Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS399073.roa
File: AS399073.roa (raw, json)
Hash identifier: 9W+8Rej68EJTWmEEI49+dSUZhcc+C37ptbroUQavDdM=
Subject key identifier: 84:31:77:5E:3E:0A:0F:41:A2:81:42:FD:08:F0:B1:4F:54:E0:D1:90
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 234E4380861311662BEB1453E312B24BEACF456E
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS399073.roa
Signing time: Tue 30 Sep 2025 10:03:14 +0000
ROA not before: Tue 30 Sep 2025 09:58:14 +0000
ROA not after: Tue 29 Sep 2026 10:03:14 +0000
asID: 399073
IP address blocks: 46.236.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:4e:43:80:86:13:11:66:2b:eb:14:53:e3:12:b2:4b:ea:cf:45:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 30 09:58:14 2025 GMT
Not After : Sep 29 10:03:14 2026 GMT
Subject: CN=8431775E3E0A0F41A28142FD08F0B14F54E0D190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7a:1c:ec:2b:f7:67:4c:6c:40:a9:09:c5:58:
0e:a4:4a:bf:45:e9:ac:47:7b:5e:6c:9f:b9:fb:4f:
09:34:8f:33:47:23:74:80:8f:6f:a1:58:ca:be:de:
8d:ac:7f:b4:22:e7:a5:32:09:85:dd:38:c5:dc:5e:
d1:7b:80:90:e9:31:6c:b8:94:89:39:d2:0f:e4:98:
f5:e1:47:86:21:89:12:4e:85:b8:c4:b6:1e:fc:a2:
d0:d5:c9:48:38:78:44:78:d5:78:4a:19:bd:be:c2:
74:56:fc:c4:5f:6c:69:cd:01:dd:7a:56:ed:ce:c2:
9c:fc:a1:f2:94:d3:0a:5b:91:96:83:b1:ba:91:95:
2d:1d:8f:70:b9:60:d7:08:78:1d:bb:28:6f:2f:7a:
8c:fa:d6:e5:85:df:70:b8:d9:d0:07:d0:8e:d0:05:
37:29:87:72:e1:64:13:f1:51:44:76:71:10:f8:bd:
72:70:55:92:18:f3:15:67:7a:5a:6a:0e:13:3a:bd:
34:9f:41:61:78:1a:83:af:89:7b:2f:e3:5f:8c:30:
21:89:91:a1:74:08:73:1f:5a:96:66:59:93:4b:36:
04:5e:e1:2c:bc:a8:66:45:4f:cc:14:7f:03:73:e6:
03:c3:bd:f0:6a:95:98:95:69:4b:12:1d:c4:9c:69:
f5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:31:77:5E:3E:0A:0F:41:A2:81:42:FD:08:F0:B1:4F:54:E0:D1:90
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS399073.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.242.0/24
Signature Algorithm: sha256WithRSAEncryption
24:bc:7d:a4:ae:3d:c9:bd:81:ef:0c:e9:d6:05:76:4a:eb:ec:
6f:69:83:a7:d1:be:38:a6:61:51:6f:25:f5:28:29:b9:75:8e:
dd:24:c0:ed:c1:69:14:72:45:a8:75:a3:0e:90:df:cc:dc:60:
39:27:19:96:66:ff:7c:d3:c1:e8:63:db:1c:f5:07:8d:11:b1:
1c:4f:9d:44:1a:96:66:97:22:9e:d0:32:86:22:b3:b6:b7:46:
1d:82:ba:a9:19:79:f5:49:1b:18:78:6b:b1:59:1e:e8:78:f0:
14:9c:2f:48:aa:33:eb:f4:29:68:e6:0a:c4:78:cf:dc:ff:9c:
fa:4c:8a:15:73:6b:5e:2a:d4:b8:1f:6c:3a:88:ec:5f:43:5e:
ca:1f:67:c3:79:e0:49:f4:b8:dc:5f:5f:ec:19:6c:65:5a:5f:
56:15:18:02:87:4a:0a:42:b3:6e:a0:3c:45:45:d3:d3:f2:5a:
91:c3:d1:4c:a4:3e:ec:e0:40:23:cb:b0:f0:57:42:8d:8d:99:
f6:d0:55:b8:2f:5a:a8:5f:da:b7:ed:e1:b6:cc:65:b3:17:b7:
0e:d4:87:fb:50:d7:c1:f4:06:a3:56:52:64:3b:35:e1:6b:12:
d2:8c:4f:19:7f:49:fc:75:92:ee:ec:26:1a:1a:54:c8:96:75:
d9:e6:c7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:19 2025 by rpki-client