Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401776.roa
File: AS401776.roa (raw, json)
Hash identifier: Mxz4CEbTu+l3D1oSeeyOdscNhNVmGhPu30FFOyuZ7Gs=
Subject key identifier: BF:66:47:16:0C:0C:90:6D:E9:FA:C0:99:A3:C7:21:A7:C6:F0:6D:7E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 71292E4C930590B4EE698C7BBEA35A266012ED5D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401776.roa
Signing time: Sat 14 Mar 2026 10:13:21 +0000
ROA not before: Sat 14 Mar 2026 10:08:21 +0000
ROA not after: Sat 13 Mar 2027 10:13:21 +0000
asID: 401776
IP address blocks: 96.62.114.0/24 maxlen: 24
150.241.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:29:2e:4c:93:05:90:b4:ee:69:8c:7b:be:a3:5a:26:60:12:ed:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 14 10:08:21 2026 GMT
Not After : Mar 13 10:13:21 2027 GMT
Subject: CN=BF6647160C0C906DE9FAC099A3C721A7C6F06D7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:42:b4:06:0a:85:66:ff:1d:cc:5c:17:4d:92:
97:80:1a:82:98:f2:05:22:0a:12:fb:cd:9b:aa:a1:
3e:48:3c:b7:b4:b4:a3:0d:57:6e:bf:3d:09:b3:d3:
05:c4:9c:ea:c1:11:2a:9b:5e:2e:b9:8a:57:6d:1b:
a6:2e:df:97:32:7a:ba:e6:cf:ab:32:1f:ca:dd:fb:
2e:2f:e7:2b:f5:dd:2c:5b:a2:8f:17:91:82:bd:78:
df:4b:a8:5f:98:20:7f:b1:95:3f:84:a8:eb:7b:e4:
00:ee:98:58:d9:e0:d8:74:fe:35:69:dd:48:b0:ae:
fb:a3:91:24:fe:c2:f5:7f:06:3b:b2:20:35:cd:19:
5b:f5:ae:88:a0:16:dd:b2:e2:37:27:6c:aa:8f:6e:
e5:8a:dd:fa:f3:17:27:37:fa:4e:ca:eb:fb:ec:97:
39:c0:d8:5e:03:6f:09:38:50:b4:ee:06:4f:7e:5b:
9c:ac:c8:7f:d3:0b:a6:a1:fc:53:7d:d2:f2:53:32:
67:a4:a9:5e:28:ce:c2:fe:c7:66:8c:27:e1:b7:a7:
21:34:5c:ae:dd:21:84:34:95:e0:d4:1b:06:f7:d9:
84:36:50:a7:c5:d0:de:f1:54:26:aa:e4:4b:4c:8c:
12:33:31:a3:6a:b5:17:be:45:eb:57:23:b9:70:bf:
05:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:66:47:16:0C:0C:90:6D:E9:FA:C0:99:A3:C7:21:A7:C6:F0:6D:7E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.114.0/24
150.241.131.0/24
Signature Algorithm: sha256WithRSAEncryption
44:cb:12:ee:16:4a:f3:b8:ca:94:fc:96:75:92:27:57:01:f8:
8c:f2:6d:2a:c0:cb:76:8a:68:1e:06:8f:7f:f1:6b:5c:c8:74:
0c:7c:15:4b:c9:cc:05:cd:16:86:a8:0d:30:d6:c2:54:98:2e:
1a:13:24:57:8d:f7:33:97:3e:ed:5f:c9:3e:91:49:e8:13:4d:
c7:dd:29:25:82:89:d8:17:73:3e:e1:ca:da:44:a6:26:94:be:
fb:42:b5:20:41:3f:e1:d2:23:0a:1f:c8:5b:7e:11:03:5e:e5:
9c:be:28:0f:43:a6:27:00:66:99:01:fc:b8:cc:f4:7b:e2:0c:
d4:2c:a1:c1:61:3b:0b:2e:4e:1a:98:67:30:a5:31:91:19:d6:
0d:4e:f2:75:8d:b7:06:9b:a6:ca:84:9f:59:4a:aa:30:92:a5:
9e:c8:5a:af:21:f3:6d:fa:5c:4f:79:bc:98:ef:c6:e3:a1:67:
e1:3f:9e:6d:68:97:92:0c:b4:1c:ff:48:02:a5:8b:09:6f:7f:
43:eb:98:73:69:38:b8:69:9b:f1:12:81:15:e8:ff:f3:d1:26:
74:bd:d6:6f:ac:02:68:b9:fd:ed:a0:67:17:9c:c1:a8:86:f5:
d7:d9:ce:64:c1:82:9d:a9:07:06:d2:2a:ab:e5:9d:c2:89:79:
21:e0:a8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:48:23 2026 by rpki-client