Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402507.roa
File: AS402507.roa (raw, json)
Hash identifier: 1fNS1S4rkpmhMeyO9AU7A8r9+Ut6T3vThwodNY8MyGA=
Subject key identifier: 27:00:4C:5D:95:72:9E:92:1B:AE:8A:A4:DF:AB:74:4D:95:DD:FC:B5
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 48833A0DE67FE295810B238C9EF840CCFB0429FB
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402507.roa
Signing time: Sun 05 Jul 2026 12:49:03 +0000
ROA not before: Sun 05 Jul 2026 12:44:03 +0000
ROA not after: Sun 04 Jul 2027 12:49:03 +0000
asID: 402507
IP address blocks: 155.117.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:83:3a:0d:e6:7f:e2:95:81:0b:23:8c:9e:f8:40:cc:fb:04:29:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 5 12:44:03 2026 GMT
Not After : Jul 4 12:49:03 2027 GMT
Subject: CN=27004C5D95729E921BAE8AA4DFAB744D95DDFCB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:78:41:09:10:dc:ec:96:ed:dd:74:57:04:f7:
ee:30:ee:59:69:83:28:89:74:6e:38:d9:38:56:b1:
e0:0f:10:95:c1:af:43:67:75:cd:9f:5e:ca:60:7b:
be:92:49:c1:01:cb:e8:7d:37:72:3e:3a:06:14:ad:
2a:84:49:d9:6f:51:be:ca:91:d1:25:3f:b8:67:c6:
d1:58:ec:47:44:ab:41:35:12:49:07:43:b4:b5:8e:
95:1d:38:92:24:2f:6d:18:c6:21:86:a8:d0:f1:f7:
e9:cd:fa:ec:8c:a2:2d:0e:e5:d9:2c:84:f1:cd:25:
2d:77:5f:4c:af:36:1d:1c:e9:b9:10:1d:fc:db:29:
68:8a:47:c0:6a:2d:75:c9:7d:c6:93:9f:62:0c:06:
cf:42:90:22:95:7b:e2:f5:71:04:23:46:9d:f6:12:
42:94:47:03:57:3b:68:2a:03:31:31:d8:63:05:af:
b0:2b:e1:57:c0:e0:58:47:27:49:c9:d5:e9:88:4e:
04:17:fd:44:13:fe:1f:70:0b:99:91:8c:11:41:7c:
e2:8b:a0:15:e0:90:b9:49:89:23:1b:6f:57:37:75:
a3:67:b8:63:15:99:82:46:bf:5f:3b:03:3b:57:d7:
89:54:23:ef:e4:23:f2:b0:d4:69:24:27:93:10:dc:
78:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:00:4C:5D:95:72:9E:92:1B:AE:8A:A4:DF:AB:74:4D:95:DD:FC:B5
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402507.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.222.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:71:25:84:71:7f:26:11:b0:e4:bb:3f:76:78:c3:c5:0d:60:
1a:14:08:8e:e3:27:63:41:00:01:60:e2:b6:58:bc:7d:77:48:
e1:3c:9c:79:3b:b6:d3:e4:7b:1f:e7:56:2d:68:db:1f:f1:6a:
01:c8:0d:e5:8a:9f:a2:e5:71:f5:40:f9:15:ed:11:64:58:d4:
33:d7:61:f3:66:86:37:43:cb:7b:be:1a:62:59:fa:4f:17:d7:
ec:13:af:4e:34:b7:a9:82:f7:06:f6:93:8f:4f:c5:3e:8c:55:
0d:e9:3b:ef:8d:88:1c:c7:7b:05:7f:13:7b:61:f9:78:54:b5:
97:b1:16:65:36:5c:9a:9f:22:0a:5f:a9:eb:f9:55:21:62:99:
dc:fb:9e:5a:2e:b1:30:b2:70:a6:c1:ef:8f:32:e5:0f:84:f9:
c7:05:6b:32:58:06:88:ee:53:93:82:04:a5:7a:b4:ed:55:70:
51:74:f0:c5:1a:8e:ba:88:c0:fb:52:4e:8c:a3:d4:e0:5f:8b:
0e:4a:cb:5e:eb:5c:1c:fb:54:5e:36:0a:76:f8:84:68:90:fc:
2e:0c:17:27:f4:fd:97:eb:8a:92:8d:02:a2:20:ed:c5:85:f9:
77:53:d9:04:b5:99:a8:c0:49:c3:67:9b:e8:d9:a4:32:71:76:
44:22:c4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:38:41 2026 by rpki-client