Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397423.roa
File: AS397423.roa (raw, json)
Hash identifier: 9Y/e2lFn5tYKVhydaRr+F7KY7QJFepOxeZUuyfOfYnw=
Subject key identifier: 6C:BC:EF:50:3E:E8:D9:4F:59:08:B2:A7:C7:6E:AC:6F:9A:70:3D:2A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5A2F730D9183D849C8F039790E29E7B20678877F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397423.roa
Signing time: Tue 22 Sep 2026 03:11:38 +0000
ROA not before: Tue 22 Sep 2026 03:06:38 +0000
ROA not after: Tue 21 Sep 2027 03:11:38 +0000
asID: 397423
IP address blocks: 96.62.115.0/24 maxlen: 24
143.14.180.0/24 maxlen: 24
145.223.44.0/24 maxlen: 24
145.223.54.0/24 maxlen: 24
145.223.58.0/24 maxlen: 24
146.103.5.0/24 maxlen: 24
150.241.226.0/23 maxlen: 24
155.117.164.0/24 maxlen: 24
155.117.246.0/24 maxlen: 24
162.141.124.0/24 maxlen: 24
162.141.127.0/24 maxlen: 24
167.148.15.0/24 maxlen: 24
167.148.158.0/24 maxlen: 24
167.148.175.0/24 maxlen: 24
167.148.217.0/24 maxlen: 24
167.148.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:44:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:2f:73:0d:91:83:d8:49:c8:f0:39:79:0e:29:e7:b2:06:78:87:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 22 03:06:38 2026 GMT
Not After : Sep 21 03:11:38 2027 GMT
Subject: CN=6CBCEF503EE8D94F5908B2A7C76EAC6F9A703D2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:97:39:07:b8:31:49:cf:c4:f3:16:91:26:ce:
51:bf:24:fa:df:5d:97:6d:f1:cb:1c:7f:28:6f:5e:
34:9b:6b:b1:7b:12:0d:5a:4c:d8:ad:dd:0b:37:ca:
6e:20:00:99:9f:2f:08:a0:4d:27:2f:48:6c:e2:60:
ef:ac:e7:17:81:d0:af:22:eb:9e:7f:16:d0:9c:b3:
1d:8d:c0:3e:8b:5c:21:5e:45:69:e6:35:50:c1:9e:
d9:b1:75:cd:4d:9a:f4:1f:e0:a6:2f:4d:d8:71:2a:
62:fd:c1:96:9d:9e:c9:e3:c7:b0:0f:52:37:51:df:
ad:99:3a:2b:82:76:ee:5f:06:8e:7f:87:fc:8f:05:
c7:2c:79:9a:70:25:14:a1:01:fd:62:c0:72:9a:06:
05:85:1f:2c:5a:21:70:f2:38:dc:1f:a0:dc:d5:fb:
1f:a7:c2:96:9a:d0:bc:66:c5:a5:24:7a:af:46:c1:
35:c3:89:25:b8:ce:79:1a:58:70:de:9c:56:e8:5b:
5a:b5:dd:04:36:88:01:be:b5:6d:ee:4c:7a:68:0c:
2b:29:5d:0d:22:48:95:32:ff:1f:d9:e7:e7:38:63:
ad:54:7d:26:84:92:0b:f0:e6:72:fe:d7:9e:0e:cc:
5c:4a:8e:b8:0a:46:fd:84:f0:e7:f2:80:df:88:66:
02:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BC:EF:50:3E:E8:D9:4F:59:08:B2:A7:C7:6E:AC:6F:9A:70:3D:2A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397423.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.115.0/24
143.14.180.0/24
145.223.44.0/24
145.223.54.0/24
145.223.58.0/24
146.103.5.0/24
150.241.226.0/23
155.117.164.0/24
155.117.246.0/24
162.141.124.0/24
162.141.127.0/24
167.148.15.0/24
167.148.158.0/24
167.148.175.0/24
167.148.217.0/24
167.148.219.0/24
Signature Algorithm: sha256WithRSAEncryption
80:3a:ab:5a:6b:1a:ca:26:10:14:16:87:d1:3a:33:aa:8f:c1:
ec:3f:e3:74:c3:2c:83:c2:f4:3a:4e:0d:dd:1a:bc:ce:4e:35:
78:7b:9f:d8:13:2d:33:2c:12:d4:e3:8c:24:74:ff:b0:41:c9:
f8:8f:06:80:77:95:5e:53:65:72:13:2f:ff:83:31:f6:48:05:
69:4c:82:6e:e4:07:c3:e2:01:64:65:66:72:6d:84:64:c0:2b:
c1:dc:d1:e5:e5:71:9a:80:90:35:5d:89:5b:69:4b:4b:fd:d0:
1c:67:0a:35:34:3f:e9:00:54:60:4e:97:df:36:09:af:cb:4b:
f1:fa:d5:b6:c8:63:33:50:67:70:bd:bd:d3:fe:57:73:78:f1:
2d:8c:0c:ec:4e:98:8d:14:54:75:97:85:1c:12:6d:5a:47:67:
e9:60:a1:a1:97:18:70:78:a8:6b:cb:9e:ed:fb:76:ad:ef:4c:
1d:08:db:de:a5:9b:04:39:c7:1d:e3:6d:fa:3e:d1:ae:ac:0a:
70:80:e4:a0:84:3a:36:da:a7:16:13:c5:15:5e:03:e2:4d:62:
7e:9a:49:cb:81:d1:2e:82:56:fa:0e:d5:7a:25:23:c4:96:2e:
cd:8f:df:c1:56:04:85:5f:a0:bd:c2:78:07:cd:21:1f:c6:db:
1f:8d:3d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:49:36 2026 by rpki-client