Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401776.roa
File: AS401776.roa (raw, json)
Hash identifier: lGRMA5TQtmFycFTstHREflPGHFdqLkruMKeLLDHHv0U=
Subject key identifier: 6E:73:42:05:27:48:89:92:8A:9F:FF:30:9D:7C:34:6F:6D:BD:44:F5
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 45F92F9F29EDFFC407F2B58D67F66FE0C9B5411F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401776.roa
Signing time: Sun 28 Sep 2025 06:19:53 +0000
ROA not before: Sun 28 Sep 2025 06:14:53 +0000
ROA not after: Sun 27 Sep 2026 06:19:53 +0000
asID: 401776
IP address blocks: 96.62.152.0/24 maxlen: 24
143.14.75.0/24 maxlen: 24
143.14.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:f9:2f:9f:29:ed:ff:c4:07:f2:b5:8d:67:f6:6f:e0:c9:b5:41:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 28 06:14:53 2025 GMT
Not After : Sep 27 06:19:53 2026 GMT
Subject: CN=6E734205274889928A9FFF309D7C346F6DBD44F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b0:11:4f:90:13:e3:c2:69:2f:c5:55:94:1e:
6e:ee:bc:bf:eb:7e:90:87:bc:8b:69:f7:51:e2:a2:
1a:86:57:20:df:37:83:26:01:9a:ed:bd:a2:72:8b:
d9:39:e7:27:e9:59:6b:3d:0d:9b:3c:8d:d8:04:5a:
bb:0a:a1:8e:d2:cb:0d:3e:a1:a4:15:31:71:09:09:
2a:0c:18:a5:5f:3f:f6:a2:64:78:55:71:02:35:36:
16:9f:45:77:07:9c:3e:72:54:58:7d:64:8e:47:e2:
8f:f1:26:af:3e:f1:b0:41:f7:8c:d5:70:61:54:37:
69:13:66:49:b0:33:4d:e7:9c:2a:f0:00:f2:d6:ed:
d4:25:aa:7a:fd:6a:e7:79:e4:8c:22:ea:a0:26:8a:
36:17:be:c0:03:2e:f1:0f:c2:d1:ab:f0:7b:e8:be:
96:9e:69:8d:85:36:e6:21:5e:a0:a1:04:d8:2b:1b:
e6:b0:28:12:c7:da:a6:bc:00:37:9f:36:03:2d:08:
60:35:fc:d9:d8:e3:24:03:9b:5b:2d:a4:f8:1f:66:
f4:c7:32:10:28:e5:06:c6:04:cf:90:00:15:c6:9b:
29:67:c6:4f:8a:08:eb:1e:0d:f3:82:c6:59:be:28:
cc:47:46:b0:f1:a5:2c:78:64:79:ed:40:9f:b6:b1:
5a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:73:42:05:27:48:89:92:8A:9F:FF:30:9D:7C:34:6F:6D:BD:44:F5
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.152.0/24
143.14.75.0/24
143.14.241.0/24
Signature Algorithm: sha256WithRSAEncryption
94:47:d9:80:fd:42:eb:a1:be:b4:4a:fd:98:5b:df:f7:23:99:
85:71:c1:91:b6:37:26:2a:13:4b:09:7a:60:08:ba:ee:97:52:
ca:34:91:cc:37:c4:6d:11:97:c2:51:5f:93:ca:0b:fe:9a:9f:
05:4e:c0:0e:ef:9e:5a:f7:b2:3c:e6:de:b4:bc:a2:c1:ff:a5:
93:75:57:7b:d4:f6:c0:53:0d:63:b8:d2:2d:19:5e:44:2a:a8:
28:96:16:64:8d:39:57:56:fe:80:d4:78:26:b3:75:fe:99:60:
c4:eb:d2:3f:85:c4:e5:fb:47:43:18:03:35:f5:52:b1:f4:2e:
dc:eb:3e:ff:08:41:30:4d:01:64:6c:88:f9:f4:d0:48:ac:e6:
3a:69:b5:ba:fa:41:a0:1f:5e:be:48:35:a0:f9:eb:6e:1c:73:
18:61:17:05:b0:83:82:9a:ee:a1:c4:66:be:1a:a1:5c:6d:23:
98:3c:ab:c8:30:f3:7c:b2:8e:4c:d2:f8:38:63:f1:77:21:f9:
94:dc:4a:b6:cd:0c:36:5a:3f:82:15:74:5a:c1:0c:23:86:cd:
33:54:45:14:5b:b6:96:26:bb:76:76:21:2c:70:a3:51:16:80:
42:c5:95:a7:d5:33:b1:45:cc:a3:79:f5:27:67:d5:f0:e6:3b:
e6:ef:ae:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:29:46 2025 by rpki-client