Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393427.roa
File: AS393427.roa (raw, json)
Hash identifier: x9ZNFV8TpyjUBkBLgCoEs3+xslnQe8hMWGgeUk7XTAw=
Subject key identifier: E7:96:A0:98:35:79:BF:E7:8C:02:4C:0C:9C:53:3A:5B:E9:9F:36:76
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 34ECDBFBC00C3B884A3C5861B542B25A60581023
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393427.roa
Signing time: Wed 08 Jul 2026 00:04:43 +0000
ROA not before: Tue 07 Jul 2026 23:59:43 +0000
ROA not after: Wed 07 Jul 2027 00:04:43 +0000
asID: 393427
IP address blocks: 168.222.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:ec:db:fb:c0:0c:3b:88:4a:3c:58:61:b5:42:b2:5a:60:58:10:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 7 23:59:43 2026 GMT
Not After : Jul 7 00:04:43 2027 GMT
Subject: CN=E796A0983579BFE78C024C0C9C533A5BE99F3676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:ff:b7:d5:98:4d:83:dd:c4:14:41:3e:22:
56:d1:21:4f:f2:03:3f:3b:a5:d6:9b:01:1a:84:14:
b2:1d:38:c4:a4:73:38:85:be:5b:db:22:04:86:7b:
68:7d:36:ef:3e:80:70:f2:e2:1b:c7:8f:a1:35:48:
e1:ee:66:07:0d:ec:9c:98:92:5f:05:ec:79:02:7e:
98:5e:d3:39:89:b4:bc:9e:06:47:ac:4e:12:5f:57:
56:64:8e:7b:9c:43:43:fa:05:8e:2f:36:41:14:21:
dc:84:72:20:b2:68:c0:9d:56:1e:11:6f:cf:4c:87:
6a:9e:18:50:66:f8:ff:d5:2c:56:5a:fd:38:85:bd:
65:f4:3b:84:ef:b8:45:ab:61:50:03:23:4f:3b:97:
67:a7:c2:e0:b1:ba:f6:fc:90:b0:9f:96:23:80:0f:
da:d8:d4:a2:b8:ea:2d:01:85:00:45:26:05:48:c1:
81:10:90:99:72:78:be:7e:2a:9e:12:89:93:09:d1:
fa:f2:2c:c3:06:f9:3c:48:00:de:64:f5:ca:58:96:
b6:52:d4:33:46:41:ba:00:17:d2:dd:88:15:ec:4a:
9e:97:0b:76:fe:bf:b9:89:e9:b4:e8:b4:d8:69:62:
51:4b:7a:8f:2f:7c:05:06:be:06:8f:92:f3:c2:b3:
94:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:96:A0:98:35:79:BF:E7:8C:02:4C:0C:9C:53:3A:5B:E9:9F:36:76
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.126.0/23
Signature Algorithm: sha256WithRSAEncryption
60:3e:3b:22:58:08:2c:5f:4c:b7:53:e5:12:58:e5:a1:a6:8c:
de:5a:61:3a:10:4f:67:74:17:14:01:d2:b0:d4:f6:d9:a2:f3:
5a:38:21:fc:b2:3f:5c:2d:00:b4:e0:bd:22:f0:06:cb:82:35:
10:49:0d:97:32:4c:45:d5:a4:f0:6d:03:f8:8e:00:04:a3:28:
79:1b:e3:51:8c:f1:4d:c2:72:86:be:80:9d:a0:ee:2d:07:b3:
83:13:2a:4c:1a:24:0b:ff:b3:a9:56:9a:d6:c6:d3:42:1e:90:
7f:45:69:b1:96:e9:24:18:f4:e6:ed:bc:65:9c:50:d5:ee:78:
0d:e7:cc:a2:65:79:04:32:96:f6:24:0a:cf:cf:ac:c6:16:04:
14:e7:32:a5:9d:9f:0b:ae:f2:f6:fa:97:ee:81:29:c3:4d:3b:
be:3f:2a:4e:fc:86:7f:e5:d4:d7:0e:c0:f5:4c:c3:ef:6a:4f:
d1:0f:6b:c9:a7:1e:7d:7f:b2:3f:27:6c:1a:bc:27:7e:78:14:
60:d7:14:83:9f:73:60:6a:52:45:cb:86:85:d3:66:48:9d:f7:
4a:53:74:98:e8:81:ba:d2:c0:db:71:fe:07:34:2d:7e:4f:2e:
fc:07:bb:e9:3a:0c:68:e4:bf:af:60:ec:e8:a9:d7:3e:75:0a:
7d:e4:e3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:32:14 2026 by rpki-client