Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402267.roa
File: AS402267.roa (raw, json)
Hash identifier: O4W1Akaiw5fc1KznCW2KxJNE7LYVZKY5ORoKHdcSqnw=
Subject key identifier: A7:DD:3A:F4:D2:16:95:E6:13:7E:F5:34:14:F3:CD:A2:C8:A2:BB:54
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 73614BEF14CDE47C8407C7C17D7ED6831512C218
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402267.roa
Signing time: Mon 26 Oct 2026 08:51:15 +0000
ROA not before: Mon 26 Oct 2026 08:46:15 +0000
ROA not after: Mon 25 Oct 2027 08:51:15 +0000
asID: 402267
IP address blocks: 162.141.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:61:4b:ef:14:cd:e4:7c:84:07:c7:c1:7d:7e:d6:83:15:12:c2:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 26 08:46:15 2026 GMT
Not After : Oct 25 08:51:15 2027 GMT
Subject: CN=A7DD3AF4D21695E6137EF53414F3CDA2C8A2BB54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5a:b0:45:c0:b9:54:3c:0b:6e:76:ba:0a:48:
9a:8a:1c:b1:b2:58:47:fc:6d:47:0a:62:3a:80:c2:
ae:4d:bb:49:9d:e1:94:78:14:c9:89:62:5d:bd:11:
97:12:57:e8:70:50:c7:b6:52:91:fc:d8:ed:74:bd:
5f:1b:5c:65:20:99:db:62:cd:88:2e:34:89:9f:31:
c5:94:39:12:f2:e4:78:df:b9:f3:84:49:00:61:76:
4a:92:55:fa:a9:c2:0b:7b:fc:3a:ed:99:f0:23:75:
13:e9:a1:99:66:d9:3c:b1:d2:ab:eb:cc:09:d3:78:
7c:d5:a4:95:78:15:9c:2f:40:ad:b0:59:9b:e7:ed:
8c:fc:58:d7:94:01:23:0f:0c:8c:53:c9:b9:ba:a5:
b0:b9:a1:0b:ab:84:8a:79:5d:a9:fe:d2:d4:0c:2b:
c0:14:e1:df:61:e5:17:f9:7b:1a:40:1f:10:a2:cd:
4d:e5:5f:1c:c8:00:0c:0c:b2:02:14:df:06:0c:5d:
ff:1a:13:28:1a:5d:a8:0b:be:31:09:40:e4:f2:f5:
bd:86:3f:44:c2:0d:ab:5c:e0:91:94:c3:f7:99:76:
e8:08:37:9d:15:00:92:d8:45:a7:37:08:d3:58:44:
05:7c:50:0c:11:09:6f:19:3a:ae:06:43:a9:5a:e2:
08:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DD:3A:F4:D2:16:95:E6:13:7E:F5:34:14:F3:CD:A2:C8:A2:BB:54
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.36.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:e9:4d:c2:ad:85:71:25:95:c9:b7:9f:8c:55:4a:27:27:00:
21:14:47:6e:b5:15:66:d2:b1:4e:cd:a5:10:45:6d:9a:9b:1d:
aa:ef:46:c6:ba:3d:a4:f6:b1:1f:ce:81:50:4c:c9:ea:31:bb:
51:84:f8:a5:44:9f:4c:be:94:89:26:e4:b4:47:05:34:3b:82:
90:69:9a:aa:b6:e9:54:60:6b:94:a5:21:59:c4:74:cd:8c:fc:
9c:84:61:5f:a6:28:ee:c2:93:74:6d:82:e6:f5:98:8a:11:30:
cc:a0:23:64:01:98:60:bd:d3:b8:f5:d8:fb:a6:8a:e5:44:c0:
31:1b:fd:84:ac:b8:0b:e6:ef:53:48:28:17:0a:ae:2c:cd:24:
5a:d7:5e:d2:eb:06:36:77:f7:de:5d:a1:a4:ed:cf:7a:c1:3d:
4c:72:8c:69:a2:de:e5:f1:8e:8b:b6:8d:85:fb:4d:93:b9:e1:
df:c3:a9:49:f4:cc:72:23:b1:fe:5d:a1:dc:2a:5f:c4:32:1e:
d7:13:78:19:9d:87:ef:fd:ec:90:c7:57:55:90:d9:c8:52:a9:
ce:68:8e:25:e8:0c:b3:b8:39:11:ce:5a:74:4d:40:16:a4:82:
88:5a:95:30:16:fb:e9:38:c2:6c:24:69:ee:44:2d:9b:b4:86:
91:b9:c0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:27:50 2026 by rpki-client