Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402267.roa
File: AS402267.roa (raw, json)
Hash identifier: kTNgKJIX7sOFzj+Msv0LgF/LPAMa8JvovmRUKdgNFgc=
Subject key identifier: C9:28:C4:CC:23:B7:88:40:32:3F:42:6B:28:50:99:5A:3D:5B:A4:D2
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 215054FED642F0FCBEA2081D36B1DEE76F91187C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402267.roa
Signing time: Wed 22 Apr 2026 09:02:33 +0000
ROA not before: Wed 22 Apr 2026 08:57:33 +0000
ROA not after: Wed 21 Apr 2027 09:02:33 +0000
asID: 402267
IP address blocks: 162.141.36.0/24 maxlen: 24
168.222.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:50:54:fe:d6:42:f0:fc:be:a2:08:1d:36:b1:de:e7:6f:91:18:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 22 08:57:33 2026 GMT
Not After : Apr 21 09:02:33 2027 GMT
Subject: CN=C928C4CC23B78840323F426B2850995A3D5BA4D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:da:7f:67:67:d8:54:1f:1b:66:17:5a:57:ad:
ff:58:52:f0:31:39:05:9c:7d:7d:6a:4a:6b:cc:bf:
cd:bc:e0:05:89:08:e7:83:31:8c:a4:e8:e8:66:9a:
d8:57:75:e5:13:8c:99:65:58:a2:72:04:73:d5:62:
f7:c3:12:2f:8b:e0:5f:eb:d9:2e:ae:28:4e:21:75:
90:d1:16:8a:7f:15:18:c3:78:79:3b:6e:99:76:21:
fc:92:a9:be:1d:bd:e1:97:15:c1:88:e1:f9:7b:b0:
78:b0:99:7e:38:56:41:f0:5c:0c:c1:d6:2a:39:a1:
6f:5a:2a:c6:d8:3c:7a:43:f9:67:c6:62:6a:d0:ff:
8d:3d:73:fb:42:e5:6e:87:61:76:3e:f8:96:2c:f7:
f7:0e:f1:56:2e:31:42:8a:47:c0:fe:7c:ea:86:f1:
8f:3f:86:e9:1d:89:dc:7b:55:ec:a9:57:39:77:f3:
1e:78:3c:b5:1f:5d:6f:ff:29:6f:56:eb:73:37:1e:
e8:c9:32:e9:4f:8b:5c:e3:04:a6:f8:35:fa:2f:81:
1a:09:b3:b4:a1:3b:1b:fc:65:bd:23:43:d7:57:af:
fb:d8:67:d8:9a:d5:8f:37:46:ba:0e:2d:5e:e1:72:
c8:53:5e:33:de:5c:19:5e:32:18:f5:e9:28:5a:c6:
4a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:28:C4:CC:23:B7:88:40:32:3F:42:6B:28:50:99:5A:3D:5B:A4:D2
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.36.0/24
168.222.106.0/24
Signature Algorithm: sha256WithRSAEncryption
71:32:98:56:83:ab:77:61:9b:55:3c:82:6b:28:cc:f3:f8:48:
64:70:53:6e:dd:67:da:7c:67:b7:db:fc:bf:bf:60:f8:18:89:
70:81:6e:20:c8:f4:29:f4:1a:c1:47:3e:39:3d:ea:ce:48:ff:
19:fb:48:57:50:69:00:ef:4f:a7:38:83:0f:93:c3:9e:5e:14:
08:a4:be:46:6a:8f:d8:2d:0b:4d:55:18:1b:54:19:04:f0:d3:
4a:05:64:7c:2d:6c:81:f3:f6:69:67:67:11:aa:a9:e8:af:b8:
70:85:c9:59:41:6c:4b:13:25:a7:5c:71:70:8c:d1:71:49:f8:
ee:f5:c6:a2:d9:91:79:3c:16:f6:f3:28:7e:29:b5:01:7a:a7:
7a:e2:51:fc:ac:3e:87:63:01:60:f7:13:90:d1:89:55:aa:43:
d4:e4:64:98:29:c5:9f:3a:6a:ca:3b:aa:b0:00:b2:e2:08:04:
a8:85:a1:11:e7:85:d3:a2:fc:47:07:17:dc:35:de:a4:07:e2:
93:46:b9:68:ab:c9:9e:34:96:9f:2c:33:49:4e:95:0b:46:6a:
a0:3b:d2:e7:49:bb:33:2f:78:24:26:77:9f:0d:bf:67:32:a0:
b6:d2:9a:43:fd:a0:d4:28:1b:06:5c:ae:80:60:4e:95:02:d1:
fe:f8:70:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:27:20 2026 by rpki-client