Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402186.roa
File: AS402186.roa (raw, json)
Hash identifier: wfnZEVnpbbhtU0WsoRQEpUR7wkEzzfZ5zOL2wH/6m+8=
Subject key identifier: 5F:7D:8B:02:2C:09:74:D7:BB:A1:FE:9A:C6:1E:9E:60:AC:31:FD:86
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3E1860B5F16B4B51E8E943FBA3EA29D241B9AE33
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402186.roa
Signing time: Tue 24 Mar 2026 08:24:10 +0000
ROA not before: Tue 24 Mar 2026 08:19:10 +0000
ROA not after: Tue 23 Mar 2027 08:24:10 +0000
asID: 402186
IP address blocks: 143.14.23.0/24 maxlen: 24
150.241.228.0/24 maxlen: 24
155.117.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:18:60:b5:f1:6b:4b:51:e8:e9:43:fb:a3:ea:29:d2:41:b9:ae:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 24 08:19:10 2026 GMT
Not After : Mar 23 08:24:10 2027 GMT
Subject: CN=5F7D8B022C0974D7BBA1FE9AC61E9E60AC31FD86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e7:8b:a0:78:2f:a5:b1:3b:25:c6:35:62:cd:
25:27:26:a5:52:a0:a8:65:bd:43:11:3d:06:ee:f1:
39:08:e1:34:26:0c:02:c9:45:2b:15:71:3b:f6:74:
db:8a:43:33:e6:fb:79:5d:ef:08:84:a6:5b:0a:a8:
45:65:64:1c:0a:e8:4a:b2:1c:a8:86:60:4b:82:d8:
9a:08:7e:d4:24:69:cc:82:36:f1:a3:ff:3c:91:5b:
07:68:73:91:d2:7d:1c:7c:fe:03:b4:32:0c:6d:9f:
2c:f6:26:b3:c6:0d:34:ef:24:76:00:87:8a:da:7a:
7f:5a:b8:78:5e:b5:81:45:dc:3f:68:0c:f0:96:85:
b5:1d:e9:24:2b:92:ff:db:4d:aa:bc:d7:77:4a:5f:
63:13:30:bd:37:ac:e8:eb:e5:71:a9:94:ce:86:01:
0e:c9:c8:19:d9:af:60:0d:8a:b6:c7:b3:be:9b:cc:
82:ea:e6:84:93:41:e1:c2:a4:ca:64:09:9c:43:6f:
54:58:20:7d:0b:e3:de:10:87:0c:8f:7a:fd:2b:13:
df:16:35:fc:02:9c:80:1d:25:a2:7a:5f:35:3b:cc:
b4:c6:a0:6e:7d:21:a7:24:af:1c:22:12:c5:fe:91:
52:68:f6:be:ad:82:f8:30:87:42:0d:9e:46:99:90:
aa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7D:8B:02:2C:09:74:D7:BB:A1:FE:9A:C6:1E:9E:60:AC:31:FD:86
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402186.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.23.0/24
150.241.228.0/24
155.117.137.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:b7:8c:2f:e8:75:82:65:e1:75:cd:e0:e8:73:99:88:7f:16:
62:5b:94:98:11:0b:dc:0d:f3:d5:9f:99:22:a2:cf:48:73:94:
da:0f:1c:a4:a3:a9:9b:f0:53:66:74:75:6b:af:2f:1c:4f:74:
5b:74:9d:44:dd:b2:ab:f6:8b:b5:bd:21:a0:26:c2:83:2c:a2:
a8:de:a6:50:73:b8:07:f9:d4:fe:d8:0a:03:6d:9b:16:a0:e9:
21:5b:7b:be:1e:21:91:b7:84:f0:45:67:67:92:91:1d:08:fd:
ae:ed:7a:6d:ee:53:6d:1b:25:ee:81:d2:96:3c:b0:db:30:99:
cf:66:f2:8f:5d:e6:12:4d:65:8e:f4:4c:51:60:9b:fd:2c:86:
7a:f6:60:67:ef:d4:31:91:82:e7:32:5e:97:cb:dc:82:68:14:
08:97:a6:24:53:12:48:26:60:78:9a:21:79:d3:87:59:ba:db:
b5:4b:c9:45:df:d2:ce:4f:ff:ca:15:52:35:9b:01:a9:e4:b4:
37:3a:cc:c0:e5:37:99:fb:82:73:26:02:54:58:c6:b2:fa:1e:
98:6c:d9:5e:76:15:e2:79:fa:07:f9:04:0a:6e:ad:8c:21:8e:
d8:d9:38:e9:4d:a9:11:6f:c6:04:b6:b6:44:9c:95:ad:b6:ff:
94:99:e7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:27:21 2026 by rpki-client