Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS395374.roa
File: AS395374.roa (raw, json)
Hash identifier: Y31cEsm2/ugUBMCIUc0ZXzz5UyhnZhWE8t4ZTr9PO9E=
Subject key identifier: DC:D7:DE:66:96:78:B4:FF:40:80:F3:70:2C:90:22:6E:F3:30:E5:48
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 09600B1A06801EA6206EC807F4C871BF0416C8BD
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS395374.roa
Signing time: Tue 21 Jul 2026 02:10:36 +0000
ROA not before: Tue 21 Jul 2026 02:05:36 +0000
ROA not after: Tue 20 Jul 2027 02:10:36 +0000
asID: 395374
IP address blocks: 143.14.255.0/24 maxlen: 24
162.141.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:60:0b:1a:06:80:1e:a6:20:6e:c8:07:f4:c8:71:bf:04:16:c8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 21 02:05:36 2026 GMT
Not After : Jul 20 02:10:36 2027 GMT
Subject: CN=DCD7DE669678B4FF4080F3702C90226EF330E548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fa:7c:49:50:f5:72:95:c0:f8:1b:ab:b6:7f:
dc:8d:ff:ea:6f:89:79:3e:2a:34:bf:30:57:0d:89:
a3:d2:dd:64:b4:23:10:31:47:22:63:fd:a5:50:8d:
98:d4:be:b0:e5:b6:bf:2a:86:83:80:87:11:8f:70:
0e:8a:b2:21:73:6d:4c:1b:fd:6f:a6:58:c4:3d:28:
02:8c:49:aa:21:70:d1:d8:f6:85:e2:b2:54:b0:b6:
22:b7:41:02:10:2b:ab:3e:53:2a:30:63:23:38:53:
18:49:35:e5:af:b6:44:21:40:ee:6a:e0:79:f7:a6:
80:f7:f0:4d:47:23:4c:43:82:54:e8:30:d9:25:af:
b5:fc:ba:ee:85:e2:55:51:15:8d:e7:e8:29:7a:fa:
88:f4:86:41:71:02:9a:83:d2:fa:fb:cb:27:32:43:
66:b4:64:9e:0b:bf:96:e5:55:ab:8d:1c:83:2f:73:
3d:73:eb:ab:b6:a9:c4:f4:e2:7b:9b:7c:98:c8:01:
53:44:4e:ff:38:65:bc:81:82:c1:c0:42:7a:95:44:
f0:cc:18:a7:a8:0d:8b:bc:31:03:1d:0a:a9:dc:43:
c8:17:d8:ed:56:71:fa:67:3c:aa:2d:6d:d6:67:b5:
a7:0d:09:9d:03:21:18:aa:69:4e:01:9d:6c:83:df:
14:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D7:DE:66:96:78:B4:FF:40:80:F3:70:2C:90:22:6E:F3:30:E5:48
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS395374.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.255.0/24
162.141.119.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:53:7d:d5:b0:27:90:2e:ce:ad:06:f0:f2:94:df:1e:8a:b3:
15:35:a6:e6:a2:36:fb:73:84:30:0c:b4:56:1e:89:bc:98:aa:
17:7b:2e:87:85:47:b1:5d:74:92:8f:e2:57:d1:c8:8b:74:ae:
cc:23:af:d8:3d:ab:00:c0:67:0e:99:bd:bd:9f:9b:4d:b0:34:
70:36:a5:9e:2b:e7:4c:7f:29:c9:a0:3d:26:b9:9a:52:14:3e:
f9:97:44:6b:3c:1f:9f:e0:20:6c:56:66:db:ef:f3:00:4b:2a:
f9:89:48:ef:f8:5e:b2:23:f1:e7:e5:c0:3e:6c:a5:5c:1f:be:
60:5d:03:ea:7e:24:e4:9f:c0:5a:3b:28:bf:9c:fb:af:3e:cb:
65:43:fc:65:e6:6a:2a:1f:bf:6e:0f:38:57:e6:f1:65:7f:ca:
fb:10:72:1d:8a:1c:17:b2:a0:db:30:b7:6c:a5:3b:83:67:80:
92:18:b8:1a:51:21:37:f3:0a:45:3a:fa:9e:5a:11:50:5a:2d:
ba:22:22:cf:81:5a:92:ee:4c:12:11:8f:77:8d:1e:8c:31:5a:
be:99:a4:4a:9a:df:df:87:12:a2:41:15:b8:f0:25:c7:a5:c1:
ac:5b:d4:80:e4:6f:5f:15:4b:76:36:52:15:b0:c1:9b:95:54:
d6:38:32:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:39:03 2026 by rpki-client