Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS401362.roa
File: AS401362.roa (raw, json)
Hash identifier: kPNKMAbfGTT0bsViC8/rlLAkuGrSMsmAvZnUIcZQ+H4=
Subject key identifier: 40:3F:07:6F:D3:22:CA:E7:AE:0F:2C:9A:4E:52:46:C4:F6:03:AE:B0
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 4C6D4EB18141DC5037B3B1B127011E5D073C474B
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS401362.roa
Signing time: Mon 31 Aug 2026 09:46:42 +0000
ROA not before: Mon 31 Aug 2026 09:41:42 +0000
ROA not after: Mon 30 Aug 2027 09:46:42 +0000
asID: 401362
IP address blocks: 212.17.225.0/24 maxlen: 24
212.17.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:6d:4e:b1:81:41:dc:50:37:b3:b1:b1:27:01:1e:5d:07:3c:47:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Aug 31 09:41:42 2026 GMT
Not After : Aug 30 09:46:42 2027 GMT
Subject: CN=403F076FD322CAE7AE0F2C9A4E5246C4F603AEB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:34:3b:9f:30:dd:01:c7:2a:8a:77:2b:27:21:
a7:41:cf:e4:e7:80:40:44:a2:20:4a:8f:4c:f9:6f:
38:ad:23:d4:d6:99:df:2c:96:d8:b0:e9:2a:b3:a8:
17:35:34:ce:a0:ef:b5:55:9c:f5:ee:04:70:78:ab:
5e:9f:8a:3e:e8:45:58:16:8e:cb:99:f8:25:7d:a1:
25:47:6c:6e:d1:f5:5a:8f:1d:7c:fd:67:ec:94:c9:
dd:33:26:8f:76:3b:1a:fb:f8:32:80:ef:55:f8:d5:
b7:54:f6:8b:97:4e:c5:b0:f6:07:43:ab:9f:a6:53:
3e:d5:27:8a:a6:cb:02:5c:15:ed:75:88:81:68:bb:
1f:8e:75:c4:af:da:95:a6:d0:10:98:20:14:52:f5:
7a:2e:42:22:d1:93:63:9d:af:46:96:74:17:02:26:
aa:3a:40:f7:6e:6f:e8:f9:bd:19:36:56:bb:9a:7b:
a4:18:c1:8d:26:73:af:a9:6b:26:3a:ac:ff:fa:0c:
4a:2f:a1:c3:47:e9:ae:bf:51:a9:86:5a:0b:73:5a:
1d:16:20:89:55:36:6d:83:ab:c1:14:a9:a2:c6:50:
40:e8:53:e2:e7:ea:e0:91:30:42:d2:93:a5:04:7c:
ed:5b:35:4c:2c:3b:5d:94:8d:d2:48:68:ef:e6:14:
38:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3F:07:6F:D3:22:CA:E7:AE:0F:2C:9A:4E:52:46:C4:F6:03:AE:B0
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS401362.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.17.225.0/24
212.17.232.0/24
Signature Algorithm: sha256WithRSAEncryption
54:0e:c1:45:c7:5d:7a:4a:b1:05:11:b5:b1:d5:3b:89:a2:f4:
44:5c:66:bd:91:33:a2:48:3d:6a:6b:fd:82:65:75:b5:d3:2b:
b0:f8:8d:93:f2:83:26:4d:fd:ac:5e:cf:3f:db:10:59:e5:98:
c3:99:06:38:7d:3f:a2:44:35:b8:c4:b6:e7:58:82:c0:fa:01:
3d:7e:3c:45:92:a9:3e:26:64:12:d3:73:ee:5a:fc:49:45:0c:
25:e2:19:63:cd:ed:16:f6:65:f7:21:a8:c8:83:f6:10:25:ea:
45:5e:b2:39:d8:b3:6e:9a:94:06:88:92:01:5c:b0:a0:dc:04:
31:62:16:a2:c9:52:5f:78:fd:5a:df:be:44:b3:8e:0d:c6:ad:
26:95:cc:1e:f4:b2:05:5a:37:cb:4f:f0:59:c0:fb:57:aa:74:
a1:bc:71:4c:a1:d4:e4:ec:07:63:39:8d:41:e8:88:51:c8:f5:
6b:fb:51:e5:02:ab:f0:79:d5:37:db:21:b2:e3:a4:a3:b1:54:
ce:52:4c:28:71:3d:92:88:5d:51:e1:a8:99:ea:44:21:4e:10:
5e:18:fc:11:0b:11:81:8e:29:25:47:5e:e0:60:ba:15:55:b3:
01:4d:1e:99:34:9d:c1:e6:fb:cf:f6:f6:50:b5:40:ae:ef:89:
34:e8:d5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:53:14 2026 by rpki-client