Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS399359.roa
File: AS399359.roa (raw, json)
Hash identifier: VyxxE3vs3aJ3IszM7Jq7t7ixQfOPDpVnSNo1m5jNx0M=
Subject key identifier: 67:28:03:A2:8A:48:CF:A0:51:05:3D:2B:2C:92:FB:38:18:28:16:52
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 4A396C96E286023785B3FF76834E139D0ECC7533
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS399359.roa
Signing time: Fri 04 Sep 2026 05:12:09 +0000
ROA not before: Fri 04 Sep 2026 05:07:09 +0000
ROA not after: Fri 03 Sep 2027 05:12:09 +0000
asID: 399359
IP address blocks: 82.139.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:39:6c:96:e2:86:02:37:85:b3:ff:76:83:4e:13:9d:0e:cc:75:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 4 05:07:09 2026 GMT
Not After : Sep 3 05:12:09 2027 GMT
Subject: CN=672803A28A48CFA051053D2B2C92FB3818281652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:af:6c:e2:a5:3c:84:f4:f7:fd:29:65:c4:f9:
57:de:ff:27:4b:3d:c7:7f:44:f0:de:fc:ac:e2:29:
88:05:6f:21:4c:14:fc:94:7d:ef:84:78:7f:2f:4c:
79:22:87:51:49:2f:ce:a2:a4:14:56:06:d9:60:6e:
d2:21:15:23:95:1f:69:7c:d8:e1:a3:f4:ac:ee:74:
d9:61:b3:03:ce:54:9c:21:0e:bc:97:6b:b4:e7:2a:
2e:6e:7a:85:86:61:c2:2f:7f:8a:da:d2:e6:07:7b:
2e:15:c0:ef:58:d5:e6:5f:5e:fe:b2:fd:d4:78:47:
9b:9f:5f:73:ae:f2:a9:8a:80:e5:88:d9:f2:b2:cd:
e4:60:fc:86:0e:8c:d5:f6:6f:55:5e:b9:22:fd:e8:
52:df:04:dc:19:12:8e:e1:09:7d:00:82:f4:78:53:
5b:f1:5c:c8:ae:8c:71:75:8f:ce:63:c9:ad:c8:22:
df:93:d2:c6:db:67:ac:8c:ae:1e:e8:a5:0f:f9:cc:
62:97:02:7e:08:0e:bf:01:17:fc:4d:d0:23:33:cc:
18:d1:33:65:fa:41:78:d2:bb:64:e5:dc:96:a6:5d:
f5:83:2a:22:33:91:5e:ee:84:5a:e6:ea:4f:9c:e3:
ef:2e:85:92:74:2d:6b:0c:29:b3:22:66:ae:f4:70:
f8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:28:03:A2:8A:48:CF:A0:51:05:3D:2B:2C:92:FB:38:18:28:16:52
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS399359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.220.0/24
Signature Algorithm: sha256WithRSAEncryption
43:e1:bc:75:2f:32:49:5c:23:bb:40:b0:30:16:4c:16:b8:07:
b9:3c:cd:96:02:b6:c6:51:be:c7:be:ba:3c:df:f4:c4:fc:4d:
a0:88:6d:cf:60:f3:3e:22:ca:8a:01:85:11:5e:17:3c:16:ce:
16:c0:ac:4d:2e:3e:3c:2b:b0:d8:b2:3d:d0:f7:6d:13:24:ba:
ab:35:88:97:47:3c:91:4b:17:40:89:bf:12:62:00:07:3b:07:
e2:d0:91:97:0f:a9:f6:d7:fa:50:54:bc:0a:c9:c0:3f:44:7a:
ea:5d:c7:77:85:5b:46:7f:61:3e:e8:f3:2b:f6:d6:6e:bd:ca:
2d:09:5a:92:1c:94:7a:a5:c0:d7:02:79:d6:f2:32:bb:29:98:
ce:36:1f:a4:12:0a:b8:3e:ea:16:2c:ef:03:2c:7c:3b:fd:92:
d0:5c:49:4a:13:d7:55:1f:3f:8d:a7:e9:60:b6:04:48:56:2c:
58:e9:da:d6:cb:e3:09:1b:41:2f:13:aa:26:eb:8c:d3:c3:f4:
93:c1:0d:b0:0b:57:27:21:ed:cd:91:71:f4:7a:a2:2c:7e:c9:
d8:07:fc:ca:e4:34:a0:9a:ef:e4:ad:64:f5:64:fe:ad:21:75:
25:f5:f5:7a:0f:58:94:18:9a:3c:d2:a6:81:29:95:c5:e3:86:
2b:b4:76:2f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUSjlsluKGAjeFs/92g04TnQ7MdTMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNjA5MDQwNTA3MDlaFw0yNzA5MDMwNTEyMDlaMDMxMTAvBgNV
BAMTKDY3MjgwM0EyOEE0OENGQTA1MTA1M0QyQjJDOTJGQjM4MTgyODE2NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjr2zipTyE9Pf9KWXE+Vfe/ydL
Pcd/RPDe/KziKYgFbyFMFPyUfe+EeH8vTHkih1FJL86ipBRWBtlgbtIhFSOVH2l8
2OGj9KzudNlhswPOVJwhDryXa7TnKi5ueoWGYcIvf4ra0uYHey4VwO9Y1eZfXv6y
/dR4R5ufX3Ou8qmKgOWI2fKyzeRg/IYOjNX2b1VeuSL96FLfBNwZEo7hCX0AgvR4
U1vxXMiujHF1j85jya3IIt+T0sbbZ6yMrh7opQ/5zGKXAn4IDr8BF/xN0CMzzBjR
M2X6QXjSu2Tl3JamXfWDKiIzkV7uhFrm6k+c4+8uhZJ0LWsMKbMiZq70cPhdAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUZygDoopIz6BRBT0rLJL7OBgoFlIwHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt
NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMzk5MzU5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUovc
MA0GCSqGSIb3DQEBCwUAA4IBAQBD4bx1LzJJXCO7QLAwFkwWuAe5PM2WArbGUb7H
vro83/TE/E2giG3PYPM+IsqKAYURXhc8Fs4WwKxNLj48K7DYsj3Q920TJLqrNYiX
RzyRSxdAib8SYgAHOwfi0JGXD6n21/pQVLwKycA/RHrqXcd3hVtGf2E+6PMr9tZu
vcotCVqSHJR6pcDXAnnW8jK7KZjONh+kEgq4PuoWLO8DLHw7/ZLQXElKE9dVHz+N
p+lgtgRIVixY6drWy+MJG0EvE6om64zTw/STwQ2wC1cnIe3NkXH0eqIsfsnYB/zK
5DSgmu/krWT1ZP6tIXUl9fV6D1iUGJo80qaBKZXF44YrtHYv
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:18 2026 by rpki-client