Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402865.roa
File: AS402865.roa (raw, json)
Hash identifier: NEXzWd4vlsc/hsjQDoIe61jLw/PH/azqLw+/PHRSAKM=
Subject key identifier: 80:6B:6B:0D:B9:B4:AC:D9:43:11:38:DD:95:F8:31:C8:D4:39:7F:63
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4DE6FD3A2FA19A8E4B0A20218B33BF9D7A77D95D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402865.roa
Signing time: Fri 21 Aug 2026 15:40:34 +0000
ROA not before: Fri 21 Aug 2026 15:35:34 +0000
ROA not after: Fri 20 Aug 2027 15:40:34 +0000
asID: 402865
IP address blocks: 143.14.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 14:17:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:e6:fd:3a:2f:a1:9a:8e:4b:0a:20:21:8b:33:bf:9d:7a:77:d9:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 21 15:35:34 2026 GMT
Not After : Aug 20 15:40:34 2027 GMT
Subject: CN=806B6B0DB9B4ACD9431138DD95F831C8D4397F63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ab:1b:06:e8:f5:03:ee:f2:e0:59:81:16:b2:
0f:7f:64:a8:8e:ff:17:7f:9e:50:42:22:82:cf:f5:
aa:0a:ae:0e:8b:57:ee:39:d2:05:0c:cd:35:0f:f2:
e7:47:84:e1:42:32:a4:b3:be:9c:6e:ed:28:c3:5e:
c5:05:3e:1e:48:04:f0:a5:12:97:e0:0f:31:f8:5f:
95:4b:66:63:38:9c:c0:e8:82:d4:6c:e5:c7:03:1d:
87:23:24:e1:f0:a9:f6:06:63:00:35:8a:3f:ff:b0:
da:93:bc:26:ca:86:9e:cb:bd:88:26:44:9b:53:eb:
f2:7d:da:9b:f9:b0:a3:f6:75:7e:c4:d8:2e:57:3e:
e3:2b:7c:51:78:05:80:9d:d8:4d:00:b4:2c:86:b9:
62:36:77:77:ac:c6:34:9a:cd:9c:aa:78:d1:28:bc:
84:f3:51:3d:68:3f:01:c4:e5:62:89:54:62:9c:82:
e4:62:13:7f:d5:43:20:fa:61:6c:4e:45:5f:4a:9c:
41:54:30:48:33:98:bb:b0:ee:a9:eb:64:13:7d:af:
ca:2d:2c:49:74:d7:a2:4e:35:63:55:b7:a6:bd:71:
b2:dd:78:cf:64:ad:7f:83:d3:99:14:8b:5f:3f:e6:
08:f3:81:99:4b:3c:af:81:0f:f0:8a:1c:04:69:97:
ec:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6B:6B:0D:B9:B4:AC:D9:43:11:38:DD:95:F8:31:C8:D4:39:7F:63
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402865.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.218.0/24
Signature Algorithm: sha256WithRSAEncryption
54:a0:62:68:e3:74:29:f7:3c:48:f8:19:cb:b2:6c:ec:43:1b:
ba:43:f7:e0:4a:ef:c2:75:36:f6:e7:b5:8d:7c:ab:c2:78:2d:
ea:7b:49:04:77:ac:6a:73:6a:95:fc:6d:5a:68:07:8e:71:1a:
be:05:b7:7c:9c:b2:ea:47:ff:75:c5:7f:59:f5:4f:39:d9:91:
3b:79:c5:c6:12:18:a4:a3:89:35:47:66:12:dd:bc:5c:31:3c:
8e:15:0a:7f:f0:54:2f:5b:f5:9e:6a:b9:4d:db:3f:90:43:0d:
05:57:d3:d7:f6:37:d8:81:db:0d:af:bf:48:0a:6e:68:ea:12:
ec:39:7f:ea:4d:f0:c8:d6:d3:5d:13:81:fb:9c:22:16:c9:16:
20:18:fc:32:69:dd:e3:8c:8d:9e:85:db:82:61:e3:fb:21:0d:
23:46:02:77:a5:37:c7:6f:ed:e0:82:6a:9f:ce:ea:17:0d:ba:
3a:1a:26:b5:46:16:5a:ce:71:9d:5d:bf:85:65:4a:11:e8:a2:
6f:3f:e9:0f:df:9c:1c:71:ad:25:f9:b5:6d:20:75:01:3b:06:
e4:d4:71:6b:09:e6:65:62:7a:65:0c:81:c7:95:ec:2b:63:25:
74:fe:f6:08:62:1e:1a:60:cc:d2:d5:6c:1f:02:e9:c8:66:48:
84:e9:70:6b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUTeb9Oi+hmo5LCiAhizO/nXp32V0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA4MjExNTM1MzRaFw0yNzA4MjAxNTQwMzRaMDMxMTAvBgNV
BAMTKDgwNkI2QjBEQjlCNEFDRDk0MzExMzhERDk1RjgzMUM4RDQzOTdGNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfqxsG6PUD7vLgWYEWsg9/ZKiO
/xd/nlBCIoLP9aoKrg6LV+450gUMzTUP8udHhOFCMqSzvpxu7SjDXsUFPh5IBPCl
EpfgDzH4X5VLZmM4nMDogtRs5ccDHYcjJOHwqfYGYwA1ij//sNqTvCbKhp7LvYgm
RJtT6/J92pv5sKP2dX7E2C5XPuMrfFF4BYCd2E0AtCyGuWI2d3esxjSazZyqeNEo
vITzUT1oPwHE5WKJVGKcguRiE3/VQyD6YWxORV9KnEFUMEgzmLuw7qnrZBN9r8ot
LEl016JONWNVt6a9cbLdeM9krX+D05kUi18/5gjzgZlLPK+BD/CKHARpl+wtAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUgGtrDbm0rNlDETjdlfgxyNQ5f2MwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNDAyODY1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjw7a
MA0GCSqGSIb3DQEBCwUAA4IBAQBUoGJo43Qp9zxI+BnLsmzsQxu6Q/fgSu/CdTb2
57WNfKvCeC3qe0kEd6xqc2qV/G1aaAeOcRq+Bbd8nLLqR/91xX9Z9U852ZE7ecXG
Ehiko4k1R2YS3bxcMTyOFQp/8FQvW/WearlN2z+QQw0FV9PX9jfYgdsNr79ICm5o
6hLsOX/qTfDI1tNdE4H7nCIWyRYgGPwyad3jjI2ehduCYeP7IQ0jRgJ3pTfHb+3g
gmqfzuoXDbo6Gia1RhZaznGdXb+FZUoR6KJvP+kP35wcca0l+bVtIHUBOwbk1HFr
CeZlYnplDIHHlewrYyV0/vYIYh4aYMzS1WwfAunIZkiE6XBr
-----END CERTIFICATE-----
Generated at Mon Aug 24 22:25:10 2026 by rpki-client