Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397630.roa
File: AS397630.roa (raw, json)
Hash identifier: 7vCPt7EkyJnp16qSFmHPFQBfNQRhlWp9uT2F1JDeHsM=
Subject key identifier: DC:F2:F3:DC:F6:AB:F7:21:BF:CA:26:4C:13:D2:57:60:16:92:E7:E3
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 01ABB10523A04B5BCF78DA43BC550C94372A6448
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397630.roa
Signing time: Tue 21 Jul 2026 14:10:05 +0000
ROA not before: Tue 21 Jul 2026 14:05:05 +0000
ROA not after: Tue 20 Jul 2027 14:10:05 +0000
asID: 397630
IP address blocks: 143.14.188.0/24 maxlen: 24
150.241.174.0/24 maxlen: 24
150.241.234.0/24 maxlen: 24
150.241.251.0/24 maxlen: 24
155.117.81.0/24 maxlen: 24
162.141.48.0/24 maxlen: 24
162.141.116.0/24 maxlen: 24
162.141.138.0/24 maxlen: 24
167.148.136.0/24 maxlen: 24
167.148.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:ab:b1:05:23:a0:4b:5b:cf:78:da:43:bc:55:0c:94:37:2a:64:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 21 14:05:05 2026 GMT
Not After : Jul 20 14:10:05 2027 GMT
Subject: CN=DCF2F3DCF6ABF721BFCA264C13D257601692E7E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:d4:b3:e0:c6:8c:8f:51:9b:51:b5:ca:41:
cd:a7:7e:30:3c:85:68:eb:b9:c0:58:a0:ab:61:9a:
73:6b:fc:4d:b9:38:b2:b2:56:77:0f:5b:43:84:be:
b7:99:2b:96:f5:e3:2f:06:2a:56:11:f5:b3:93:1f:
4d:5a:12:00:b7:16:19:e7:b8:93:a9:32:0d:4d:87:
76:86:10:cd:13:35:f8:d6:aa:28:e9:8a:53:cd:f3:
db:3b:00:76:93:0d:1f:bf:f2:12:f0:21:bc:f0:ac:
b8:bc:9f:83:2b:44:63:0a:df:39:ec:43:3c:16:74:
78:40:0b:66:c9:5b:7d:c9:0a:7f:c9:f0:f1:9b:9f:
97:cd:8a:4a:d6:2c:f2:81:5f:c5:f6:6e:7e:53:c8:
72:2a:b4:af:d6:8f:e1:af:24:74:42:cb:e5:0c:62:
01:35:8f:79:15:70:f3:c0:56:f4:1a:28:0a:01:05:
c7:f1:ff:1e:cb:42:6e:ff:ec:d5:dd:e1:c2:d3:d0:
ea:73:e0:ac:a1:21:9c:40:dd:c3:4b:2f:bf:57:e8:
fd:3c:19:3f:d0:ca:8a:c7:4d:d5:45:33:14:69:d4:
1d:d9:c6:26:d6:91:aa:59:3f:a1:b3:1d:da:f9:73:
f0:a2:7f:65:b7:d9:09:6a:19:78:41:d1:b1:91:1c:
e1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F2:F3:DC:F6:AB:F7:21:BF:CA:26:4C:13:D2:57:60:16:92:E7:E3
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.188.0/24
150.241.174.0/24
150.241.234.0/24
150.241.251.0/24
155.117.81.0/24
162.141.48.0/24
162.141.116.0/24
162.141.138.0/24
167.148.136.0/24
167.148.162.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:71:58:6a:70:5f:cd:bb:18:3f:72:3a:e5:b4:02:37:e5:92:
b6:28:82:6f:0e:d2:31:b1:c5:99:fd:f6:42:0f:47:a8:3e:d7:
a5:8c:b5:38:94:aa:80:db:5f:f1:5b:25:c4:62:05:01:58:ed:
93:bf:4f:d3:f2:54:ac:aa:64:01:fd:92:a5:de:a7:a5:83:3d:
df:d6:5b:35:f9:77:b3:33:00:b6:5e:3b:82:e1:49:bd:ed:04:
36:01:85:a5:ac:4e:91:60:22:24:1f:a3:db:e2:f9:0d:4d:56:
b3:34:82:5a:1d:e9:70:56:1e:7f:c5:67:9e:37:ee:4f:5f:c8:
25:56:5d:c5:6b:5e:e3:ab:2e:cd:e1:e2:66:dd:cd:d3:fc:3a:
fd:a7:c0:f2:13:ac:7f:93:2f:ca:a6:51:9e:69:ef:b8:1a:28:
aa:4b:fe:5f:64:03:25:1e:75:fb:3e:9d:3a:38:9b:47:18:69:
53:b8:c4:ff:6b:ae:ad:e2:4d:b1:9b:79:7b:3c:d3:8c:a4:83:
58:59:39:ab:aa:ee:0b:e6:e8:ad:dc:5f:29:03:c4:9a:23:0c:
4d:ae:64:99:5a:e9:25:bf:1d:cd:c9:f0:cf:7b:8b:02:1f:c7:
82:2e:d9:cb:ef:07:f5:7a:7d:7e:28:1c:a2:ee:49:84:5f:86:
cc:a0:d0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:20:21 2026 by rpki-client