Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399073.roa
File: AS399073.roa (raw, json)
Hash identifier: OgYoU0MA5+QXBT+jvwsqRi+8JsSWS4/sBS4q421fihg=
Subject key identifier: 79:65:55:8D:CF:D3:9E:F5:D5:58:62:61:FE:45:6E:1C:60:5E:63:9E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 15C6E15DB9D30B755536051D5D52CC2F420CD608
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399073.roa
Signing time: Tue 09 Sep 2025 14:48:34 +0000
ROA not before: Tue 09 Sep 2025 14:43:34 +0000
ROA not after: Tue 08 Sep 2026 14:48:34 +0000
asID: 399073
IP address blocks: 140.150.235.0/24 maxlen: 24
140.150.237.0/24 maxlen: 24
140.233.188.0/23 maxlen: 24
143.14.24.0/24 maxlen: 24
143.14.25.0/24 maxlen: 24
143.14.26.0/24 maxlen: 24
143.14.27.0/24 maxlen: 24
143.14.28.0/24 maxlen: 24
143.14.29.0/24 maxlen: 24
143.14.30.0/24 maxlen: 24
143.14.31.0/24 maxlen: 24
143.14.96.0/24 maxlen: 24
143.14.97.0/24 maxlen: 24
143.14.98.0/24 maxlen: 24
143.14.99.0/24 maxlen: 24
143.14.100.0/24 maxlen: 24
143.14.101.0/24 maxlen: 24
143.14.102.0/24 maxlen: 24
143.14.103.0/24 maxlen: 24
143.14.112.0/24 maxlen: 24
143.14.113.0/24 maxlen: 24
143.14.115.0/24 maxlen: 24
143.14.116.0/24 maxlen: 24
143.14.117.0/24 maxlen: 24
143.14.118.0/24 maxlen: 24
143.14.119.0/24 maxlen: 24
150.241.229.0/24 maxlen: 24
150.241.232.0/24 maxlen: 24
155.117.14.0/24 maxlen: 24
155.117.24.0/24 maxlen: 24
155.117.25.0/24 maxlen: 24
155.117.26.0/24 maxlen: 24
155.117.27.0/24 maxlen: 24
155.117.28.0/24 maxlen: 24
155.117.29.0/24 maxlen: 24
155.117.30.0/24 maxlen: 24
155.117.31.0/24 maxlen: 24
155.117.55.0/24 maxlen: 24
155.117.56.0/24 maxlen: 24
155.117.57.0/24 maxlen: 24
155.117.58.0/24 maxlen: 24
155.117.59.0/24 maxlen: 24
155.117.64.0/24 maxlen: 24
155.117.65.0/24 maxlen: 24
155.117.66.0/24 maxlen: 24
155.117.67.0/24 maxlen: 24
155.117.68.0/24 maxlen: 24
155.117.69.0/24 maxlen: 24
155.117.70.0/24 maxlen: 24
155.117.71.0/24 maxlen: 24
155.117.72.0/24 maxlen: 24
155.117.73.0/24 maxlen: 24
155.117.74.0/24 maxlen: 24
155.117.75.0/24 maxlen: 24
155.117.78.0/24 maxlen: 24
155.117.80.0/24 maxlen: 24
155.117.88.0/24 maxlen: 24
155.117.89.0/24 maxlen: 24
155.117.90.0/24 maxlen: 24
155.117.91.0/24 maxlen: 24
155.117.92.0/24 maxlen: 24
155.117.93.0/24 maxlen: 24
155.117.94.0/24 maxlen: 24
155.117.95.0/24 maxlen: 24
155.117.103.0/24 maxlen: 24
155.117.128.0/24 maxlen: 24
155.117.129.0/24 maxlen: 24
155.117.130.0/24 maxlen: 24
155.117.131.0/24 maxlen: 24
155.117.132.0/24 maxlen: 24
155.117.133.0/24 maxlen: 24
155.117.134.0/24 maxlen: 24
155.117.135.0/24 maxlen: 24
155.117.211.0/24 maxlen: 24
