Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399955.roa
File: AS399955.roa (raw, json)
Hash identifier: 77jyfUw4dz9s0js8YepJWvopOSMlcTnKq+r2ZftDhcM=
Subject key identifier: 05:31:04:5C:EF:51:B7:4E:9A:E6:D8:E3:1A:74:C1:6E:BE:9A:02:1E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1D3D563D88BD2F8EB248C8C8F45E1F396F569829
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399955.roa
Signing time: Sun 08 Nov 2026 00:09:26 +0000
ROA not before: Sun 08 Nov 2026 00:04:26 +0000
ROA not after: Sun 07 Nov 2027 00:09:26 +0000
asID: 399955
IP address blocks: 143.14.232.0/21 maxlen: 24
162.141.2.0/23 maxlen: 24
162.141.6.0/23 maxlen: 24
162.141.22.0/23 maxlen: 24
162.141.28.0/22 maxlen: 24
162.141.32.0/22 maxlen: 24
162.141.40.0/22 maxlen: 24
162.141.56.0/22 maxlen: 24
162.141.60.0/22 maxlen: 24
162.141.72.0/22 maxlen: 24
162.141.76.0/23 maxlen: 24
162.141.134.0/23 maxlen: 24
162.141.156.0/23 maxlen: 24
162.141.192.0/21 maxlen: 24
162.141.200.0/21 maxlen: 24
162.141.208.0/21 maxlen: 24
162.141.216.0/21 maxlen: 24
162.141.232.0/21 maxlen: 24
167.148.16.0/21 maxlen: 24
167.148.24.0/22 maxlen: 24
167.148.44.0/23 maxlen: 24
167.148.48.0/21 maxlen: 24
167.148.56.0/22 maxlen: 24
167.148.60.0/22 maxlen: 24
167.148.76.0/22 maxlen: 24
167.148.224.0/21 maxlen: 24
167.148.232.0/21 maxlen: 24
167.148.240.0/21 maxlen: 24
168.222.6.0/24 maxlen: 24
168.222.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 07:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:3d:56:3d:88:bd:2f:8e:b2:48:c8:c8:f4:5e:1f:39:6f:56:98:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 8 00:04:26 2026 GMT
Not After : Nov 7 00:09:26 2027 GMT
Subject: CN=0531045CEF51B74E9AE6D8E31A74C16EBE9A021E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c3:a6:33:c2:a0:b2:b7:a2:62:31:f5:c8:d0:
73:d8:ab:ac:bc:c7:e5:ca:aa:4a:47:a3:42:00:86:
7e:a3:9a:83:5e:62:eb:fd:5b:eb:fb:ca:57:86:e9:
cd:5b:73:42:de:fd:d6:08:27:e7:e5:bc:96:6f:3a:
20:ef:06:6f:ef:0d:71:6b:37:9b:cd:dc:34:0f:68:
71:a7:cb:87:e9:62:8c:05:72:16:cc:31:af:5f:ba:
df:92:45:13:19:f2:86:62:a9:c2:ab:2c:de:ba:ca:
b9:a4:a5:07:83:c1:f3:fa:97:a0:a1:b9:ea:9b:40:
e3:c4:d8:85:54:54:0e:63:43:30:34:43:d0:04:f0:
7d:db:a3:26:70:94:00:98:bd:d3:4c:69:2b:6d:4e:
30:3a:5c:62:e9:0d:30:77:5b:de:08:c8:71:93:9d:
78:be:b4:48:7e:6f:b3:ad:12:72:c4:02:7e:bc:1e:
17:90:79:ed:45:e8:01:3b:84:07:e2:a8:42:b6:8b:
6f:f6:70:5f:94:b4:4d:6f:c8:4c:50:ee:e1:a3:92:
f4:b8:49:96:cf:8a:5d:8d:66:74:7b:47:75:4d:e4:
e0:f1:75:d7:33:1f:d8:e0:6a:ef:50:6f:fe:5e:af:
06:45:e7:2a:f3:23:7e:cb:84:da:33:20:e7:4d:94:
a1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:31:04:5C:EF:51:B7:4E:9A:E6:D8:E3:1A:74:C1:6E:BE:9A:02:1E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399955.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.232.0/21
162.141.2.0/23
162.141.6.0/23
162.141.22.0/23
162.141.28.0-162.141.35.255
162.141.40.0/22
162.141.56.0/21
162.141.72.0-162.141.77.255
162.141.134.0/23
162.141.156.0/23
162.141.192.0/19
162.141.232.0/21
167.148.16.0-167.148.27.255
167.148.44.0/23
167.148.48.0/20
167.148.76.0/22
167.148.224.0-167.148.247.255
168.222.6.0/24
168.222.126.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:4e:2c:55:73:d2:f6:02:20:d2:df:e1:f9:c7:ba:ae:05:0d:
04:ec:4b:60:2d:a0:5e:56:c9:03:bd:3d:85:c0:9a:d6:5e:57:
9b:20:13:3c:d3:97:c9:02:ac:c7:5f:33:17:05:8e:13:77:f4:
ea:9c:d8:ea:ac:71:9d:02:22:3e:36:82:90:f2:05:c2:27:e2:
aa:b9:94:5a:74:d3:17:ce:7f:94:fc:a1:62:07:7b:0f:e8:3e:
d1:c9:13:8d:4e:23:6c:f3:75:20:e3:f7:97:58:58:c5:f6:ca:
4c:b0:6d:68:d9:7f:76:15:11:58:b5:63:4a:b3:5a:46:6e:0c:
fc:c3:84:2e:a2:98:e1:af:bb:bf:83:4d:76:43:88:eb:61:d2:
84:a1:a8:ef:77:d6:3f:35:a6:8d:ea:77:a2:1d:74:61:a3:41:
2e:6d:9b:80:ea:6d:6b:64:80:04:06:af:3f:ef:12:a5:ef:8f:
97:cb:21:47:80:68:90:8d:4b:2f:1c:dd:ff:27:99:18:28:16:
44:e2:ea:d1:79:8c:ab:f5:c5:bb:f1:ad:53:9b:0f:b8:1a:df:
b0:21:a6:fd:f5:3d:e4:82:a5:5b:bd:21:58:50:ea:f2:ba:b9:
3f:e8:e3:3e:72:ca:67:c2:2a:cd:19:c7:19:77:4e:19:74:1b:
ea:0a:81:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:31:38 2026 by rpki-client