Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS399359.roa
File: AS399359.roa (raw, json)
Hash identifier: yr9WK+aLCkDJIbKZe+L15ZDvHLPWPCUBMkk0QOqRgu4=
Subject key identifier: D9:01:33:9C:A3:48:CF:20:78:CD:B2:EE:17:38:F9:25:DF:D8:9F:27
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 4BC2915DB18998130588D9BD7E4D5FF88E593088
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS399359.roa
Signing time: Wed 29 Jul 2026 15:25:15 +0000
ROA not before: Wed 29 Jul 2026 15:20:15 +0000
ROA not after: Wed 28 Jul 2027 15:25:15 +0000
asID: 399359
IP address blocks: 152.237.229.0/24 maxlen: 24
152.237.232.0/24 maxlen: 24
152.237.233.0/24 maxlen: 24
152.237.235.0/24 maxlen: 24
152.237.237.0/24 maxlen: 24
152.237.241.0/24 maxlen: 24
152.237.243.0/24 maxlen: 24
152.237.245.0/24 maxlen: 24
152.237.248.0/24 maxlen: 24
152.237.250.0/24 maxlen: 24
152.237.252.0/24 maxlen: 24
152.237.254.0/24 maxlen: 24
186.241.165.0/24 maxlen: 24
186.241.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 16:36:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:c2:91:5d:b1:89:98:13:05:88:d9:bd:7e:4d:5f:f8:8e:59:30:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 29 15:20:15 2026 GMT
Not After : Jul 28 15:25:15 2027 GMT
Subject: CN=D901339CA348CF2078CDB2EE1738F925DFD89F27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2f:a8:13:c1:a9:07:0f:d9:ee:63:0b:89:3f:
ad:80:2f:19:8f:9b:9e:69:ae:71:fd:ed:d9:fa:85:
70:31:c8:00:c6:43:fe:70:c3:1c:2f:13:d9:a2:bb:
bf:a6:45:00:5d:90:86:c2:a4:46:d8:7c:c0:0e:4b:
98:20:ff:36:45:6e:f4:b9:e9:c3:4f:36:87:91:ed:
19:07:69:fa:59:5a:7c:4a:8a:39:73:d9:1d:5c:ed:
73:ca:4f:4c:19:5a:94:da:7b:f1:41:aa:e4:a3:f5:
40:53:54:2d:9c:6d:1d:1a:1f:19:b1:00:26:d1:b4:
c7:82:10:c5:d4:35:d9:16:77:45:c6:1b:9f:2b:c8:
a7:ef:50:1b:42:1f:e6:3f:14:d2:88:b7:0a:75:0a:
7f:e9:24:d9:7c:60:e6:a1:c2:90:ee:94:23:93:59:
a9:b8:c5:ba:4c:03:50:1e:41:10:16:c5:1c:e1:a8:
aa:72:03:7f:75:6c:93:98:0c:93:8a:ba:c3:c2:37:
52:57:4c:17:b9:e8:fd:6c:bd:c5:63:e1:aa:41:aa:
05:c4:27:63:f8:57:8d:80:71:1a:ed:0b:02:71:ef:
dd:e6:f4:36:b4:9c:a7:29:79:d3:9c:d4:94:46:97:
b2:5c:0a:40:b3:70:f6:99:75:1c:63:66:7b:13:6d:
15:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:01:33:9C:A3:48:CF:20:78:CD:B2:EE:17:38:F9:25:DF:D8:9F:27
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS399359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.237.229.0/24
152.237.232.0/23
152.237.235.0/24
152.237.237.0/24
152.237.241.0/24
