Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS996.roa
File: AS996.roa (raw, json)
Hash identifier: tTsbKAsrPfylMwwGEDkH6Rw2iH2ewdZHl+pE7J8rD+U=
Subject key identifier: CC:37:7E:1D:36:B5:76:93:84:51:B2:B9:A0:32:CA:CC:D7:33:A4:06
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 63DE0A50CE6F44A3BC4E467D307349DA4580467E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS996.roa
Signing time: Mon 12 Oct 2026 02:49:36 +0000
ROA not before: Mon 12 Oct 2026 02:44:36 +0000
ROA not after: Mon 11 Oct 2027 02:49:36 +0000
asID: 996
IP address blocks: 167.148.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:de:0a:50:ce:6f:44:a3:bc:4e:46:7d:30:73:49:da:45:80:46:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 12 02:44:36 2026 GMT
Not After : Oct 11 02:49:36 2027 GMT
Subject: CN=CC377E1D36B576938451B2B9A032CACCD733A406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:b2:a9:33:b2:48:dd:b1:85:63:f2:65:3b:c8:
64:00:b9:d6:a8:98:21:01:c5:6c:fa:38:3c:f5:8c:
c6:a2:9b:07:c1:61:d8:f7:63:3b:3f:e8:b4:85:b9:
4b:5c:33:76:cc:7d:0d:2e:9d:d8:3d:00:cf:af:b7:
24:5a:7c:a5:84:02:55:32:4a:02:15:c8:3a:b5:a5:
fb:ec:ae:3c:e4:31:5d:70:58:d2:8a:42:7e:5f:02:
79:cf:f0:60:e5:27:cd:e7:0f:18:a8:b6:e9:74:21:
71:66:ea:1e:20:3a:df:32:6d:0a:79:0d:04:e8:1a:
b3:17:53:68:ba:3a:9f:60:1e:c2:41:e8:c2:3a:3b:
12:bc:58:05:ee:18:73:84:a6:27:33:4b:da:d9:af:
00:a0:1e:05:a6:78:e1:b0:b6:86:54:2a:92:bd:63:
1c:3f:78:92:bd:94:07:8e:28:0d:fb:a9:6e:54:06:
f5:26:0a:0b:35:6d:89:a2:12:b7:1e:22:73:1c:0b:
12:87:30:54:3d:e9:52:c8:b8:aa:13:b6:2b:aa:f9:
91:5e:47:93:47:16:b8:e8:1c:0f:ad:e4:c2:7e:dd:
8d:4d:14:7a:5a:68:80:32:04:8b:42:7c:b0:91:1c:
a8:30:ae:a9:df:9d:2f:bf:7a:9c:03:d6:5b:43:4d:
aa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:37:7E:1D:36:B5:76:93:84:51:B2:B9:A0:32:CA:CC:D7:33:A4:06
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS996.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.130.0/23
Signature Algorithm: sha256WithRSAEncryption
01:f1:cf:20:3d:ab:cd:72:c0:b3:f4:64:fa:50:60:d6:5c:cc:
fd:ca:ed:9d:2d:05:0d:7a:f8:c7:cc:04:f4:7e:17:69:52:66:
ff:65:a2:90:f5:16:73:39:b5:bd:f1:d9:62:09:6b:f4:43:be:
7d:fd:c1:05:59:4e:52:d0:23:34:f3:9d:02:47:e2:63:68:2e:
90:b7:c4:24:91:91:dc:00:0b:1f:b8:ef:ff:50:bc:32:3b:1c:
0f:aa:bd:ab:74:7c:5a:8f:70:ea:0e:b5:d8:f5:9d:d4:09:fd:
af:61:b9:ae:81:ec:f3:f4:84:5f:33:73:0c:01:51:b6:0e:48:
dc:f1:24:ea:b7:9c:20:1c:4f:c8:1d:67:cd:82:f2:0a:cf:31:
09:d7:9a:0f:24:11:ca:85:40:44:05:61:de:88:4a:c2:9d:1e:
19:88:05:4e:11:bd:d8:91:af:fe:73:11:b9:6d:95:b2:18:f3:
d1:34:2e:96:10:06:97:31:ab:ba:33:b8:8e:d7:6c:e9:05:31:
20:d4:0a:da:bc:4e:18:5d:47:07:c4:f8:d5:95:79:03:60:81:
1f:54:99:02:f9:5d:bf:27:87:b9:35:7e:2f:e6:a7:79:26:2c:
d4:09:9e:ab:96:23:11:28:79:6b:a0:10:31:a8:d9:22:d3:e7:
24:c9:58:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 17:56:59 2026 by rpki-client