155.117.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:c6:e1:5d:b9:d3:0b:75:55:36:05:1d:5d:52:cc:2f:42:0c:d6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 9 14:43:34 2025 GMT
Not After : Sep 8 14:48:34 2026 GMT
Subject: CN=7965558DCFD39EF5D5586261FE456E1C605E639E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d1:fd:74:73:2c:96:65:e4:89:cb:fc:a0:e4:
5b:d4:e5:45:e6:8a:1d:b8:e1:94:15:4e:c4:f1:ff:
a4:d0:77:eb:15:4b:12:e6:a4:0e:a7:88:0c:c7:08:
de:6f:4a:83:31:13:64:fa:d8:07:70:3f:35:17:42:
78:06:19:ef:cc:b0:bb:a7:b9:70:7d:70:23:90:d3:
68:85:8e:64:b0:88:0f:50:b5:e9:23:45:a5:36:89:
51:4a:e5:1e:9c:e8:81:4b:36:79:a0:38:87:b7:81:
96:c0:eb:6e:89:64:6e:7e:b3:ac:96:3a:c3:a3:6e:
4b:30:88:cd:11:99:1d:ea:f5:82:0c:41:1f:78:1b:
06:3e:d8:96:df:cf:7b:4c:29:c1:60:42:02:ae:ce:
88:89:3d:f6:02:86:84:c4:52:9d:52:6f:d7:d7:b2:
a0:25:3a:3e:13:5c:e7:7b:39:79:38:33:56:d7:96:
3b:34:7b:55:10:5e:e6:27:0e:12:e9:10:c4:0c:ba:
d7:9e:92:65:04:09:de:e1:4f:46:69:be:b3:cd:f8:
03:46:72:2c:99:40:73:41:87:dc:d9:d7:ea:47:a4:
88:c5:5e:a4:c7:c2:25:a2:f2:53:00:a6:31:5c:d9:
55:15:d5:6b:9b:7e:66:20:87:56:15:e5:e6:c1:df:
45:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:65:55:8D:CF:D3:9E:F5:D5:58:62:61:FE:45:6E:1C:60:5E:63:9E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399073.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.235.0/24
140.150.237.0/24
140.233.188.0/23
143.14.24.0/21
143.14.96.0/21
143.14.112.0/23
143.14.115.0-143.14.119.255
150.241.229.0/24
150.241.232.0/24
155.117.14.0/24
155.117.24.0/21
155.117.55.0-155.117.59.255
155.117.64.0-155.117.75.255
155.117.78.0/24
155.117.80.0/24
155.117.88.0/21
155.117.103.0/24
155.117.128.0/21
155.117.211.0/24
155.117.226.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:31:97:33:b3:ff:dc:4a:38:2b:b1:41:2a:45:14:cb:fc:ca:
17:f3:aa:bf:9c:f7:64:c9:04:6b:16:64:35:c1:da:76:5c:c3:
e2:d9:b1:e6:d6:ef:6c:71:16:d0:fe:dc:f2:60:66:f7:45:d1:
39:13:ab:53:1a:c5:c7:2c:8b:ea:f3:22:49:5e:86:a9:00:90:
c6:66:e5:ae:a3:52:73:93:6e:c4:0e:3d:b8:87:00:60:c8:9e:
b2:7e:74:58:1b:25:a2:43:ea:f9:b2:3f:55:db:22:a6:6a:d5:
bd:18:dc:62:8b:41:6b:51:7a:ac:b8:05:ca:8f:a5:78:7d:b8:
d9:95:e9:2f:a8:1a:67:f6:06:c2:4b:c9:75:6c:d2:e5:2a:31:
86:e4:47:6a:b3:7c:10:9d:a9:c5:b8:89:fc:4d:00:d1:0c:fb:
b3:6c:07:90:41:32:42:26:2c:19:db:9c:01:ce:e3:c9:32:06:
09:bb:9b:41:cd:7e:24:2a:f9:cc:e7:93:0e:32:67:7e:25:39:
37:75:7b:73:04:68:0c:25:39:5a:4e:12:13:45:6d:13:03:55:
ed:1a:03:86:13:20:84:a3:cb:2f:4f:a3:66:b4:d7:83:ea:54:
38:f9:a0:63:43:a6:a7:15:9c:39:f4:df:fa:d8:f9:fe:c1:3a:
ad:75:80:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:51:29 2025 by rpki-client