Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401362.roa
File: AS401362.roa (raw, json)
Hash identifier: GLPrsETvxeTTI+GF8GLwniT7dPM3M4auOrV0qpxOB2c=
Subject key identifier: F1:15:07:86:47:94:66:93:EC:CA:25:54:CB:F0:45:2C:1A:9E:D8:27
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 04410DEDA6CE0C9DA2A77B39071AE54402A0352A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401362.roa
Signing time: Thu 24 Sep 2026 03:43:42 +0000
ROA not before: Thu 24 Sep 2026 03:38:42 +0000
ROA not after: Thu 23 Sep 2027 03:43:42 +0000
asID: 401362
IP address blocks: 143.14.40.0/24 maxlen: 24
143.14.41.0/24 maxlen: 24
143.14.42.0/24 maxlen: 24
143.14.43.0/24 maxlen: 24
150.241.241.0/24 maxlen: 24
168.222.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:41:0d:ed:a6:ce:0c:9d:a2:a7:7b:39:07:1a:e5:44:02:a0:35:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 24 03:38:42 2026 GMT
Not After : Sep 23 03:43:42 2027 GMT
Subject: CN=F115078647946693ECCA2554CBF0452C1A9ED827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:24:5f:68:da:84:97:52:d0:0f:65:09:27:f4:
93:ce:2a:77:e7:4b:0d:d9:c3:db:06:24:8d:99:b7:
99:ff:09:30:12:49:ab:ef:ab:a7:c8:b7:e3:9b:06:
ef:71:cd:af:ce:35:8c:9a:ca:bb:ba:b8:08:40:0b:
85:e0:b1:cc:f6:30:78:fe:c2:f3:a7:bc:a4:d3:be:
f2:df:33:92:97:20:14:ec:98:d1:67:a5:c7:74:a6:
30:19:87:8a:4d:94:e9:e5:1d:3b:8d:58:4e:b2:9a:
0d:c5:33:fe:ca:32:e7:b4:87:25:c4:2a:18:46:78:
91:ff:bc:7f:e2:a6:4d:1e:39:aa:1d:fe:b7:5f:bf:
11:a8:fa:8c:f6:2e:1d:cf:1c:ca:0e:08:36:36:4f:
4f:08:69:12:91:fc:13:4c:c1:92:72:5e:d2:e6:77:
76:09:d3:fa:9a:d9:b2:8a:8b:08:7a:77:8d:0f:ee:
aa:c3:59:0c:6a:e2:49:9e:a7:fe:77:b2:b0:0d:67:
98:d2:b8:ee:96:d3:b6:0d:c5:42:7d:36:0e:e4:0d:
6b:ab:48:ad:3e:8b:bc:94:95:e9:d7:67:3a:1e:23:
24:05:77:11:0c:2c:4e:f4:f9:92:0f:51:ab:d9:9e:
8e:d2:8b:0b:ac:f3:48:e0:2e:5f:2b:02:d6:6a:bc:
42:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:15:07:86:47:94:66:93:EC:CA:25:54:CB:F0:45:2C:1A:9E:D8:27
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401362.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.40.0/22
150.241.241.0/24
168.222.62.0/24
Signature Algorithm: sha256WithRSAEncryption
05:9f:cc:68:89:3f:94:f9:87:94:da:b6:55:a8:68:9e:46:40:
91:7b:4e:7e:74:4c:57:be:86:93:9c:d2:39:9d:4b:22:e4:82:
f8:40:34:49:61:4d:0f:e3:bd:cd:13:6c:fa:a9:84:63:24:47:
6b:e1:2e:53:d7:49:6a:7c:8c:7a:75:d4:e6:f8:9f:79:1b:2d:
e3:2d:36:4e:77:ad:b8:ed:6c:ee:69:71:9a:d1:25:18:fb:6f:
ab:86:39:ec:8d:60:08:32:e1:09:b6:56:ff:b5:c7:5e:d2:1e:
6b:b4:a3:72:98:03:5a:7e:e7:e6:4e:0b:db:5a:23:83:fe:c0:
f7:47:90:fa:5d:a1:61:cc:c8:7e:1d:14:a9:dd:38:d5:d1:7c:
25:0f:75:2e:49:2b:47:6c:2f:24:14:1c:10:76:65:f0:d9:96:
a8:61:78:e8:5a:5c:40:71:e0:dd:52:f6:1d:e9:59:af:0a:e6:
62:ae:af:bc:cd:7e:9d:61:4b:65:ee:2a:66:4c:88:13:22:a0:
8d:23:7d:60:83:9d:5b:f8:08:4f:7f:f6:d5:d5:fc:22:3e:33:
07:33:eb:00:10:4f:a5:f5:32:5d:12:34:78:4c:92:4b:c0:ac:
1c:5f:ea:3d:ad:c3:1c:4c:15:b3:6e:07:47:10:a3:12:73:b1:
66:e0:b9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:32:41 2026 by rpki-client