Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397423.roa
File: AS397423.roa (raw, json)
Hash identifier: kBbh0Chy6vtKxnJHe8lUgV5KpBFvoHEvyJVMSiowTVA=
Subject key identifier: EE:37:E7:18:C3:00:51:D9:D1:F8:3C:9C:62:7A:98:13:B6:06:FF:A1
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 022C30C8EB59EC0A83B63BD2B8B7E05F6F58CC71
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397423.roa
Signing time: Sat 07 Nov 2026 05:00:02 +0000
ROA not before: Sat 07 Nov 2026 04:55:02 +0000
ROA not after: Sat 06 Nov 2027 05:00:02 +0000
asID: 397423
IP address blocks: 143.14.180.0/24 maxlen: 24
145.223.44.0/24 maxlen: 24
145.223.54.0/24 maxlen: 24
145.223.58.0/24 maxlen: 24
146.103.5.0/24 maxlen: 24
150.241.226.0/23 maxlen: 24
155.117.164.0/24 maxlen: 24
155.117.246.0/24 maxlen: 24
162.141.124.0/24 maxlen: 24
162.141.127.0/24 maxlen: 24
167.148.15.0/24 maxlen: 24
167.148.40.0/24 maxlen: 24
167.148.158.0/24 maxlen: 24
167.148.175.0/24 maxlen: 24
167.148.217.0/24 maxlen: 24
167.148.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:2c:30:c8:eb:59:ec:0a:83:b6:3b:d2:b8:b7:e0:5f:6f:58:cc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 7 04:55:02 2026 GMT
Not After : Nov 6 05:00:02 2027 GMT
Subject: CN=EE37E718C30051D9D1F83C9C627A9813B606FFA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:44:24:d9:56:cf:fd:fa:23:f9:06:3e:77:43:
d5:b0:37:7f:a6:d4:a1:5d:7c:e7:da:43:1f:55:35:
24:d3:d8:4a:9d:61:fa:98:49:40:80:39:91:60:d2:
f7:91:3d:cf:ce:d7:e7:b1:8b:0e:8e:bb:76:c6:0a:
05:38:1f:7d:d6:ae:e2:23:46:59:ca:62:a9:b8:e0:
c9:fd:1d:1f:d8:6c:57:98:f4:31:00:4f:4a:ca:b2:
0a:c6:13:05:c4:1a:d7:6b:37:78:20:f1:99:97:48:
26:c9:ae:ef:65:d6:97:f0:76:06:84:45:1d:60:21:
b0:e2:9c:fc:27:46:be:6e:ad:94:2b:2e:7f:d1:48:
78:b3:b4:45:39:3d:79:59:7f:30:6c:1a:81:c6:f4:
fe:94:c2:b8:ad:9c:2f:04:ab:db:49:e0:dd:20:3f:
02:1b:7d:ed:ca:d1:13:3c:55:d5:93:ae:a3:0a:b6:
b4:48:44:39:c0:f6:33:bd:44:b4:f3:3d:1f:da:a1:
8e:12:f7:59:22:d7:6a:c2:d6:be:60:88:7f:01:ab:
07:7d:10:49:6e:5a:ef:3a:8b:bb:d9:4a:03:5b:2e:
cc:b5:40:60:bb:45:15:0b:16:96:32:2e:99:c8:d9:
aa:cb:d6:08:e7:50:ac:62:28:c6:6f:01:32:03:c9:
48:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:37:E7:18:C3:00:51:D9:D1:F8:3C:9C:62:7A:98:13:B6:06:FF:A1
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397423.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.180.0/24
145.223.44.0/24
145.223.54.0/24
145.223.58.0/24
146.103.5.0/24
150.241.226.0/23
155.117.164.0/24
155.117.246.0/24
162.141.124.0/24
162.141.127.0/24
167.148.15.0/24
167.148.40.0/24
167.148.158.0/24
167.148.175.0/24
167.148.217.0/24
167.148.219.0/24
Signature Algorithm: sha256WithRSAEncryption
45:b5:87:97:f0:a4:1a:30:94:d3:36:6c:aa:c5:1c:f3:6a:ff:
ab:3f:0e:4d:fc:ae:f4:67:f5:b2:4b:ed:b6:ab:f6:34:44:8d:
f2:74:92:fe:60:94:03:28:26:6a:58:17:1a:e2:33:d6:92:44:
10:fc:6b:9b:0b:a8:90:50:39:eb:be:5a:1e:1a:08:3f:3f:11:
26:f6:48:e0:42:6b:e8:bf:db:dd:a2:c5:03:a1:7a:7d:84:fd:
d3:b3:ca:1a:9e:d4:99:52:39:8c:0b:92:f2:a7:88:1b:52:dd:
35:d5:f7:14:a9:c4:c0:80:5b:d8:a4:26:3b:4d:28:e8:03:7d:
f7:c3:5b:bb:ed:a3:41:38:95:e2:3d:96:55:77:1d:e7:4a:dc:
0a:b2:83:13:83:71:80:17:f5:44:73:85:3f:87:17:a8:b5:c3:
44:ef:c5:c9:60:91:48:78:f1:98:92:f0:d1:43:eb:b5:3a:46:
f2:d8:9f:27:19:09:5f:be:f4:55:00:8f:b7:ca:ec:71:ce:a0:
0a:67:72:74:72:29:ee:f7:b9:32:f2:db:a7:d6:51:be:06:d5:
2f:ce:76:44:30:09:fa:47:58:d4:20:70:24:9a:f1:85:b5:1c:
1c:ef:90:10:94:67:27:10:3f:af:1b:14:35:24:f3:cc:28:df:
0a:01:ee:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:28:04 2026 by rpki-client