Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402866.roa
File: AS402866.roa (raw, json)
Hash identifier: 6LEZdJnzowjLn0k6IiA6yGr/K+qjKMx9ugaPKsfbRjc=
Subject key identifier: 3C:A9:66:4D:73:D6:B3:C9:56:C2:44:EC:CD:3A:0E:56:EF:EC:A1:2A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 19F94B3108363D4C5254565179362436698D716E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402866.roa
Signing time: Mon 21 Sep 2026 09:05:14 +0000
ROA not before: Mon 21 Sep 2026 09:00:14 +0000
ROA not after: Mon 20 Sep 2027 09:05:14 +0000
asID: 402866
IP address blocks: 64.226.207.0/24 maxlen: 24
66.132.201.0/24 maxlen: 24
66.132.234.0/24 maxlen: 24
69.90.131.0/24 maxlen: 24
69.90.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:f9:4b:31:08:36:3d:4c:52:54:56:51:79:36:24:36:69:8d:71:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 21 09:00:14 2026 GMT
Not After : Sep 20 09:05:14 2027 GMT
Subject: CN=3CA9664D73D6B3C956C244ECCD3A0E56EFECA12A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a5:a0:34:0d:72:94:60:bb:c4:13:c3:72:0c:
89:f7:f1:65:14:16:2e:00:cd:05:d2:c0:a3:89:3d:
71:ad:dd:b2:40:ec:7e:67:7b:69:57:31:05:11:7c:
43:2e:c7:24:bc:6c:b3:7d:61:9b:87:bd:42:eb:df:
6d:8e:c9:4b:1e:21:05:75:60:b4:ec:81:9f:97:f1:
f0:fe:07:4b:2e:c1:97:d3:89:11:60:25:e9:2a:82:
1d:7f:85:19:11:d0:c4:a3:38:e4:75:47:a3:9e:32:
72:5c:23:72:6d:d5:58:1c:01:d9:07:91:b6:90:c0:
e6:7f:7a:33:95:96:e5:8b:d1:66:87:16:17:9c:8b:
6f:da:c0:fa:6a:17:27:f4:0b:f5:62:a1:ad:8e:f7:
16:03:69:50:a9:7b:ce:fe:ce:fc:13:b6:1d:2c:e8:
2b:35:2e:e0:f9:5e:1e:bc:c7:dc:9f:d1:a3:33:50:
f7:40:7e:cf:dc:4f:53:69:de:9e:65:30:02:de:a8:
0d:1a:2a:22:d1:d1:48:7f:f6:61:ef:2f:2e:41:62:
a2:e8:8c:fa:57:b7:b6:4f:bc:3b:b7:d5:62:37:e2:
02:cf:f7:67:f4:23:f1:ff:dd:2f:7d:88:df:e1:7b:
64:a3:c2:76:32:5e:b8:61:1b:f1:15:0a:f8:ce:c4:
f7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A9:66:4D:73:D6:B3:C9:56:C2:44:EC:CD:3A:0E:56:EF:EC:A1:2A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402866.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.226.207.0/24
66.132.201.0/24
66.132.234.0/24
69.90.131.0/24
69.90.156.0/24
Signature Algorithm: sha256WithRSAEncryption
32:78:b2:b5:f4:05:8f:08:dd:9b:b8:c1:42:56:22:7e:92:f1:
be:9a:3f:e8:ec:26:e1:6b:77:dd:16:b5:84:75:54:be:4b:68:
60:cb:17:8a:90:5d:9e:bb:17:83:d4:ed:03:bf:62:bc:16:eb:
3d:74:a2:1f:ce:6c:0d:a3:e9:11:f2:46:31:02:ae:81:5c:51:
ba:45:f8:33:f3:15:ad:7b:e6:e4:96:b3:d7:44:dc:82:bd:e5:
aa:47:ef:69:43:fd:c5:d4:87:82:93:91:52:65:ed:ed:20:27:
5c:b6:63:c2:f1:17:86:1b:e2:d9:bd:5e:d6:fe:aa:64:b2:ad:
2f:8c:a3:85:6a:79:c9:56:ff:ee:f6:c4:6b:d7:3f:f1:16:04:
5c:3d:89:55:52:2a:08:ac:f0:4a:1d:1e:7b:4f:26:cc:cc:7c:
6a:66:fd:8b:2a:43:2f:4c:dd:76:03:c2:c9:89:8d:7f:14:d7:
95:5e:4a:a2:14:2d:08:79:2d:7f:d4:59:62:48:97:27:aa:63:
16:b4:f2:e1:81:26:40:e1:74:14:51:75:31:1f:d4:13:99:f2:
c7:a1:03:ef:56:59:4e:bc:aa:b9:8d:5d:6e:13:63:30:cb:e0:
d9:d2:74:70:cc:18:a1:7f:33:f3:17:aa:b6:f0:b7:c2:e9:f2:
64:ca:00:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:47:40 2026 by rpki-client