Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS984.roa
File: AS984.roa (raw, json)
Hash identifier: 0JEgs4v84naFMiDQrwHuyjATGbJU3rKViMv8BlyLre8=
Subject key identifier: D7:3B:7B:4E:0F:0A:E8:78:03:AB:2A:2A:EB:D2:CD:E4:91:24:F8:D3
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 55496AF889C1F5E72F474AC0BE8EEA72DADDD17E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS984.roa
Signing time: Thu 28 May 2026 13:45:19 +0000
ROA not before: Thu 28 May 2026 13:40:19 +0000
ROA not after: Thu 27 May 2027 13:45:19 +0000
asID: 984
IP address blocks: 150.241.209.0/24 maxlen: 24
162.141.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:49:6a:f8:89:c1:f5:e7:2f:47:4a:c0:be:8e:ea:72:da:dd:d1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 28 13:40:19 2026 GMT
Not After : May 27 13:45:19 2027 GMT
Subject: CN=D73B7B4E0F0AE87803AB2A2AEBD2CDE49124F8D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:23:73:d3:ab:5a:53:61:17:1f:4f:b9:b0:f8:
9c:ad:19:0f:94:d3:30:bf:3f:2a:50:8f:c9:3b:cc:
98:9a:1c:60:69:6a:e0:15:26:14:04:36:38:28:27:
d2:c8:ed:b4:48:5a:a6:3a:8f:00:6a:26:d4:15:57:
ca:81:61:ee:d3:10:b7:fa:60:52:4c:2b:38:70:fc:
a5:8c:46:69:4a:86:e5:93:ab:9a:1c:38:c1:88:c6:
41:24:fe:0e:0d:d1:2a:02:6a:e8:21:d2:74:31:6b:
da:c5:92:61:20:1e:60:dd:5c:4d:e8:39:f2:3a:46:
d2:e8:39:81:c3:da:b5:7d:a7:ff:dd:db:7b:be:cb:
79:59:e9:41:6b:93:08:92:cc:e0:e6:46:4d:94:cb:
f0:ba:e0:32:da:29:6e:16:13:b0:97:e7:5f:e5:e3:
5a:3d:33:73:4b:ce:61:6f:ea:3f:7c:7a:8b:80:1d:
9e:e3:76:b9:e2:f0:1b:8a:c7:7a:61:57:25:14:9f:
7a:36:e9:a0:6c:16:7c:fd:b4:ca:65:15:de:69:28:
45:70:25:d6:60:d0:9b:1a:7b:a8:a9:8d:72:a1:c1:
98:57:63:8e:2b:2e:d7:1a:4a:0b:1a:aa:86:98:40:
ed:5c:4c:e1:25:e0:20:3a:71:86:4d:e7:92:e8:e3:
f4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3B:7B:4E:0F:0A:E8:78:03:AB:2A:2A:EB:D2:CD:E4:91:24:F8:D3
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS984.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.209.0/24
162.141.96.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:b8:38:c5:61:e3:ec:ad:22:91:52:68:35:4c:49:0b:fd:b5:
ec:a6:00:9f:6c:eb:82:bf:fb:7b:67:d4:93:c0:18:6e:54:d7:
9e:72:15:c4:b3:e6:7c:28:91:92:e0:21:22:34:39:55:f0:ec:
5b:94:42:56:e0:33:bc:ef:5d:cf:08:49:3b:82:a0:5d:5a:3d:
19:69:5a:22:55:8d:e8:08:7b:d5:fd:b0:43:92:23:3b:8e:68:
d2:80:ef:ce:01:b6:ef:d0:9b:d1:13:c5:a1:49:8f:79:d6:8c:
30:9a:2b:20:bd:54:9f:8d:07:85:67:98:5b:81:80:22:48:b2:
b3:68:8f:17:a3:6f:19:ad:4e:19:8d:0e:27:e8:ff:d9:81:df:
be:55:e0:3c:db:d8:91:c2:80:24:d2:ff:ae:99:06:cc:3b:66:
c2:4a:63:d5:9f:f9:4a:26:40:35:8a:e3:b3:80:4e:9f:b5:19:
17:59:1d:a4:98:2e:87:27:4a:4d:5f:86:85:95:74:83:ae:a4:
79:ee:d6:48:cf:69:a1:d0:92:91:e6:a6:e5:54:1f:3d:94:c2:
ec:9a:f5:90:64:8d:5d:8d:1c:00:8d:9c:cd:96:63:76:76:c0:
30:42:cc:db:24:b0:41:d6:b3:40:c3:41:ca:6c:a1:cb:38:1e:
70:d4:d8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:23 2026 by rpki-client