0b:a1:f2:d9:57:2a:7a:d5:
85:63:2c:07:d3:56:9a:9f:42:01:c7:85:45:d0:31:
c8:9a:bd:d6:46:8a:33:c8:ea:24:0b:0b:dc:72:46:
ac:bc:65:c3:72:13:84:ad:5d:2b:67:5f:1b:08:0e:
d3:09:dc:0b:3f:0d:1a:f7:f1:45:23:61:73:0e:55:
5f:bf:69:04:17:cb:08:cb:57:73:20:5d:ab:fa:21:
b9:9f:5b:6b:c8:1c:28:42:9c:aa:38:bc:2e:d0:b8:
49:94:6d:a3:68:f7:f6:da:20:a7:28:60:e7:64:3a:
7d:9a:d2:bc:89:72:b7:62:a3:22:a3:4d:20:49:54:
ce:45:56:42:61:03:5c:e7:8b:55:1b:3b:30:e6:7a:
b5:3b:50:9c:a5:df:b5:fe:ef:ca:bc:17:d8:0e:f2:
e6:2c:f8:ad:05:a6:16:8e:03:18:62:7f:42:13:4a:
b0:fc:36:5d:54:f8:13:94:16:75:af:43:03:fc:48:
88:10:fe:8a:97:a0:f0:65:43:8b:5e:ab:9c:3b:5b:
f7:35:0a:ee:a9:f1:a9:d2:c2:fb:64:95:50:2f:15:
35:9f:ce:23:fd:ea:17:1b:03:a4:72:77:5e:92:30:
fd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F5:86:F2:CE:9E:03:D9:FD:51:9F:75:71:F3:0C:B3:EF:8D:2B:3D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402628.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.4.0/24
168.222.39.0/24
Signature Algorithm: sha256WithRSAEncryption
01:81:23:f0:46:8f:0f:89:75:70:a5:54:d9:60:e3:12:b5:3c:
7e:30:1b:bc:7e:a2:25:2e:7a:4c:be:aa:85:f4:61:a4:0d:47:
48:59:07:b1:d7:12:4f:e9:be:be:c2:9e:5b:7b:0b:9b:78:ba:
f4:9a:0c:8d:4d:df:f1:9b:58:1a:55:7e:5e:de:ae:65:fe:b0:
bf:c1:b6:2b:3d:4a:f6:13:af:e4:ee:8a:21:2c:17:3c:a1:86:
16:e3:17:11:89:07:95:e2:a6:bd:d0:9c:bc:3c:46:1f:55:82:
9c:77:73:75:27:a6:e8:41:fe:d7:a6:12:94:49:83:f2:ea:12:
52:f8:6d:93:20:de:4f:eb:55:83:ef:a9:41:54:43:ea:20:b4:
12:4c:7f:34:1c:d6:71:ac:2f:31:85:b9:e9:b2:02:19:9f:29:
f5:6c:81:22:87:af:56:f2:29:d2:f5:b3:9b:41:1e:7d:7a:4f:
3f:34:9d:9a:4a:ed:90:1f:4f:58:61:3b:29:b7:54:c2:21:47:
ae:19:27:27:a5:99:85:c1:ee:c3:d4:c5:32:fd:2e:13:c4:b7:
f9:a5:7d:79:16:32:ee:24:27:79:0f:0d:b4:16:9c:a6:c2:f1:
df:be:49:ab:ab:ea:b7:57:39:80:fc:83:64:d1:e0:f2:88:5e:
5f:72:b2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 08:59:55 2026 by rpki-client