Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401479.roa
File: AS401479.roa (raw, json)
Hash identifier: 0rPlFyhCZYLKPNjwoIOjuSlfcJgHY4tFzRekQH+6LzA=
Subject key identifier: 27:2F:B3:D0:8E:F7:D5:51:D0:69:3A:3C:AD:0B:C8:DA:D6:55:2F:36
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4619B2EEF536040F67D79F6015525DA42AACF6FA
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401479.roa
Signing time: Thu 09 Jul 2026 23:49:08 +0000
ROA not before: Thu 09 Jul 2026 23:44:08 +0000
ROA not after: Thu 08 Jul 2027 23:49:08 +0000
asID: 401479
IP address blocks: 155.117.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:19:b2:ee:f5:36:04:0f:67:d7:9f:60:15:52:5d:a4:2a:ac:f6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 9 23:44:08 2026 GMT
Not After : Jul 8 23:49:08 2027 GMT
Subject: CN=272FB3D08EF7D551D0693A3CAD0BC8DAD6552F36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:5b:29:22:df:1f:9d:40:ba:1a:d5:d4:92:
f0:03:e1:4b:c6:05:1e:01:d3:8c:4c:44:6d:d4:34:
02:7d:2a:8f:df:19:f9:e0:13:35:e9:da:8c:80:35:
2c:26:34:81:bd:20:0f:03:2f:d4:ce:64:d3:c6:f6:
5d:82:8f:d2:f0:de:f6:07:c8:a6:7a:d7:e7:83:1d:
3c:7d:e4:8c:ba:f9:27:70:2c:75:17:0f:18:f6:c1:
38:ce:7d:fb:a1:01:bb:7a:0a:65:b3:33:77:c5:0c:
1d:fa:3b:5d:61:8c:21:48:45:0c:00:f1:a6:d0:24:
5f:9a:c4:cc:8b:55:de:de:12:0a:08:69:de:93:68:
c0:03:2f:40:ab:9d:94:0f:57:c4:f3:b6:85:ad:7d:
6b:53:d2:a1:ae:e3:c5:5b:55:78:be:3b:d2:ca:18:
59:41:1a:94:91:ee:93:5d:be:2d:2a:33:3f:4f:15:
89:9d:ec:2d:a6:70:76:2e:8e:da:e0:90:29:a8:4d:
da:01:dd:8a:aa:b3:4a:a1:67:9a:3a:3f:74:ed:46:
05:d2:a1:08:7e:44:58:e5:a3:76:05:a4:d3:f1:ff:
3e:06:87:e9:2e:b1:96:9b:60:94:2e:99:be:20:1a:
eb:45:f9:31:d7:6a:40:47:85:f6:a3:29:82:ed:26:
94:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2F:B3:D0:8E:F7:D5:51:D0:69:3A:3C:AD:0B:C8:DA:D6:55:2F:36
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401479.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.40.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:e6:65:6d:cc:30:0c:31:53:09:e4:96:ee:a0:d0:8b:75:37:
3b:6d:8f:0c:eb:db:ea:38:bc:3f:92:00:1e:49:74:24:6f:54:
fe:42:0e:ba:f7:21:b0:99:fe:fd:47:fb:ea:88:6b:71:5c:a8:
18:d3:49:40:9b:96:a7:fb:09:8c:12:02:92:bd:b8:fb:6c:35:
90:3e:72:32:cf:63:7c:62:16:5e:6f:f3:06:9d:94:8c:64:43:
f9:cf:79:1b:c2:99:15:9e:98:8a:bd:ca:1d:99:f4:a2:98:5f:
ad:8e:05:97:9e:71:2b:27:55:16:51:6d:f3:4b:7c:4f:75:b0:
84:38:65:39:62:bb:a2:06:94:a1:14:50:fc:bf:cd:3c:ff:cc:
25:e7:c7:e2:f7:30:11:b3:94:1f:16:88:bb:01:cc:d8:42:61:
65:b2:12:30:2c:2a:ec:50:e9:f9:b5:21:75:ee:a2:65:e1:87:
62:5e:ce:d8:be:09:4e:70:2f:5d:6e:93:a5:95:44:05:7d:4b:
a3:51:8e:c2:99:45:13:8f:00:ee:30:70:52:f8:9e:d0:3d:72:
b9:bc:e8:45:33:5e:62:ad:ee:4a:4d:f6:dd:d8:35:f3:69:1c:
93:c7:85:0d:37:b8:54:da:c6:b7:5c:25:45:70:7d:96:69:63:
8a:02:57:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:39:11 2026 by rpki-client