Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402215.roa
File: AS402215.roa (raw, json)
Hash identifier: B2gFQ/dJEjeCHyiiwehtxtcfQvLKwkI/j9NkqahlKzo=
Subject key identifier: D6:4E:F5:83:87:3A:24:89:8F:97:D1:D6:52:B4:99:C4:92:C8:C4:FD
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 217B074CBF80771E219E5C77673D21F457400603
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402215.roa
Signing time: Thu 23 Jul 2026 11:19:33 +0000
ROA not before: Thu 23 Jul 2026 11:14:33 +0000
ROA not after: Thu 22 Jul 2027 11:19:33 +0000
asID: 402215
IP address blocks: 145.223.4.0/24 maxlen: 24
145.223.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:7b:07:4c:bf:80:77:1e:21:9e:5c:77:67:3d:21:f4:57:40:06:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 23 11:14:33 2026 GMT
Not After : Jul 22 11:19:33 2027 GMT
Subject: CN=D64EF583873A24898F97D1D652B499C492C8C4FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:1c:6c:3d:89:21:1a:04:cb:74:64:66:b1:
d9:66:d9:a5:97:05:19:5c:2d:0d:f0:39:24:2b:ed:
ac:de:1d:cd:b1:82:dd:f0:51:04:81:0d:bc:49:fe:
f1:22:d0:67:41:31:e9:6a:b9:3b:79:84:fe:7b:f0:
97:61:5e:02:f5:52:b8:d0:99:26:4a:3f:75:45:11:
15:0b:40:1a:26:c6:31:3f:75:73:c6:dd:cc:f4:40:
bb:ff:dc:db:01:ce:e1:17:75:cb:ff:2c:72:12:bf:
23:1e:ac:ee:1f:72:72:25:2f:29:7a:da:f2:8f:f4:
38:44:03:e6:6d:52:73:25:b0:71:4c:17:61:3f:15:
85:a3:df:bb:df:51:56:ad:28:2d:ce:29:d2:43:80:
2c:c7:90:4c:d0:e0:f8:23:f5:a0:b3:22:bb:19:e7:
e7:d2:5d:b8:a6:04:a2:13:6b:d3:7a:8c:15:8f:82:
9f:01:65:e4:35:f6:6d:66:29:dd:7c:13:bc:0a:ca:
e2:94:fc:b9:08:55:43:37:5e:ce:70:59:24:c6:c7:
78:2d:0c:5d:3c:c3:f9:7a:18:c1:4e:be:c4:3d:65:
a8:fe:9e:a2:2e:39:11:4b:48:78:45:cc:a5:85:0e:
b5:72:56:5a:4d:e0:af:2f:9d:95:fa:55:4c:65:61:
f4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4E:F5:83:87:3A:24:89:8F:97:D1:D6:52:B4:99:C4:92:C8:C4:FD
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.223.4.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:88:e4:71:a6:4e:a4:7e:e5:c5:6d:c3:69:7d:44:bd:65:12:
31:f7:d4:22:0f:e6:e0:7b:ee:00:c9:b4:05:51:cd:7a:99:4e:
1f:9c:9d:e7:99:52:84:4c:44:5e:b1:44:a7:c0:bd:57:3a:31:
97:95:6c:f6:99:38:95:b0:d1:53:91:f6:9e:5a:6f:b8:0d:33:
b0:d5:79:37:80:81:13:e0:ac:f3:98:40:9b:44:90:d6:11:3f:
33:b5:16:c4:16:4f:77:e9:c6:37:f0:2f:85:99:2f:f8:a6:56:
84:4f:1b:31:4a:34:d9:44:df:f5:66:46:50:40:a7:3f:14:97:
70:06:fc:65:59:14:37:45:4f:fb:f5:51:91:75:82:8e:ae:c6:
83:19:4a:75:5d:fd:c5:ab:1f:f9:4f:1f:a6:83:9a:9c:56:bc:
76:90:d8:e4:9d:c5:ea:e4:6d:26:c9:04:b2:b6:c5:55:82:ab:
a0:26:e0:38:73:75:1f:e5:21:47:9e:95:3a:6c:59:9b:8c:6c:
b0:63:68:ff:bd:06:b0:b3:d6:9e:f2:83:2c:d2:33:7e:18:ae:
79:e0:c7:61:22:81:24:2e:21:5a:01:67:b1:72:b9:86:78:1b:
b3:7c:60:52:39:d8:5b:0e:e2:3f:9f:61:56:36:a9:fa:d3:78:
ad:33:7e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:44:35 2026 by rpki-client