Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399955.roa
File: AS399955.roa (raw, json)
Hash identifier: zQxbDHEIAjfRU1MgDIWyab2StXr4YRzTFK0KFOx531A=
Subject key identifier: C9:1F:A6:23:7A:A9:F2:01:40:A0:D9:61:57:BD:00:32:7C:DC:6F:0A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7B4F99B7360BB6DF7882109035E95E2DCF814426
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399955.roa
Signing time: Wed 08 Jul 2026 00:04:43 +0000
ROA not before: Tue 07 Jul 2026 23:59:43 +0000
ROA not after: Wed 07 Jul 2027 00:04:43 +0000
asID: 399955
IP address blocks: 143.14.232.0/21 maxlen: 24
162.141.2.0/23 maxlen: 24
162.141.6.0/23 maxlen: 24
162.141.22.0/23 maxlen: 24
162.141.24.0/22 maxlen: 24
162.141.28.0/22 maxlen: 24
162.141.32.0/22 maxlen: 24
162.141.40.0/22 maxlen: 24
162.141.56.0/22 maxlen: 24
162.141.60.0/22 maxlen: 24
162.141.72.0/22 maxlen: 24
162.141.76.0/23 maxlen: 24
162.141.134.0/23 maxlen: 24
162.141.144.0/21 maxlen: 24
162.141.156.0/23 maxlen: 24
162.141.168.0/21 maxlen: 24
162.141.184.0/21 maxlen: 24
162.141.192.0/21 maxlen: 24
162.141.200.0/21 maxlen: 24
162.141.208.0/21 maxlen: 24
162.141.216.0/21 maxlen: 24
162.141.224.0/21 maxlen: 24
162.141.232.0/21 maxlen: 24
162.141.240.0/21 maxlen: 24
162.141.248.0/21 maxlen: 24
167.148.16.0/21 maxlen: 24
167.148.24.0/22 maxlen: 24
167.148.43.0/24 maxlen: 24
167.148.44.0/23 maxlen: 24
167.148.48.0/21 maxlen: 24
167.148.56.0/22 maxlen: 24
167.148.60.0/22 maxlen: 24
167.148.64.0/22 maxlen: 24
167.148.75.0/24 maxlen: 24
167.148.76.0/22 maxlen: 24
167.148.88.0/21 maxlen: 24
167.148.108.0/22 maxlen: 24
167.148.145.0/24 maxlen: 24
167.148.185.0/24 maxlen: 24
167.148.220.0/23 maxlen: 24
167.148.224.0/21 maxlen: 24
167.148.232.0/21 maxlen: 24
167.148.240.0/21 maxlen: 24
167.148.248.0/21 maxlen: 24
168.222.6.0/24 maxlen: 24
168.222.11.0/24 maxlen: 24
168.222.63.0/24 maxlen: 24
168.222.123.0/24 maxlen: 24
168.222.124.0/24 maxlen: 24
168.222.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:4f:99:b7:36:0b:b6:df:78:82:10:90:35:e9:5e:2d:cf:81:44:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 7 23:59:43 2026 GMT
Not After : Jul 7 00:04:43 2027 GMT
Subject: CN=C91FA6237AA9F20140A0D96157BD00327CDC6F0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a6:98:12:56:43:b3:ed:5d:f2:db:cb:d0:3a:
0a:98:34:03:24:00:a5:73:65:04:11:91:c8:2e:ff:
1d:0e:5c:49:9f:de:7e:01:a6:92:0a:5f:14:a3:98:
a7:dd:c6:c9:d9:ca:c9:3d:10:e1:03:6e:fb:1a:51:
5c:5e:f3:38:d4:bc:e4:b2:b6:1c:5e:e1:b3:35:3d:
52:a4:21:5a:5a:a3:02:94:3e:5b:4a:53:8b:ba:08:
d0:84:cd:5e:4f:f9:1b:33:c9:50:71:7c:25:ef:c5:
57:d4:2f:27:42:85:e7:3f:10:a4:1c:69:1b:65:63:
25:24:ca:7b:2c:1c:96:0d:89:c0:f2:2a:43:a8:dc:
da:81:47:45:6c:b8:cd:54:4a:7d:2c:27:a6:e0:e1:
e2:7a:d5:9e:38:67:fe:20:43:4c:2c:ff:15:ba:48:
a3:11:a6:94:ed:c8:79:26:ed:40:91:73:2c:15:7a:
14:ca:0d:45:e6:c3:22:a8:00:95:f8:97:8f:4b:20:
39:dd:b3:93:1f:ba:89:9b:cd:01:09:6c:60:4c:d8:
c3:44:95:88:11:c7:fd:de:ca:fc:4e:1c:c6:17:8a:
57:82:e4:e7:26:41:55:80:2e:bc:cd:8b:b4:1e:0f:
42:ee:60:3c:73:7e:28:37:d4:b4:90:21:ba:8f:0a:
d0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1F:A6:23:7A:A9:F2:01:40:A0:D9:61:57:BD:00:32:7C:DC:6F:0A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399955.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.232.0/21
162.141.2.0/23
162.141.6.0/23
162.141.22.0-162.141.35.255
162.141.40.0/22
162.141.56.0/21
162.141.72.0-162.141.77.255
162.141.134.0/23
162.141.144.0/21
162.141.156.0/23
162.141.168.0/21
162.141.184.0-162.141.255.255
167.148.16.0-167.148.27.255
167.148.43.0-167.148.45.255
167.148.48.0-167.148.67.255
167.148.75.0-167.148.79.255
167.148.88.0/21
167.148.108.0/22
167.148.145.0/24
167.148.185.0/24
167.148.220.0/23
167.148.224.0/19
168.222.6.0/24
168.222.11.0/24
168.222.63.0/24
168.222.123.0-168.222.124.255
168.222.126.0/23
Signature Algorithm: sha256WithRSAEncryption
85:a4:5a:42:a0:65:98:2c:0f:46:58:5f:65:a8:0d:1a:ae:dc:
59:03:ee:2f:74:1b:16:eb:ab:14:71:03:17:21:d3:f5:1c:c0:
bd:3e:5f:de:92:1d:16:15:d0:18:74:3d:f0:0e:af:79:c1:2f:
de:89:61:89:de:14:a8:c7:9e:3e:ef:2a:f4:e8:03:d0:d7:fa:
6f:c4:13:3b:20:61:54:e5:2c:c6:bb:3b:cf:67:34:5b:aa:14:
1d:fb:3d:a1:48:9d:11:0f:79:d1:1b:ef:86:22:d6:7d:1a:73:
f6:52:75:22:f6:94:72:10:c6:a3:a9:1a:78:50:75:20:6b:43:
bd:91:ee:ae:47:82:ea:b3:70:f6:f8:2b:04:c9:fb:ad:a1:19:
bf:83:5b:ff:5e:15:29:a3:5f:c3:d7:50:4e:6a:27:ce:63:43:
80:93:1f:be:ff:26:1e:43:00:a3:86:b2:0e:1d:aa:49:9c:d8:
67:14:93:e2:d7:04:b6:34:0b:75:b5:d1:d9:09:23:2d:15:e9:
94:da:b0:d1:29:58:e5:f3:82:6a:8f:f5:28:64:b3:c9:21:0f:
a9:46:b0:f4:ae:5e:f0:44:60:d5:cf:fe:dc:b1:ab:37:34:39:
bf:1e:a6:d4:b7:3e:d6:28:1f:05:53:67:a9:bf:55:5c:ff:2b:
f3:3e:ad:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:11:52 2026 by rpki-client