Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399359.roa
File: AS399359.roa (raw, json)
Hash identifier: 6bM5alCNYVJqT8+jglFWRjjnHnqfl3dplYc1QGPggxQ=
Subject key identifier: 62:44:45:1D:37:5D:06:41:AD:A5:C2:4D:12:BE:58:94:80:AC:C2:FC
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7AB22769BE0BA34404F4F5D5B2EB729DE35A654D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399359.roa
Signing time: Mon 21 Sep 2026 08:10:18 +0000
ROA not before: Mon 21 Sep 2026 08:05:18 +0000
ROA not after: Mon 20 Sep 2027 08:10:18 +0000
asID: 399359
IP address blocks: 66.132.196.0/24 maxlen: 24
69.90.130.0/24 maxlen: 24
69.90.225.0/24 maxlen: 24
167.148.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:b2:27:69:be:0b:a3:44:04:f4:f5:d5:b2:eb:72:9d:e3:5a:65:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 21 08:05:18 2026 GMT
Not After : Sep 20 08:10:18 2027 GMT
Subject: CN=6244451D375D0641ADA5C24D12BE589480ACC2FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fd:ec:12:34:9b:49:48:44:c9:84:a8:71:cc:
9a:de:9e:68:c1:c5:60:ee:63:e0:9c:8e:64:98:f2:
49:d6:01:08:5f:57:96:06:7e:75:1b:89:3e:e5:83:
5c:70:9e:aa:be:96:90:8e:70:4c:b8:81:75:3f:07:
8e:e3:00:58:86:53:94:0a:7e:f5:4a:99:fc:13:2b:
18:1a:87:69:34:2c:b4:ee:6e:f1:93:1b:e6:d5:5c:
82:66:3a:d1:50:21:72:66:0f:dd:cf:3e:02:ec:a6:
e0:cb:70:9f:4e:d1:9e:80:48:18:67:6b:1f:33:5f:
82:b8:ba:04:b9:b0:9c:b2:58:ad:2a:7d:c9:63:af:
11:86:93:06:83:8a:f1:38:ac:a9:a6:38:68:4f:2b:
8f:96:07:c6:7a:85:bb:ca:f3:6c:e3:e7:09:b4:7d:
bc:22:b2:4d:89:80:38:23:74:f0:56:2b:f8:79:8d:
af:ff:ca:33:0e:d1:31:ba:8e:dc:38:4e:16:2b:58:
02:db:cb:45:ce:31:04:e5:bc:9b:c5:4a:9a:be:a8:
79:5f:7d:43:2d:22:b7:9c:52:c0:69:49:16:13:d9:
3e:40:2c:5d:40:3a:f8:91:42:77:0e:ce:a3:05:07:
83:37:40:e8:e9:19:2a:6d:c6:f5:3b:f9:5b:60:11:
09:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:44:45:1D:37:5D:06:41:AD:A5:C2:4D:12:BE:58:94:80:AC:C2:FC
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.132.196.0/24
69.90.130.0/24
69.90.225.0/24
167.148.80.0/24
Signature Algorithm: sha256WithRSAEncryption
46:0b:cc:55:d8:0d:5e:de:53:78:82:ee:6d:bb:45:01:d5:71:
43:29:4f:50:33:49:c5:a8:ba:44:40:04:76:9d:8a:01:5b:ea:
a7:1b:b2:b7:61:82:ce:41:35:5f:4a:f1:6f:d0:0f:1b:40:db:
0f:6e:96:25:44:57:6e:a3:dc:ab:12:30:12:0e:13:1c:14:dc:
09:f3:ca:0d:f3:d3:39:ef:b7:9e:69:fc:3d:e3:99:a6:bc:13:
6b:82:7f:3c:7d:dd:8d:75:4b:ee:81:93:4a:b7:5b:1d:7f:88:
50:29:58:ea:92:69:f8:2c:56:7a:26:95:da:7f:5e:6e:21:3c:
8e:b5:38:04:5e:5f:31:c9:07:36:71:ff:c4:d4:2d:4f:b2:89:
ac:97:45:37:78:a7:75:f5:e0:74:57:f1:08:27:6e:0d:c6:71:
f5:30:e5:3a:f0:c6:57:63:f7:e5:15:74:35:27:f8:95:3e:95:
0e:d5:b9:30:e7:08:24:fd:3d:31:a6:c1:a6:0d:8f:4c:a3:1c:
85:12:b2:a5:29:57:a3:0d:a0:51:18:64:99:e1:54:cb:e8:34:
cd:97:56:6c:d3:d7:3a:d6:ce:a4:ce:6d:d3:91:a7:1e:70:d1:
16:d3:a7:45:99:e9:8b:54:bf:29:1b:26:ff:4b:d6:27:ea:f4:
ab:86:76:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:52:18 2026 by rpki-client