Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: curfbnfDRWrqVZUpDQOuTzF8dZ8VnRVH8s8qz6docHg=
Subject key identifier: E5:72:74:7C:4F:F9:CD:A9:52:15:4C:E5:B2:48:AB:88:60:80:16:E8
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 15F431F970EFF21271D2C0883A043EBF2C21FE17
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402265.roa
Signing time: Tue 22 Sep 2026 08:21:07 +0000
ROA not before: Tue 22 Sep 2026 08:16:07 +0000
ROA not after: Tue 21 Sep 2027 08:21:07 +0000
asID: 402265
IP address blocks: 66.132.235.0/24 maxlen: 24
66.132.252.0/24 maxlen: 24
69.90.34.0/24 maxlen: 24
69.90.116.0/24 maxlen: 24
69.90.118.0/24 maxlen: 24
69.90.157.0/24 maxlen: 24
96.62.127.0/24 maxlen: 24
140.233.161.0/24 maxlen: 24
155.117.23.0/24 maxlen: 24
155.117.218.0/24 maxlen: 24
162.141.158.0/24 maxlen: 24
167.148.8.0/24 maxlen: 24
167.148.81.0/24 maxlen: 24
167.148.86.0/24 maxlen: 24
167.148.159.0/24 maxlen: 24
168.222.26.0/24 maxlen: 24
168.222.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:44:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:f4:31:f9:70:ef:f2:12:71:d2:c0:88:3a:04:3e:bf:2c:21:fe:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 22 08:16:07 2026 GMT
Not After : Sep 21 08:21:07 2027 GMT
Subject: CN=E572747C4FF9CDA952154CE5B248AB88608016E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:96:f7:a2:a2:6c:f5:b5:2e:ef:97:1f:d4:f7:
00:34:96:21:6a:bd:b3:96:ed:4d:b4:1a:e5:4d:81:
85:8b:0c:64:5c:85:a7:af:45:12:d2:29:2c:86:d0:
3a:ca:a5:51:43:64:84:4c:dd:66:7f:bf:9f:38:d5:
58:1b:e7:48:cd:b8:c4:81:bc:30:e3:26:04:f1:87:
30:ba:f4:01:16:ef:26:8a:ea:cb:85:8c:f0:1a:b2:
e2:38:71:be:d6:9f:96:77:c7:a8:43:20:1d:ce:f7:
4e:8f:ad:19:46:b9:68:3f:e2:f7:a5:a7:ec:ee:61:
42:b6:21:cb:68:c2:0d:03:03:8b:6c:2b:86:fb:3c:
51:6e:7b:c9:ed:3c:56:d1:ce:7e:37:a2:2f:52:a5:
78:47:e5:8d:17:70:81:0c:24:33:0a:ec:55:50:0d:
a0:6c:4d:dc:35:5f:e3:1b:00:07:68:c6:f5:dc:3a:
ba:fa:13:45:26:8c:40:49:12:e6:ba:ab:7f:60:fa:
9a:94:77:f8:c8:e2:0e:9b:a2:f6:a5:ca:da:17:9b:
2e:d6:80:3b:0b:2b:3d:81:49:56:00:38:60:fa:63:
fb:a1:47:be:fa:b6:79:96:12:0d:3c:19:ea:c4:41:
7d:89:f6:e5:58:ad:3c:39:03:bf:81:73:c8:07:87:
a9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:72:74:7C:4F:F9:CD:A9:52:15:4C:E5:B2:48:AB:88:60:80:16:E8
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.132.235.0/24
66.132.252.0/24
69.90.34.0/24
69.90.116.0/24
69.90.118.0/24
69.90.157.0/24
96.62.127.0/24
140.233.161.0/24
155.117.23.0/24
155.117.218.0/24
162.141.158.0/24
167.148.8.0/24
167.148.81.0/24
167.148.86.0/24
167.148.159.0/24
168.222.26.0/24
168.222.37.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:88:e7:a9:8b:c1:2b:e1:5a:7a:dc:aa:c8:98:05:15:fc:4c:
f7:74:18:25:bb:6e:24:d0:c7:10:dd:e3:5f:a8:1d:4f:74:11:
84:b2:90:a7:ec:73:a4:e3:33:91:94:85:aa:79:6c:c4:fd:b0:
52:2e:b8:3f:d1:ae:37:b8:7c:04:0d:8c:b3:59:ea:4c:f9:02:
7d:69:b5:8b:0b:b6:62:60:96:df:b5:e3:e8:45:ff:cd:fa:1e:
b4:55:fe:b6:97:cc:08:37:6d:00:3e:28:92:38:c0:23:7d:bf:
fa:4e:c5:9c:80:fa:8f:95:6a:25:73:68:7b:1d:c8:57:76:0a:
97:70:b3:d0:1a:1e:9e:98:7a:95:bd:7a:10:fa:29:be:b2:37:
22:b6:35:0e:b1:29:06:40:9f:5f:6e:3c:c9:d6:9c:92:48:4b:
c0:d8:6c:1f:87:46:9b:b8:bd:16:45:84:23:f2:af:b7:29:b3:
13:82:78:ef:10:34:5f:3e:68:31:16:b5:78:b7:4f:1a:a5:73:
b7:2f:43:77:71:60:e6:55:56:30:69:be:d0:a1:8a:26:bb:1f:
7e:bb:02:16:6c:1b:d5:ca:f7:1f:c5:27:b5:3d:d0:74:69:ce:
a3:f0:d3:1e:54:8d:22:e3:02:f9:89:d3:11:dd:6c:b4:b5:cc:
67:fc:12:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:15:47 2026 by rpki-client