Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS393942.roa
File: AS393942.roa (raw, json)
Hash identifier: 8gsUj0D2UZiLTaOYqKFGBwxQkneOMRztzCncZ8vZ7sE=
Subject key identifier: 69:05:0A:30:A0:7A:61:21:1A:97:31:9A:05:1C:E6:F1:91:F9:9A:AB
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 6F3E886190398767FA4C6F24AB7F71C12208EBA1
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS393942.roa
Signing time: Wed 15 Jul 2026 03:52:50 +0000
ROA not before: Wed 15 Jul 2026 03:47:50 +0000
ROA not after: Wed 14 Jul 2027 03:52:50 +0000
asID: 393942
IP address blocks: 212.60.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 17:37:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:3e:88:61:90:39:87:67:fa:4c:6f:24:ab:7f:71:c1:22:08:eb:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Jul 15 03:47:50 2026 GMT
Not After : Jul 14 03:52:50 2027 GMT
Subject: CN=69050A30A07A61211A97319A051CE6F191F99AAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e7:dc:be:1f:d9:95:43:77:ff:22:2b:c6:d4:
9a:12:4c:9b:91:9a:00:05:ef:00:a6:88:cc:29:50:
f1:28:7d:f2:65:5e:cd:44:a9:6f:44:ae:77:5d:29:
83:56:24:d7:c3:33:a5:db:bf:37:c6:44:08:36:a4:
75:db:65:ef:fc:96:fa:aa:58:b4:f4:25:5c:71:24:
6a:ad:ff:93:a2:78:dc:c1:0c:2a:ff:0a:e2:a7:53:
03:4a:62:e3:59:1c:bc:1e:2c:df:5a:35:64:99:96:
c9:17:1c:2e:7a:ba:b4:f4:8a:7a:7f:5d:f8:4d:7e:
08:09:43:72:5f:9a:a5:fa:61:34:6b:ab:8c:95:4b:
f4:bd:2c:64:90:fa:30:8f:fa:7d:bf:95:3a:b1:df:
3f:1e:fd:3c:eb:4b:e3:ca:db:4f:ca:ee:60:60:93:
cb:b7:56:e2:7d:dd:07:76:79:50:5c:1e:b0:2f:5d:
3c:f2:db:c7:88:e4:3c:83:f6:d7:b5:32:81:86:0a:
37:ea:00:a8:e4:3a:5f:42:57:bd:5b:b1:19:c9:93:
4a:38:51:e6:9d:ce:a1:cd:74:19:62:38:6d:de:f8:
ca:2f:9e:19:20:85:3b:25:87:e6:cd:96:c9:df:42:
c8:5f:ed:f2:f4:12:cd:07:fa:16:96:9a:f4:b8:89:
0b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:05:0A:30:A0:7A:61:21:1A:97:31:9A:05:1C:E6:F1:91:F9:9A:AB
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS393942.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.60.159.0/24
Signature Algorithm: sha256WithRSAEncryption
31:d2:ef:83:e2:6d:4b:b7:c0:de:40:04:b7:1a:ac:2d:48:86:
9c:26:54:98:27:26:de:34:3c:a9:08:da:97:22:e8:e7:9b:4a:
29:28:17:26:a4:16:09:fa:8d:47:7c:c1:ea:96:da:37:95:86:
68:dc:7a:b4:0f:e4:b7:7a:a6:d9:a7:11:a5:31:f1:ca:00:85:
50:c9:b5:3d:31:5f:f5:48:6b:cb:d0:36:4b:b6:84:e0:30:83:
9e:a2:e1:44:ed:6f:0d:83:1c:dc:03:ca:90:7e:da:80:57:32:
2c:5f:91:1d:21:32:b4:8c:70:b8:b7:28:f6:a9:2d:7c:b8:a9:
fc:15:3f:12:f7:7b:75:f3:ea:ca:27:19:0e:bc:bf:20:30:3f:
c5:fe:58:e7:c2:d7:4f:42:2d:7b:20:96:db:07:3d:d3:07:85:
db:74:19:c5:57:03:7a:d8:5e:65:f1:47:9c:45:68:53:07:e2:
4e:38:f0:fd:69:34:c2:ec:60:fc:e3:c5:18:9f:56:89:a7:ac:
e4:a0:f6:80:5a:99:a9:88:05:69:55:03:2c:36:de:24:6a:47:
94:1d:44:b5:03:c4:7e:64:78:c9:8c:3b:a2:ee:6a:70:cc:41:
34:df:1f:92:18:7c:00:7d:2a:3d:1c:d3:fe:91:21:f6:1d:19:
d6:0a:b7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:28:16 2026 by rpki-client