Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3356.roa
File: AS3356.roa (raw, json)
Hash identifier: HYrx8pdn0kecwAiCWdRZMsukfpI6yMqhsF/a8jDkGGs=
Subject key identifier: F9:47:EF:E6:45:EC:BD:6F:C3:FB:77:23:81:3E:E6:C3:E3:CE:01:9B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6A3A8F613231E4F569402CCC3A4C333A34FAF4D9
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3356.roa
Signing time: Wed 28 Oct 2026 16:49:39 +0000
ROA not before: Wed 28 Oct 2026 16:44:39 +0000
ROA not after: Wed 27 Oct 2027 16:49:39 +0000
asID: 3356
IP address blocks: 148.135.145.0/24 maxlen: 24
148.135.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 11:15:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:3a:8f:61:32:31:e4:f5:69:40:2c:cc:3a:4c:33:3a:34:fa:f4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 28 16:44:39 2026 GMT
Not After : Oct 27 16:49:39 2027 GMT
Subject: CN=F947EFE645ECBD6FC3FB7723813EE6C3E3CE019B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:34:96:0e:46:c9:ac:b9:0c:c6:fd:92:13:
73:37:57:29:1f:6f:81:3c:e8:db:95:6c:f1:3d:a1:
93:b7:c0:f8:d9:e5:00:26:c2:c0:59:d0:f1:5c:74:
70:c7:98:b2:78:c5:52:d7:8c:f4:0f:bc:80:8d:d5:
ef:5a:40:ca:38:f0:c7:8c:01:aa:96:f2:e6:8c:20:
51:05:c0:39:95:66:93:91:06:3e:ed:6c:31:15:e5:
10:0c:be:ab:b6:6e:c4:48:8d:80:9a:15:a4:fe:00:
44:a7:6f:60:c8:89:99:12:38:7d:d4:a3:67:22:9c:
85:eb:f0:d3:95:d5:80:8c:ac:26:21:29:a3:76:d0:
b6:dc:c3:e6:73:30:f6:98:01:05:82:c4:8a:72:8b:
dd:6a:fa:08:89:74:49:b7:3a:ef:28:28:c3:b1:6e:
3c:2f:1f:65:6a:1e:c9:1d:1f:2c:04:8d:fd:75:72:
d7:e7:49:88:59:b1:3c:38:b4:e4:1f:7b:20:fb:72:
3e:67:0b:f9:fe:0e:a1:b0:e3:67:b3:e4:75:97:cc:
67:ed:1d:86:f2:24:80:dd:46:1c:83:8c:e9:29:90:
c1:96:19:7d:3f:7b:d9:34:71:ca:d1:0e:d8:f0:e8:
cc:c6:c4:a1:97:d1:1b:75:f6:21:6d:9f:55:9b:1e:
70:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:47:EF:E6:45:EC:BD:6F:C3:FB:77:23:81:3E:E6:C3:E3:CE:01:9B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.145.0/24
148.135.156.0/24
Signature Algorithm: sha256WithRSAEncryption
20:51:da:4f:aa:e1:c2:b1:a9:a4:73:6b:f3:4d:a7:0c:87:5c:
03:da:90:26:e3:bf:b3:d3:a9:6a:08:d4:3e:a3:88:d6:f6:cd:
14:79:a5:87:25:32:bb:82:6a:75:6a:9b:e4:d6:0f:d3:fb:f8:
f2:58:61:0e:fd:30:33:da:70:a3:ae:41:12:03:5a:0d:84:d7:
ce:03:1a:f9:89:ef:ab:41:78:be:51:09:53:02:0e:bd:1e:b8:
f3:56:5e:5a:5d:56:32:8c:0a:a1:b9:1e:ce:dc:dc:a4:a8:e3:
1c:51:1d:db:b2:0f:50:15:be:ad:77:49:6d:1e:a4:80:97:31:
d9:c6:cc:c7:81:68:d9:dc:ca:a5:3f:1d:59:0c:13:b7:f6:bc:
45:d6:f2:55:a5:07:1c:40:b9:9b:6c:0c:3f:03:a1:ba:f8:df:
b9:f4:d7:3f:a2:a6:74:f2:0f:02:45:10:20:41:0a:83:5d:37:
03:43:db:68:a5:6c:b2:2f:0a:2a:e1:b3:64:ea:42:6b:39:07:
b2:04:fa:b8:8e:b1:f8:c4:33:1d:0c:3e:a8:cc:f4:52:d4:99:
a2:20:08:d8:f5:08:3e:a0:70:ad:01:13:92:d5:1a:28:a9:e7:
4e:37:99:89:3a:a9:f9:c9:20:4c:78:9c:d9:0d:a0:62:e4:7e:
53:d3:7e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 21:09:51 2026 by rpki-client