Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS398256.roa
File: AS398256.roa (raw, json)
Hash identifier: cC0Iv9KFyvaARYhRRbWwMRdulisDe83gd0aRwgFRJe8=
Subject key identifier: 2F:77:8C:08:17:BB:CB:03:57:9E:07:52:F1:07:9F:4E:2D:F9:11:F8
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2BF586D4EFEA4410052DBB052DEFF6D38A1E489D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS398256.roa
Signing time: Mon 06 Oct 2025 13:42:53 +0000
ROA not before: Mon 06 Oct 2025 13:37:53 +0000
ROA not after: Mon 05 Oct 2026 13:42:53 +0000
asID: 398256
IP address blocks: 96.62.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:f5:86:d4:ef:ea:44:10:05:2d:bb:05:2d:ef:f6:d3:8a:1e:48:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 6 13:37:53 2025 GMT
Not After : Oct 5 13:42:53 2026 GMT
Subject: CN=2F778C0817BBCB03579E0752F1079F4E2DF911F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:da:d4:e8:ec:31:f7:32:d3:d9:9d:b1:d1:
e7:e2:90:78:4c:c9:59:10:9d:61:60:25:13:6a:4c:
6a:1e:a0:e2:94:d2:c9:60:57:b9:d5:6f:a8:2c:d2:
37:fe:97:f1:5c:58:b1:ce:c9:cd:03:fa:7a:72:29:
ae:f5:10:93:a2:63:4a:60:00:01:4a:cd:28:6c:a3:
38:68:d6:fb:d5:f4:1b:bb:ee:08:02:07:97:6e:11:
45:38:70:56:dc:15:24:5d:ee:0e:80:d2:2d:f3:49:
11:c7:5a:54:83:79:44:85:94:f5:05:c4:9b:cd:13:
5a:a0:e6:56:17:46:4a:1a:7e:43:91:1a:53:52:d0:
1f:9b:e8:6f:2e:30:3c:d1:3f:74:7e:0a:13:fb:7b:
8d:69:53:1e:e9:d5:1b:e6:6b:23:91:4b:59:f7:15:
fb:52:26:08:ed:39:57:f7:c5:72:ef:9f:cf:c2:fa:
5e:08:c4:9e:79:d5:14:88:45:c8:32:ee:b1:e0:9d:
af:b4:7a:5f:f4:1b:a5:4b:5d:84:2c:15:b9:7b:95:
48:86:23:76:f6:79:9b:14:d3:82:bf:49:3b:6d:9d:
70:99:b0:26:2c:83:dc:87:b7:2b:1f:59:f3:fb:93:
4b:3e:4d:19:87:4d:ad:f6:ad:94:f6:79:76:04:cf:
5e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:77:8C:08:17:BB:CB:03:57:9E:07:52:F1:07:9F:4E:2D:F9:11:F8
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS398256.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.77.0/24
Signature Algorithm: sha256WithRSAEncryption
19:6f:0e:22:28:9a:23:5f:35:4c:a0:c6:1e:66:8a:b2:a2:f0:
bd:73:53:d8:5b:92:c8:f9:8c:99:cb:ef:9f:e3:4a:42:f5:67:
ab:eb:c6:e3:88:b1:f8:c3:82:d2:d5:f4:09:c8:c7:38:f4:34:
21:6b:67:5b:84:65:f8:de:94:1d:9f:44:53:e3:8a:dc:93:fe:
f9:cd:f4:93:b5:7b:e0:42:78:56:ec:8d:7f:90:30:7e:72:56:
c0:f4:bb:6e:e8:11:09:2d:dc:c9:cc:21:03:13:d3:14:0d:eb:
f9:e1:b2:de:5d:04:fd:fa:c9:f4:d9:17:9e:71:60:64:14:a7:
c1:88:38:46:b3:0e:a9:c3:d8:dd:0a:0a:81:e6:65:05:5a:b1:
9a:ca:3f:fa:88:4b:b2:a1:44:10:59:81:0b:68:60:50:11:f4:
9d:9c:ab:72:02:02:3d:5a:7d:d1:4a:6c:e8:93:ec:1e:22:91:
75:b3:47:c2:3b:87:99:50:3b:c8:f5:4d:7c:1e:81:21:10:59:
f6:b0:7d:3b:d0:3c:e8:72:78:b0:ec:fc:f2:4d:86:ab:90:1f:
45:81:93:82:d2:2a:c1:60:45:43:34:d3:4d:5d:80:4e:eb:ed:
4a:11:0e:ef:dd:81:05:7e:ca:82:50:e4:88:15:1e:00:41:c3:
87:52:58:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:26:14 2025 by rpki-client