Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS401362.roa
File: AS401362.roa (raw, json)
Hash identifier: 6fPtOWa4Botxr2Q5waHmWOEf3ziuHfr9Ml/FghVyJRY=
Subject key identifier: EF:6E:72:2D:17:92:71:6A:1F:86:03:20:CC:F3:06:12:CC:89:E4:31
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 2770B57C8D6E012C284C9EAB14B3CB5923E1D1C1
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS401362.roa
Signing time: Sun 30 Aug 2026 13:54:18 +0000
ROA not before: Sun 30 Aug 2026 13:49:18 +0000
ROA not after: Sun 29 Aug 2027 13:54:18 +0000
asID: 401362
IP address blocks: 201.4.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:70:b5:7c:8d:6e:01:2c:28:4c:9e:ab:14:b3:cb:59:23:e1:d1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Aug 30 13:49:18 2026 GMT
Not After : Aug 29 13:54:18 2027 GMT
Subject: CN=EF6E722D1792716A1F860320CCF30612CC89E431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:13:6e:78:e3:53:63:4b:77:d4:4c:23:6b:c2:
d8:65:54:07:7b:ca:59:b8:e8:59:9a:4e:49:f7:e9:
7d:7f:fe:49:a2:f4:86:b4:65:bd:d3:be:3f:2a:9c:
40:92:da:f4:99:b7:2d:ec:b0:f6:b3:18:48:29:ca:
9a:7f:3d:c3:e9:33:19:fb:43:65:6e:df:1b:fd:69:
a0:de:dd:9d:a5:de:7a:ea:35:a5:68:8b:21:f1:5b:
cf:02:77:91:eb:cf:42:42:0c:fb:e6:43:4d:a1:60:
8d:b0:70:84:70:62:99:97:f8:92:99:5f:f3:cd:64:
b1:ab:b6:89:15:b4:1e:9c:c2:10:62:3f:79:14:c0:
24:db:57:d4:ec:b9:6d:a4:68:58:04:70:b1:d0:b4:
b3:70:48:c8:5f:52:95:8e:41:81:91:c7:b5:e6:e0:
75:b4:05:2c:c6:1f:85:ab:26:70:c6:ce:da:25:ce:
b6:da:64:57:b1:68:f2:10:61:73:41:e3:47:7e:fb:
ad:30:c2:14:bc:fc:29:aa:63:c0:ba:13:4b:9e:12:
41:67:cd:33:45:24:fd:04:ca:7f:24:c5:0e:c1:81:
93:95:9d:a2:f5:71:2b:d3:94:9f:7d:08:70:2d:ab:
03:92:95:15:1a:71:6a:20:cb:d1:1a:8b:33:4e:0a:
5f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6E:72:2D:17:92:71:6A:1F:86:03:20:CC:F3:06:12:CC:89:E4:31
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS401362.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.18.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:61:c8:83:2f:ca:f3:72:05:50:d6:39:84:67:5f:9f:3b:01:
a5:8a:90:8c:3a:f0:cb:d1:59:b4:ae:ba:9b:12:ce:0c:31:5a:
4a:5d:c0:1f:e8:e2:1d:95:1a:2b:1e:94:d3:68:ec:e8:a5:1f:
5b:78:b8:d5:e9:b0:a0:20:06:00:0d:ee:d0:03:da:3f:42:3a:
64:aa:d5:ff:a3:33:e6:9b:8d:82:7f:dc:ec:c1:70:62:3a:3e:
fb:87:2c:aa:90:f3:01:57:dc:48:5c:9b:56:91:5e:af:81:9c:
98:39:06:49:bb:5d:5c:10:ce:6c:8c:11:41:d9:7a:02:0a:9e:
86:fd:11:81:ed:92:56:a3:4d:e6:82:2d:f4:99:37:1e:8d:b1:
40:9b:ae:be:0b:6b:0b:9e:5d:ee:68:22:47:f1:80:88:d3:c7:
9c:31:f3:f9:ec:e1:d2:a0:18:94:f0:12:29:9d:7f:1a:f0:da:
80:b1:a8:3a:7a:65:54:da:4a:05:ae:3e:dd:84:2a:ee:50:2d:
4e:9c:b6:78:b8:9b:36:06:5e:6a:c7:6d:84:ab:a2:84:f6:bb:
49:b2:b8:99:c9:d9:41:d0:4d:cb:2a:d8:63:50:a3:55:78:fc:
d3:28:ae:c8:97:62:c4:22:b9:e1:05:0d:d1:ef:d6:03:06:e1:
92:e5:a6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:53:15 2026 by rpki-client