Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS396998.roa
File: AS396998.roa (raw, json)
Hash identifier: VFEkgBA8pKq8SUMIn2yAyUmxFldm4wisgWFekx/4pFA=
Subject key identifier: D7:F9:FB:51:34:B9:49:51:81:66:B1:BB:09:A0:79:42:B7:97:76:9E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 13173D3E42CA16BD57EE00548757A7A94E942F2C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS396998.roa
Signing time: Fri 26 Sep 2025 11:32:03 +0000
ROA not before: Fri 26 Sep 2025 11:27:03 +0000
ROA not after: Fri 25 Sep 2026 11:32:03 +0000
asID: 396998
IP address blocks: 155.117.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:17:3d:3e:42:ca:16:bd:57:ee:00:54:87:57:a7:a9:4e:94:2f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 26 11:27:03 2025 GMT
Not After : Sep 25 11:32:03 2026 GMT
Subject: CN=D7F9FB5134B949518166B1BB09A07942B797769E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:ae:99:36:34:59:35:d1:41:58:88:9f:33:
d6:8d:3f:97:06:71:eb:7f:22:8f:bb:c2:33:e6:ea:
58:14:29:cb:36:54:0d:5a:21:27:3f:b0:de:95:9b:
72:10:e8:80:85:c5:eb:9a:4a:0b:8c:93:02:68:7a:
35:b0:e9:8d:47:1d:63:01:b3:16:c9:f3:ff:d3:5c:
dd:31:ad:59:13:3d:bb:d0:ae:78:97:ad:04:94:70:
55:46:e2:e4:71:65:b6:e2:95:73:1d:df:aa:cb:6e:
e2:5c:b3:ac:51:7c:7b:06:fe:57:28:45:cb:84:79:
e7:22:00:f2:29:fc:cc:2c:bc:ea:5d:b3:ff:1e:56:
fb:0a:be:84:47:3c:88:41:55:38:49:37:bb:01:3a:
b9:b5:90:75:71:3b:45:30:7f:c2:b3:3e:5f:ea:eb:
ef:7d:60:cb:73:bc:28:4c:71:46:0e:5d:1f:fc:22:
ed:6e:cc:9d:04:09:2f:ad:00:5b:04:48:98:29:12:
dd:f7:6c:58:86:e9:6c:eb:f7:25:6f:b6:e2:7c:8b:
03:74:ea:b9:4d:e6:b2:ce:d1:86:47:53:84:a5:b7:
3c:d4:bb:a8:ed:ff:d1:7d:90:09:32:02:48:5b:59:
f3:87:f2:ee:e7:05:19:7f:4b:27:28:54:0d:40:5e:
c8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F9:FB:51:34:B9:49:51:81:66:B1:BB:09:A0:79:42:B7:97:76:9E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS396998.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.227.0/24
Signature Algorithm: sha256WithRSAEncryption
61:17:22:70:7f:fc:60:c2:d6:4e:ad:5c:b2:d8:da:b0:4d:de:
ca:ee:a6:0b:68:fd:0d:fd:9e:9b:ee:05:f7:56:da:e1:d1:08:
6a:45:44:a9:05:16:92:03:de:ac:00:78:11:24:6b:bd:cb:44:
7b:5f:8a:d7:51:19:cc:8e:2d:88:1a:ba:85:3a:9e:79:b1:6d:
05:80:8b:ce:ac:48:aa:72:e8:9c:8c:5a:8b:e1:a7:4a:f5:84:
ba:5e:d1:b8:52:4a:de:49:58:57:a7:e1:60:8a:c6:0b:6a:23:
d0:3b:84:eb:14:20:0d:79:15:ae:bd:4a:5b:bc:3e:e5:c9:50:
5d:c6:0d:bd:64:ae:86:ca:ca:05:ae:53:4a:21:68:39:dc:2a:
fb:37:b4:9d:75:19:ae:1a:2d:20:05:3d:d0:43:7b:1b:f6:ce:
d7:1f:c5:f7:e6:62:79:95:95:05:89:95:fd:3f:a4:73:98:45:
64:ff:6a:b1:4f:3b:d5:51:18:6f:1b:5a:b5:be:56:92:74:aa:
7b:71:16:39:48:61:19:a0:01:d3:07:46:f8:88:da:90:f6:0d:
bf:5c:0f:30:2e:0e:8e:9e:df:62:7b:95:21:c2:ef:07:8f:ac:
4b:0a:6f:ea:16:55:2b:ae:c4:e2:bf:40:77:b7:97:c4:e5:a2:
de:08:93:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:10:41 2025 by rpki-client