Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS399073.roa
File: AS399073.roa (raw, json)
Hash identifier: WVbCJHWiNZRHGmJNGzgiysG5FC/81As2A7As9yWVYEA=
Subject key identifier: AE:69:F5:38:FF:98:2A:2F:56:43:23:AF:18:CC:AA:68:B3:59:23:AA
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 44CEE863A949D617716F86C9C3E2007CB8187FDE
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS399073.roa
Signing time: Tue 01 Sep 2026 10:49:30 +0000
ROA not before: Tue 01 Sep 2026 10:44:30 +0000
ROA not after: Tue 31 Aug 2027 10:49:30 +0000
asID: 399073
IP address blocks: 46.236.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:ce:e8:63:a9:49:d6:17:71:6f:86:c9:c3:e2:00:7c:b8:18:7f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 1 10:44:30 2026 GMT
Not After : Aug 31 10:49:30 2027 GMT
Subject: CN=AE69F538FF982A2F564323AF18CCAA68B35923AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a5:9d:8f:45:21:ef:03:9d:ff:0a:33:0d:1d:
5f:68:05:73:9d:07:d0:da:a8:81:e0:f9:3c:9e:02:
9d:05:63:f8:13:fd:f3:6d:07:06:c4:c4:78:06:07:
00:8b:8e:38:8f:f4:8e:13:29:41:aa:86:3f:d2:94:
36:3f:aa:84:92:40:fc:75:d5:6b:3c:40:98:d1:f6:
0a:48:e1:3e:30:66:b4:9b:96:a4:a0:b5:f3:cc:0d:
60:6c:6c:d9:cb:94:02:8f:b7:aa:21:53:0d:2e:92:
53:70:4e:dc:05:80:61:89:1f:ff:95:e6:29:27:21:
5f:20:cb:47:44:c1:0d:48:1f:7e:6a:bc:cb:25:79:
1e:a6:55:e5:d1:93:a1:4a:9c:f9:a9:55:48:80:22:
3f:49:e7:8d:e4:e3:c1:a3:bf:11:86:26:01:2e:57:
39:0e:64:e5:a2:fb:91:a7:3d:2d:f0:cd:b0:ac:b4:
7b:b4:f3:79:dc:f1:c6:64:ad:4d:77:cb:86:09:bb:
a3:e1:da:d1:a2:06:1b:17:21:70:1f:82:13:b7:a5:
40:b2:a1:f6:96:9e:1d:f2:fe:f9:5d:36:31:e8:b2:
13:4f:60:72:3b:01:cf:8a:ab:da:de:b2:69:85:49:
66:35:a2:b6:58:f8:84:36:ba:4d:4f:c6:4e:a7:ae:
c2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:69:F5:38:FF:98:2A:2F:56:43:23:AF:18:CC:AA:68:B3:59:23:AA
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS399073.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.242.0/24
Signature Algorithm: sha256WithRSAEncryption
26:88:81:ca:e2:cb:ab:b1:13:57:64:7c:3d:18:36:2a:fc:07:
9e:b7:f0:00:a1:04:d9:c8:33:ad:12:fc:12:9f:4b:55:d8:48:
0a:ef:fd:08:f1:e0:e7:af:45:b7:0c:84:5d:ea:3b:70:30:dd:
d5:8b:3c:14:24:54:93:70:c7:60:7b:cb:c2:94:63:3d:3a:f0:
d8:c1:6c:2c:08:50:8a:3d:28:2d:67:89:63:f6:7f:ee:13:fa:
1c:a1:1e:af:6c:29:d0:40:2f:25:19:48:58:bd:26:1e:00:f5:
71:92:c6:6b:2a:fc:bf:1e:55:34:4d:b7:14:64:56:bd:62:f7:
3b:72:2d:a3:00:03:14:fc:22:3c:0a:5c:67:8a:d9:bc:61:0b:
a0:c4:22:f4:6f:7b:d7:cf:3e:95:18:50:ea:8d:31:65:cc:ab:
82:4e:98:29:db:3a:24:ab:db:60:45:47:0b:e7:e8:39:02:5d:
fa:6d:0b:2b:c4:50:2d:7e:34:57:25:8c:01:75:3a:58:ca:d2:
43:2d:57:f2:91:d9:5d:dc:e9:af:ee:44:50:24:45:04:1e:47:
df:71:bc:6b:7c:3c:62:be:e4:f1:cd:1a:31:04:18:96:42:b9:
9f:d6:a9:23:b5:13:ca:46:a0:56:78:3a:4f:87:e9:b9:de:df:
18:14:61:21
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIURM7oY6lJ1hdxb4bJw+IAfLgYf94wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNjA5MDExMDQ0MzBaFw0yNzA4MzExMDQ5MzBaMDMxMTAvBgNV
BAMTKEFFNjlGNTM4RkY5ODJBMkY1NjQzMjNBRjE4Q0NBQTY4QjM1OTIzQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvpZ2PRSHvA53/CjMNHV9oBXOd
B9DaqIHg+TyeAp0FY/gT/fNtBwbExHgGBwCLjjiP9I4TKUGqhj/SlDY/qoSSQPx1
1Ws8QJjR9gpI4T4wZrSblqSgtfPMDWBsbNnLlAKPt6ohUw0uklNwTtwFgGGJH/+V
5iknIV8gy0dEwQ1IH35qvMsleR6mVeXRk6FKnPmpVUiAIj9J543k48GjvxGGJgEu
VzkOZOWi+5GnPS3wzbCstHu083nc8cZkrU13y4YJu6Ph2tGiBhsXIXAfghO3pUCy
ofaWnh3y/vldNjHoshNPYHI7Ac+Kq9resmmFSWY1orZY+IQ2uk1Pxk6nrsKjAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUrmn1OP+YKi9WQyOvGMyqaLNZI6owHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt
NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMzk5MDczLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuzy
MA0GCSqGSIb3DQEBCwUAA4IBAQAmiIHK4sursRNXZHw9GDYq/Aeet/AAoQTZyDOt
EvwSn0tV2EgK7/0I8eDnr0W3DIRd6jtwMN3VizwUJFSTcMdge8vClGM9OvDYwWws
CFCKPSgtZ4lj9n/uE/ocoR6vbCnQQC8lGUhYvSYeAPVxksZrKvy/HlU0TbcUZFa9
Yvc7ci2jAAMU/CI8Clxnitm8YQugxCL0b3vXzz6VGFDqjTFlzKuCTpgp2zokq9tg
RUcL5+g5Al36bQsrxFAtfjRXJYwBdTpYytJDLVfykdld3Omv7kRQJEUEHkffcbxr
fDxivuTxzRoxBBiWQrmf1qkjtRPKRqBWeDpPh+m53t8YFGEh
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:22:03 2026 by rpki-client