Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402976.roa
File: AS402976.roa (raw, json)
Hash identifier: emC7F//NHcqR3NpbuQV3Hy4PHDMAHrg4JWI0PCut+jM=
Subject key identifier: 9A:18:AB:E6:A4:6A:71:FA:F9:9C:EA:F5:F3:13:1B:E7:9A:B3:6A:19
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 11C8E437DFA2671441FE814C882B07340702AF36
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402976.roa
Signing time: Mon 21 Sep 2026 09:55:13 +0000
ROA not before: Mon 21 Sep 2026 09:50:13 +0000
ROA not after: Mon 20 Sep 2027 09:55:13 +0000
asID: 402976
IP address blocks: 64.226.204.0/24 maxlen: 24
66.132.211.0/24 maxlen: 24
69.90.32.0/24 maxlen: 24
69.90.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:c8:e4:37:df:a2:67:14:41:fe:81:4c:88:2b:07:34:07:02:af:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 21 09:50:13 2026 GMT
Not After : Sep 20 09:55:13 2027 GMT
Subject: CN=9A18ABE6A46A71FAF99CEAF5F3131BE79AB36A19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bc:5e:3c:89:e6:78:cf:16:cb:cc:9e:0d:ed:
d8:90:59:26:64:e3:e1:78:13:dd:70:69:de:26:09:
6a:64:62:dc:e6:7d:9e:9d:6b:30:0c:81:8e:56:10:
37:3a:7e:78:0c:a3:2e:c4:46:9b:fd:d1:8c:f5:b5:
88:7f:5e:19:9d:5e:bd:61:f0:bd:17:4f:36:12:0b:
cf:21:2c:38:50:37:d7:ab:ae:6c:04:5f:4a:f2:84:
1f:cc:ba:38:2b:48:da:55:69:44:cb:79:75:54:e4:
67:60:9d:66:74:4d:f3:17:1a:95:76:dc:2a:91:30:
66:9c:46:f4:7b:be:82:e5:6c:39:68:53:e4:19:8b:
39:b5:93:fd:a0:41:d8:4f:56:8a:13:a8:fa:5c:f5:
a7:2a:05:0a:97:14:c5:3d:68:68:58:32:21:27:bd:
e7:c4:61:3f:8f:8c:e2:f6:84:af:0a:c3:4f:35:98:
51:52:6a:e6:63:81:91:cc:2e:9e:d1:4f:25:dd:98:
d0:82:01:ca:26:62:34:c8:6b:d5:c4:17:39:04:d0:
2d:5e:34:d4:58:79:d4:8a:44:17:bb:d5:75:88:7f:
ae:1e:cf:92:f2:63:3b:3a:d5:0d:63:01:1c:61:10:
5a:ca:b3:70:f4:ed:19:5c:3b:f4:ad:eb:e5:07:92:
b1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:18:AB:E6:A4:6A:71:FA:F9:9C:EA:F5:F3:13:1B:E7:9A:B3:6A:19
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402976.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.226.204.0/24
66.132.211.0/24
69.90.32.0/24
69.90.227.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:21:37:ad:28:82:31:f5:28:37:79:f5:71:ab:30:12:9b:52:
61:60:e9:6e:d7:34:6a:1b:33:4e:a4:de:dd:d7:f5:fa:5d:e2:
f8:cd:26:62:37:b2:07:07:7a:6e:76:54:4e:e3:d1:c4:fa:c8:
ea:7d:53:f9:79:9e:46:3a:c1:7f:92:19:22:0a:48:c5:69:dd:
a2:88:2e:05:c1:2c:1f:d4:77:45:fa:c0:60:23:76:23:d3:9d:
ff:74:b3:a2:e0:ec:1c:30:c2:40:cd:57:e5:db:c8:b7:9b:aa:
74:a7:cd:f2:30:c4:bf:2e:3f:b6:80:38:22:40:a6:bc:0a:1f:
8a:01:0c:a1:c1:d8:5c:27:b8:3d:43:ae:e0:50:ad:af:4f:d9:
4d:4f:67:26:b1:63:81:15:d7:90:e2:19:34:27:e0:b8:11:ac:
e6:3d:a6:39:12:47:c2:6d:c2:6d:9e:c4:2f:0b:5d:5a:4d:d4:
71:32:23:11:a0:f5:44:f0:1f:72:12:5e:5a:62:78:02:d5:1b:
18:42:ca:11:e2:af:2c:dd:d2:86:3f:89:06:74:ad:bb:c9:7a:
d1:cc:44:b6:18:65:12:ef:cd:a0:f4:c0:20:27:32:c4:03:74:
ae:03:bf:7a:ec:99:69:5b:33:c2:b6:b2:2c:1c:88:48:06:ab:
3b:19:fc:20
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIUEcjkN9+iZxRB/oFMiCsHNAcCrzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA5MjEwOTUwMTNaFw0yNzA5MjAwOTU1MTNaMDMxMTAvBgNV
BAMTKDlBMThBQkU2QTQ2QTcxRkFGOTlDRUFGNUYzMTMxQkU3OUFCMzZBMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQvF48ieZ4zxbLzJ4N7diQWSZk
4+F4E91wad4mCWpkYtzmfZ6dazAMgY5WEDc6fngMoy7ERpv90Yz1tYh/XhmdXr1h
8L0XTzYSC88hLDhQN9errmwEX0ryhB/MujgrSNpVaUTLeXVU5GdgnWZ0TfMXGpV2
3CqRMGacRvR7voLlbDloU+QZizm1k/2gQdhPVooTqPpc9acqBQqXFMU9aGhYMiEn
vefEYT+PjOL2hK8Kw081mFFSauZjgZHMLp7RTyXdmNCCAcomYjTIa9XEFzkE0C1e
NNRYedSKRBe71XWIf64ez5LyYzs61Q1jARxhEFrKs3D07RlcO/St6+UHkrGbAgMB
AAGjggIcMIICGDAdBgNVHQ4EFgQUmhir5qRqcfr5nOr18xMb55qzahkwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNDAyOTc2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAQOLM
AwQAQoTTAwQARVogAwQARVrjMA0GCSqGSIb3DQEBCwUAA4IBAQB+ITetKIIx9Sg3
efVxqzASm1JhYOlu1zRqGzNOpN7d1/X6XeL4zSZiN7IHB3pudlRO49HE+sjqfVP5
eZ5GOsF/khkiCkjFad2iiC4FwSwf1HdF+sBgI3Yj053/dLOi4OwcMMJAzVfl28i3
m6p0p83yMMS/Lj+2gDgiQKa8Ch+KAQyhwdhcJ7g9Q67gUK2vT9lNT2cmsWOBFdeQ
4hk0J+C4EazmPaY5EkfCbcJtnsQvC11aTdRxMiMRoPVE8B9yEl5aYngC1RsYQsoR
4q8s3dKGP4kGdK27yXrRzES2GGUS782g9MAgJzLEA3SuA7967JlpWzPCtrIsHIhI
Bqs7Gfwg
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:11:36 2026 by rpki-client