Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402044.roa
File: AS402044.roa (raw, json)
Hash identifier: e8fDRljk/OD3jwmpw9m/z3u6Q872CKAtD8bumvitHp0=
Subject key identifier: 39:79:00:03:14:4C:EF:9E:05:95:81:F8:B6:AC:3A:96:F2:39:0F:EC
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1CE4CE1AF019BDC440DC45ADBAE817910CDB5B62
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402044.roa
Signing time: Tue 28 Apr 2026 19:06:36 +0000
ROA not before: Tue 28 Apr 2026 19:01:36 +0000
ROA not after: Tue 27 Apr 2027 19:06:36 +0000
asID: 402044
IP address blocks: 168.222.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:e4:ce:1a:f0:19:bd:c4:40:dc:45:ad:ba:e8:17:91:0c:db:5b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 28 19:01:36 2026 GMT
Not After : Apr 27 19:06:36 2027 GMT
Subject: CN=39790003144CEF9E059581F8B6AC3A96F2390FEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:f4:c1:aa:a3:ca:ab:e5:70:30:05:8f:8c:
0c:bd:2f:b1:7c:18:96:28:40:d6:20:1c:28:6b:9c:
43:55:1f:63:8c:15:a2:63:39:fd:0c:f6:d1:b2:ca:
6e:eb:5f:cd:64:cb:29:8d:ad:0a:55:34:fb:5d:83:
66:b1:69:c6:b7:dd:94:41:06:1b:7a:33:7c:d5:93:
d8:83:c1:b5:fb:9b:b5:11:39:e3:f4:2b:8d:01:ae:
bf:50:3f:1f:10:27:6c:8e:72:17:54:88:11:cd:62:
40:ac:fb:21:4c:f7:c3:2f:30:39:11:c1:49:1d:aa:
85:4c:36:82:c5:ea:39:73:a5:b3:43:10:2a:16:ba:
9a:65:2c:f6:cd:9a:91:71:54:90:ff:0d:df:a2:90:
41:cf:23:d7:5a:f2:92:93:b7:3f:b1:f1:df:86:77:
93:99:bc:78:8e:77:a0:f1:3e:99:c7:6b:97:da:f4:
72:ed:08:ef:ca:c2:48:7b:0a:6e:44:57:fa:30:e7:
8b:64:1f:0f:90:a4:64:b2:cc:0f:52:20:67:08:86:
b7:b8:f4:76:b6:2b:8e:d5:05:41:66:b0:ee:f1:b3:
da:20:bb:21:55:e6:16:f7:33:6d:7f:03:aa:ab:23:
4d:a1:f3:d0:e3:b8:fe:cb:66:c9:d8:01:8b:e2:d0:
50:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:79:00:03:14:4C:EF:9E:05:95:81:F8:B6:AC:3A:96:F2:39:0F:EC
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402044.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.13.0/24
Signature Algorithm: sha256WithRSAEncryption
90:e2:fa:f5:2b:78:90:91:71:0a:12:16:67:86:9a:31:21:87:
27:f0:94:4c:99:93:34:ff:41:42:f7:d4:9a:4f:fd:6a:15:b9:
63:1a:39:e2:04:1f:db:55:7b:53:55:ec:6b:0f:9f:2a:93:8d:
d0:e2:c1:b5:c1:23:6b:e1:f6:64:01:16:b6:1e:16:ef:87:72:
1f:56:2c:48:c6:10:83:47:cb:68:f3:e3:ef:bf:c8:b4:ba:c5:
9e:e7:49:f0:ed:a0:49:4f:85:10:f3:b8:de:bc:92:5d:56:e0:
20:70:84:84:fe:8a:5e:5b:03:0a:90:3b:d0:ac:71:31:16:4a:
10:64:56:38:9d:d0:10:13:f4:63:f8:85:96:d9:d6:02:4b:da:
41:f8:d3:3e:a4:d0:16:fa:5b:7a:d0:90:70:84:07:a0:9e:f5:
50:15:f4:ea:fc:28:2c:bf:32:0e:0a:5e:61:a4:13:a2:06:ed:
43:00:cc:ed:71:c1:13:71:39:5e:5b:e8:56:d8:8f:63:68:38:
3e:cc:97:bd:1f:18:ed:51:71:ac:d8:70:8c:74:d6:61:df:e5:
b5:58:ce:92:ef:4c:e8:5b:a8:72:17:59:85:a7:a7:db:00:a0:
44:2e:f5:7f:a5:a2:b9:7f:1b:5d:5d:e8:7f:66:8a:95:97:dd:
5e:de:82:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:24:47 2026 by rpki-client