152.237.243.0/24
152.237.245.0/24
152.237.248.0/24
152.237.250.0/24
152.237.252.0/24
152.237.254.0/24
186.241.165.0/24
186.241.185.0/24
Signature Algorithm: sha256WithRSAEncryption
22:83:c2:a6:cf:ce:af:06:cb:b8:86:cd:ac:40:a9:81:d5:32:
ff:a8:85:0d:68:7f:ca:41:62:47:0a:37:fa:b4:a2:6c:42:61:
b1:1d:48:0f:e9:49:4b:12:31:23:b4:28:6c:ab:40:4a:96:3b:
01:64:e1:a2:3c:68:95:59:1d:fb:41:6a:40:f6:28:53:17:f2:
c5:f6:d9:b2:78:df:a7:b6:d1:31:fd:71:c8:92:3a:76:7b:e2:
e1:64:44:82:25:d4:5d:21:7a:b9:92:8c:13:11:3d:91:5f:e6:
2f:f0:1a:4e:ee:e3:68:09:50:d8:27:37:9c:43:22:a2:55:72:
d6:9f:48:03:c8:5e:06:31:99:54:d8:f0:35:bc:96:a2:39:3d:
c3:d8:d4:ec:a2:10:f2:03:92:bd:54:a9:37:18:1e:f9:ed:4e:
1a:fc:a9:af:69:a5:df:6d:1c:6a:b1:c3:61:e9:57:14:98:ed:
d5:d0:70:37:1e:3f:37:2a:5b:4e:19:9b:ee:8a:9b:01:4e:29:
a9:d5:7b:87:7c:49:d0:0e:cb:70:fb:c3:fb:11:04:4b:3b:c9:
2f:86:3c:59:bb:bf:b3:ee:6a:26:b3:4e:8e:03:33:a6:2c:87:
12:75:27:90:d8:a1:fb:be:6f:8b:88:ce:e6:d1:5b:a7:f5:b4:
0c:b5:d1:7c
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUS8KRXbGJmBMFiNm9fk1f+I5ZMIgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA3MjkxNTIwMTVaFw0yNzA3MjgxNTI1MTVaMDMxMTAvBgNV
BAMTKEQ5MDEzMzlDQTM0OENGMjA3OENEQjJFRTE3MzhGOTI1REZEODlGMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsL6gTwakHD9nuYwuJP62ALxmP
m55prnH97dn6hXAxyADGQ/5wwxwvE9miu7+mRQBdkIbCpEbYfMAOS5gg/zZFbvS5
6cNPNoeR7RkHafpZWnxKijlz2R1c7XPKT0wZWpTae/FBquSj9UBTVC2cbR0aHxmx
ACbRtMeCEMXUNdkWd0XGG58ryKfvUBtCH+Y/FNKItwp1Cn/pJNl8YOahwpDulCOT
Wam4xbpMA1AeQRAWxRzhqKpyA391bJOYDJOKusPCN1JXTBe56P1svcVj4apBqgXE
J2P4V42AcRrtCwJx793m9Da0nKcpedOc1JRGl7JcCkCzcPaZdRxjZnsTbRWjAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU2QEznKNIzyB4zbLuFzj5Jd/YnycwHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcyNjk0NWVhLTA3Yjkt
NDI4Yy1hZjc0LTk2MTQ5ZTg5MTg4NC8wL0FTMzk5MzU5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQAmO3l
AwQBmO3oAwQAmO3rAwQAmO3tAwQAmO3xAwQAmO3zAwQAmO31AwQAmO34AwQAmO36
AwQAmO38AwQAmO3+AwQAuvGlAwQAuvG5MA0GCSqGSIb3DQEBCwUAA4IBAQAig8Km
z86vBsu4hs2sQKmB1TL/qIUNaH/KQWJHCjf6tKJsQmGxHUgP6UlLEjEjtChsq0BK
ljsBZOGiPGiVWR37QWpA9ihTF/LF9tmyeN+nttEx/XHIkjp2e+LhZESCJdRdIXq5
kowTET2RX+Yv8BpO7uNoCVDYJzecQyKiVXLWn0gDyF4GMZlU2PA1vJaiOT3D2NTs
ohDyA5K9VKk3GB757U4a/KmvaaXfbRxqscNh6VcUmO3V0HA3Hj83KltOGZvuipsB
Timp1XuHfEnQDstw+8P7EQRLO8kvhjxZu7+z7moms06OAzOmLIcSdSeQ2KH7vm+L
iM7m0Vun9bQMtdF8
-----END CERTIFICATE-----
Generated at Wed Aug 12 08:34:30 2026 by rpki-client