Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402671.roa
File: AS402671.roa (raw, json)
Hash identifier: toBhOvkO6FnctVK6kuvRTYBqRfTH/i51z0kLuberADk=
Subject key identifier: 39:37:FA:8C:2E:DD:5A:5A:D5:0E:89:19:14:A5:B4:93:8C:D9:69:34
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 20F18BF56FC22FAC604FADB5B0AB2EA54532486D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402671.roa
Signing time: Fri 13 Nov 2026 11:12:21 +0000
ROA not before: Fri 13 Nov 2026 11:07:21 +0000
ROA not after: Fri 12 Nov 2027 11:12:21 +0000
asID: 402671
IP address blocks: 162.141.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 07:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:f1:8b:f5:6f:c2:2f:ac:60:4f:ad:b5:b0:ab:2e:a5:45:32:48:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 13 11:07:21 2026 GMT
Not After : Nov 12 11:12:21 2027 GMT
Subject: CN=3937FA8C2EDD5A5AD50E891914A5B4938CD96934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2c:cf:6b:58:a2:bc:9a:2b:b6:cc:a1:8f:eb:
ab:99:17:8d:cb:c4:d1:83:f5:80:bd:7e:59:58:23:
30:0f:a3:ca:b8:af:0e:5a:e4:06:f6:6a:6c:7a:ca:
ae:a7:2d:9a:9f:0e:6e:d8:62:6e:50:d5:3b:83:40:
f1:7e:cc:3e:17:8f:5b:42:ac:d0:e9:f5:ba:2a:ce:
b2:30:05:a3:a7:42:2e:94:99:50:db:6c:78:71:07:
07:50:eb:83:ff:81:76:2a:71:1f:32:4c:48:ce:64:
6c:f0:f9:1e:ed:51:7b:80:82:b2:bd:09:bc:0d:47:
f9:54:43:96:f7:77:b1:68:83:49:a4:42:65:86:11:
e2:7d:4a:13:1b:e2:9c:69:bf:77:2b:73:79:d8:65:
55:21:b1:cb:b5:60:b9:e5:4e:54:9f:34:6a:45:48:
dc:d6:0c:59:df:1a:f7:fa:99:ef:3f:63:7d:48:7c:
0d:3c:3c:80:8f:7a:64:32:4a:87:ac:f0:1b:b7:d8:
8a:e1:b7:42:13:25:b6:4c:c2:b2:b1:01:c7:89:ee:
ee:9c:10:06:de:9b:b8:81:70:35:32:ad:59:ce:06:
32:44:7e:85:ae:a1:1e:b2:49:a1:ff:b0:3a:6a:5f:
c8:bc:3d:46:06:39:42:12:a1:f4:92:d9:03:3c:5e:
35:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:37:FA:8C:2E:DD:5A:5A:D5:0E:89:19:14:A5:B4:93:8C:D9:69:34
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402671.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.228.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:26:b8:ec:4e:3a:d5:5b:21:37:7f:3c:96:e7:91:39:45:a9:
ec:30:ad:5c:d6:67:53:1f:18:4e:38:b9:16:25:03:ff:54:aa:
1c:20:28:ac:ee:ad:1c:6c:d4:6d:05:20:7e:5a:72:b1:99:58:
a1:a6:fb:c5:1d:dc:32:b7:d4:92:13:c9:5a:45:e2:19:d7:d5:
0f:0a:83:3c:08:2d:f2:e4:68:35:02:22:42:fc:1e:b2:53:08:
b5:12:9f:0c:0c:67:26:91:5a:1d:7d:9a:f4:8a:71:a5:7f:cd:
64:40:30:23:c0:21:6f:45:80:18:9d:08:48:34:a7:8e:b8:a4:
ef:63:69:bd:47:fc:14:13:91:a9:3c:72:c4:20:41:ca:50:de:
f5:00:53:ad:d5:34:f2:06:c9:d4:6d:6a:71:2d:75:38:d9:03:
32:2f:bb:e2:0b:4b:8f:a2:64:22:f9:e0:ef:db:92:a6:99:e6:
70:de:2a:8f:30:80:95:93:32:58:55:db:5c:49:1a:37:81:77:
54:d2:59:6f:2d:d5:35:e5:b1:d3:f4:6d:af:c0:a0:d9:8a:9f:
98:b6:2e:05:8a:1e:de:ae:9c:5b:78:41:d7:9c:d1:41:37:eb:
31:89:d9:1a:66:70:58:e6:e6:15:4d:96:7e:c6:ba:64:bd:08:
7b:a7:99:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:55:55 2026 by rpki-client