Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393942.roa
File: AS393942.roa (raw, json)
Hash identifier: NhQ3wtZVvawJMAtA3WzpVU7K06WimTXVvMda33qGHCQ=
Subject key identifier: 60:66:A0:DB:85:62:DF:B8:2A:7F:19:3E:4C:6A:C8:DF:B1:70:FF:1D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6A78C6F2EDC63C8E158B556083A009170723AB72
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393942.roa
Signing time: Tue 21 Apr 2026 11:55:38 +0000
ROA not before: Tue 21 Apr 2026 11:50:38 +0000
ROA not after: Tue 20 Apr 2027 11:55:38 +0000
asID: 393942
IP address blocks: 145.223.67.0/24 maxlen: 24
147.79.60.0/24 maxlen: 24
155.117.217.0/24 maxlen: 24
167.148.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:78:c6:f2:ed:c6:3c:8e:15:8b:55:60:83:a0:09:17:07:23:ab:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 21 11:50:38 2026 GMT
Not After : Apr 20 11:55:38 2027 GMT
Subject: CN=6066A0DB8562DFB82A7F193E4C6AC8DFB170FF1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:a8:80:13:b4:7e:5e:12:10:45:68:76:af:
a6:1e:6e:05:de:50:2f:0e:bb:e3:5e:64:5f:0a:da:
27:8b:af:33:08:f0:43:d6:e5:47:7d:26:70:03:77:
66:23:5f:27:4a:d5:e4:44:25:4a:98:6a:0c:91:c7:
e6:ac:57:1b:5c:cb:0e:c7:c9:78:d7:a4:0f:00:7c:
37:78:42:d1:fd:f7:f2:2f:e6:b7:0c:2d:37:06:bb:
28:26:06:f6:7b:73:de:9d:3b:42:48:ac:03:1c:ca:
49:ec:3b:59:30:b3:c2:cb:ea:de:4d:18:2f:7b:07:
b9:20:a6:c1:2d:db:7b:04:6f:24:63:ce:83:f1:85:
17:6a:a2:f6:e8:b7:83:d9:55:a9:6b:1c:50:9d:6b:
96:13:64:0e:ec:39:61:46:1b:49:d6:55:41:f8:b7:
d7:34:4c:75:7f:18:94:59:11:e7:f8:0f:05:47:ee:
f7:54:ad:98:68:bd:9d:1b:c9:af:87:a8:43:a1:78:
d0:6e:5e:ee:bf:a2:7a:38:e5:45:ca:a3:3a:ed:11:
17:cc:d6:07:3c:70:77:a8:40:f5:46:fe:84:54:a3:
d9:56:32:a4:84:20:34:1b:fe:ed:82:a6:3c:4b:c5:
bf:db:ac:fe:9a:7d:e0:e0:1a:bf:65:75:61:86:70:
3c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:66:A0:DB:85:62:DF:B8:2A:7F:19:3E:4C:6A:C8:DF:B1:70:FF:1D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393942.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.223.67.0/24
147.79.60.0/24
155.117.217.0/24
167.148.163.0/24
Signature Algorithm: sha256WithRSAEncryption
74:93:7a:a8:98:a1:ca:d4:df:9b:78:7c:c4:b4:85:a1:0f:b3:
ab:4d:3a:99:52:67:8e:8e:27:0b:35:66:17:ae:2f:83:f9:f7:
19:bd:af:a9:de:26:90:77:68:ae:13:99:5b:8f:41:43:36:47:
d1:68:82:76:4f:2a:76:9a:a8:46:46:90:86:6b:e2:5d:e0:e7:
47:2f:db:21:33:f3:61:4b:ea:1f:5f:45:3d:97:1c:43:6d:b4:
49:8e:bf:c8:3b:3b:c7:7c:b2:e9:a3:e9:7b:6f:ae:31:cb:8f:
8a:2e:dc:f6:65:8f:d7:76:4f:d8:7b:06:a8:0d:c4:44:58:0e:
c8:e3:a3:d4:ed:a9:a2:a9:fe:a9:31:91:05:84:91:a2:e5:63:
73:5f:20:ed:e8:64:c8:a1:46:67:aa:03:d1:df:cf:85:72:a4:
47:d1:38:88:d1:4c:05:ba:47:5b:c9:ea:22:f2:26:57:a8:20:
f4:b9:00:2c:c4:1a:bf:eb:2c:6d:25:b9:dd:a5:56:22:ed:c3:
c8:a4:5a:79:0f:67:38:e1:7d:bf:82:59:cd:dc:05:1d:fb:80:
d4:6b:10:62:2f:c2:b8:30:89:b9:33:8f:9f:31:b1:cb:19:4f:
64:2e:b6:c6:74:7e:5f:e2:a5:62:4a:23:9d:00:95:f4:53:65:
85:e1:37:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:32:33 2026 by rpki-client