Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS401399.roa
File: AS401399.roa (raw, json)
Hash identifier: G2Njm9ozq5rBzTjRshfXcokh41323U99d9g7yWUULiM=
Subject key identifier: 52:6C:04:8D:E8:5A:34:CD:17:D1:9A:64:27:03:D5:4F:A9:11:7B:60
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 13DEA45A70AA6E307B482CDF16B85E7F2C7ADF23
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS401399.roa
Signing time: Thu 13 Aug 2026 06:09:02 +0000
ROA not before: Thu 13 Aug 2026 06:04:02 +0000
ROA not after: Thu 12 Aug 2027 06:09:02 +0000
asID: 401399
IP address blocks: 2a0f:85c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Sep 2026 14:18:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:de:a4:5a:70:aa:6e:30:7b:48:2c:df:16:b8:5e:7f:2c:7a:df:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 13 06:04:02 2026 GMT
Not After : Aug 12 06:09:02 2027 GMT
Subject: CN=526C048DE85A34CD17D19A642703D54FA9117B60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:96:98:a4:42:05:42:43:e5:5c:c0:8c:2b:
e4:61:3c:24:bc:69:30:82:c0:26:97:c8:7a:bc:38:
92:14:89:1a:8a:a9:f1:bc:6b:bb:ad:b6:2c:e6:b6:
56:9a:ac:79:4d:c1:8e:26:90:aa:6e:22:c6:b4:d3:
f3:ef:75:90:7a:88:96:08:fb:97:e9:cc:6b:e9:50:
17:9d:73:ec:93:0f:c0:2e:5d:c0:6e:7e:41:aa:92:
7f:a6:d4:01:07:ae:51:13:7c:25:1b:ab:e8:50:a8:
b2:08:aa:c5:85:4e:51:bf:2a:8d:5f:cd:28:82:40:
d0:4a:b3:18:a0:8a:90:fb:86:5f:52:98:08:ca:37:
61:32:27:92:35:8f:78:e7:3b:b8:12:b5:b7:0b:56:
d8:b3:42:ec:1c:ab:bf:3d:47:d0:b5:7c:dc:14:67:
16:ef:87:af:0b:82:ec:34:d2:7a:36:6b:f6:2a:d0:
9f:ff:7c:b8:4d:9d:5e:64:63:c9:15:53:ae:14:2b:
69:cc:16:2d:29:6d:c8:c6:1c:42:37:da:bf:d3:26:
00:42:53:a0:63:b9:ec:27:8b:5d:9a:43:17:2e:43:
47:b8:7f:f7:05:2b:b1:5a:94:0a:a5:52:e5:87:39:
a8:75:37:0a:67:80:b3:e4:a8:1c:6a:f3:18:e6:d4:
b6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6C:04:8D:E8:5A:34:CD:17:D1:9A:64:27:03:D5:4F:A9:11:7B:60
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS401399.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1::/48
Signature Algorithm: sha256WithRSAEncryption
a5:7e:35:f9:b2:87:3e:d6:d3:20:34:b3:fd:06:00:8d:c3:37:
8f:10:d3:51:fe:33:a0:2e:05:aa:26:ea:4f:44:42:41:61:6a:
b1:41:c6:b5:1f:3d:7b:9a:5c:a9:4b:45:e8:af:a5:4f:e2:b9:
9a:b5:41:a5:22:93:37:42:33:f9:4a:21:78:51:3a:13:3b:46:
40:2e:e4:bb:3b:5f:2a:ef:af:cc:66:ea:1f:98:86:54:7f:bb:
72:b3:06:dc:ef:da:ac:0d:64:9e:ca:2c:96:a1:cf:7b:96:3a:
1e:9a:db:3c:f1:69:e8:e0:e6:89:79:c3:bd:6d:28:98:a0:28:
c5:2e:03:9c:db:ad:62:8e:8d:94:cb:ae:8a:76:7e:8f:50:dd:
eb:a5:e1:14:bd:6a:c9:3b:ea:03:87:df:b8:09:8b:77:b0:7e:
1c:24:b1:f9:4b:1a:6c:d4:38:92:2d:9a:a6:12:44:91:5d:b0:
f6:f5:c4:59:7a:b8:99:f3:3f:7b:6d:5e:80:37:c7:dc:87:4a:
be:58:79:a0:9f:18:12:a3:f9:ab:a9:20:7d:6d:c0:28:b7:bf:
13:fd:57:d5:bf:fb:28:8f:a4:7d:3e:ab:60:c2:de:07:4e:40:
31:76:58:5a:3e:14:c4:f9:15:89:47:96:0c:60:ce:ad:04:b1:
ce:66:36:35
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUE96kWnCqbjB7SCzfFrhefyx63yMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA4MTMwNjA0MDJaFw0yNzA4MTIwNjA5MDJaMDMxMTAvBgNV
BAMTKDUyNkMwNDhERTg1QTM0Q0QxN0QxOUE2NDI3MDNENTRGQTkxMTdCNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGd5aYpEIFQkPlXMCMK+RhPCS8
aTCCwCaXyHq8OJIUiRqKqfG8a7uttizmtlaarHlNwY4mkKpuIsa00/PvdZB6iJYI
+5fpzGvpUBedc+yTD8AuXcBufkGqkn+m1AEHrlETfCUbq+hQqLIIqsWFTlG/Ko1f
zSiCQNBKsxigipD7hl9SmAjKN2EyJ5I1j3jnO7gStbcLVtizQuwcq789R9C1fNwU
Zxbvh68Lguw00no2a/Yq0J//fLhNnV5kY8kVU64UK2nMFi0pbcjGHEI32r/TJgBC
U6Bjuewni12aQxcuQ0e4f/cFK7FalAqlUuWHOah1NwpngLPkqBxq8xjm1LZdAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUUmwEjehaNM0X0ZpkJwPVT6kRe2AwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTNDAxMzk5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQAAMA0GCSqGSIb3DQEBCwUAA4IBAQClfjX5soc+1tMgNLP9BgCNwzePENNR/jOg
LgWqJupPREJBYWqxQca1Hz17mlypS0Xor6VP4rmatUGlIpM3QjP5SiF4UToTO0ZA
LuS7O18q76/MZuofmIZUf7tyswbc79qsDWSeyiyWoc97ljoemts88Wno4OaJecO9
bSiYoCjFLgOc261ijo2Uy66Kdn6PUN3rpeEUvWrJO+oDh9+4CYt3sH4cJLH5Sxps
1DiSLZqmEkSRXbD29cRZeriZ8z97bV6AN8fch0q+WHmgnxgSo/mrqSB9bcAot78T
/VfVv/soj6R9Pqtgwt4HTkAxdlhaPhTE+RWJR5YMYM6tBLHOZjY1
-----END CERTIFICATE-----
Generated at Tue Sep 1 17:01:29 2026 by rpki-client