Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402664.roa
File: AS402664.roa (raw, json)
Hash identifier: Bna4qhVbFo5/hPbn7uHCNWsTZevIuc/cEGn3R0Gjxas=
Subject key identifier: D3:D2:55:FC:E1:85:AC:FB:87:5C:DA:19:6D:15:56:7F:9B:24:4C:13
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 768BB96CA64AE4E62AC0984FD1B2FFADD8A23AE4
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402664.roa
Signing time: Sat 08 Aug 2026 15:43:27 +0000
ROA not before: Sat 08 Aug 2026 15:38:27 +0000
ROA not after: Sat 07 Aug 2027 15:43:27 +0000
asID: 402664
IP address blocks: 162.141.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:8b:b9:6c:a6:4a:e4:e6:2a:c0:98:4f:d1:b2:ff:ad:d8:a2:3a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 8 15:38:27 2026 GMT
Not After : Aug 7 15:43:27 2027 GMT
Subject: CN=D3D255FCE185ACFB875CDA196D15567F9B244C13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ed:59:54:b5:c6:29:49:37:08:e0:da:29:21:
eb:0f:12:dc:6e:df:de:04:03:fe:cd:b0:3b:db:2a:
e7:7b:12:55:b0:04:9c:ef:ca:81:85:66:4a:53:e9:
15:e2:29:16:8b:86:3a:e1:50:e6:17:3f:aa:85:34:
70:15:82:76:fb:8d:41:54:2f:aa:e8:f4:c3:4e:3d:
59:db:d2:65:d3:77:c4:da:b8:52:5b:d5:e1:59:08:
b9:a7:63:ce:aa:ae:fb:b4:a4:b7:e6:29:23:fd:f6:
71:c8:4d:88:87:3a:42:4e:2e:e6:40:78:f2:fe:0e:
fb:45:5f:85:06:42:24:84:09:d9:4a:22:00:5f:6f:
ed:32:c6:38:cd:90:0c:6a:03:27:63:a2:8e:43:3f:
84:51:b0:8c:78:dd:ed:82:56:51:2d:5c:24:c6:f0:
c4:78:4e:0e:45:9f:14:1b:50:a6:3e:7e:ae:95:41:
1e:65:c9:ca:e2:8e:e2:56:9e:24:dc:03:4d:d9:19:
e9:6e:0e:58:c7:22:b5:51:95:44:2c:8f:9d:25:e5:
c3:0d:f1:9a:eb:f5:12:8f:d0:7c:d0:1a:c3:37:a4:
7b:a4:47:43:e9:fe:90:bf:05:09:48:9b:d1:95:c6:
d8:89:62:67:d5:01:f1:f6:53:ab:92:1a:f5:8d:15:
29:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D2:55:FC:E1:85:AC:FB:87:5C:DA:19:6D:15:56:7F:9B:24:4C:13
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402664.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.5.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:50:ee:0d:c7:97:12:22:80:b1:0c:ff:55:92:d0:9e:b7:6f:
bf:c4:85:aa:ff:51:9b:ff:26:da:60:1e:84:5e:6e:87:bb:6d:
b7:38:e9:2a:27:f3:bf:09:c7:49:21:87:7f:2d:e9:54:b8:18:
b3:ee:1c:c7:e2:24:e7:84:49:fe:ee:02:b9:98:a5:ce:2f:5b:
76:92:29:5c:86:c4:f4:3e:b5:34:c0:27:c8:29:1f:d3:6d:1c:
1a:76:d0:4c:67:7f:b3:de:17:36:cd:ad:c6:43:b6:b5:14:f7:
6b:89:98:c5:5e:4b:fe:18:08:53:31:ea:da:0f:67:6d:a1:0d:
ba:78:ec:de:4f:93:99:0e:59:17:cd:d4:5f:dd:a9:16:29:7b:
a6:71:13:ac:c0:7c:a2:57:24:5a:f4:db:57:ec:f9:e2:db:6c:
39:8e:98:5e:ca:d7:5d:55:fe:b4:7f:a8:81:44:2b:da:bf:69:
0c:34:38:52:5c:81:72:35:0c:9f:6c:6d:e8:d6:13:31:39:58:
b8:ad:61:b0:3b:84:a1:af:dc:61:87:89:10:a9:09:53:78:99:
10:a3:30:60:1b:fa:25:b2:11:bf:2a:4a:1f:34:6e:ed:45:5f:
b1:cc:4e:ad:47:32:b0:01:2f:a9:62:4d:df:18:18:a4:6f:c8:
26:89:77:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:38 2026 by rpki-client