Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS399631.roa
File: AS399631.roa (raw, json)
Hash identifier: 2FOLE3PPvFUhGWQGS93WxJslXGYvOaG2Q0uliqKb9Gc=
Subject key identifier: 79:58:81:09:5E:41:B8:63:67:E6:EA:C5:7B:C7:76:0B:9E:6A:E8:83
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 4D0232EA5D7CAA6C0D6A18F910DAA1E8964BB533
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS399631.roa
Signing time: Thu 23 Jul 2026 19:19:34 +0000
ROA not before: Thu 23 Jul 2026 19:14:34 +0000
ROA not after: Thu 22 Jul 2027 19:19:34 +0000
asID: 399631
IP address blocks: 212.60.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:02:32:ea:5d:7c:aa:6c:0d:6a:18:f9:10:da:a1:e8:96:4b:b5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Jul 23 19:14:34 2026 GMT
Not After : Jul 22 19:19:34 2027 GMT
Subject: CN=795881095E41B86367E6EAC57BC7760B9E6AE883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:90:1f:b5:a4:d9:4f:70:77:4f:93:e8:71:c6:
8c:52:e4:fd:c1:be:64:bd:36:ed:07:a9:a9:09:a5:
b2:f2:07:4e:07:a3:af:48:96:6f:3f:13:61:4b:c0:
52:6e:76:a4:9e:44:ef:62:2d:e9:46:ab:db:d0:e9:
7a:ab:2b:c4:f8:0d:19:82:01:f2:9b:9a:59:2e:f9:
18:40:f3:09:54:b0:28:8a:7d:4a:37:d3:59:b4:84:
d7:3b:fc:3e:c1:8c:54:08:18:93:e1:34:4e:b4:09:
f6:58:f5:bd:5b:b4:6c:48:08:4e:4d:5b:a8:08:42:
64:a1:f9:18:3a:96:96:a8:7c:20:9e:08:10:f3:97:
39:7e:d2:9c:f2:75:f7:57:68:d2:d2:79:53:1f:6d:
ea:ef:52:07:dd:d5:f9:bc:7f:36:64:1c:2b:29:e3:
e3:e1:3e:ca:76:e3:6c:e3:62:75:da:02:c5:f1:b3:
32:f2:b6:9c:3f:37:92:92:b5:b8:e3:43:13:45:34:
fb:ec:f5:49:91:91:ce:89:03:02:2b:06:59:94:3a:
9b:dc:cf:98:c3:51:60:a1:ae:ad:13:e8:6b:cf:59:
13:29:e4:1a:8c:f5:e5:8f:8a:01:b6:5e:9c:de:c4:
08:db:be:ae:17:4b:47:02:f5:e5:b9:29:d0:4d:79:
81:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:58:81:09:5E:41:B8:63:67:E6:EA:C5:7B:C7:76:0B:9E:6A:E8:83
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS399631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.60.148.0/24
Signature Algorithm: sha256WithRSAEncryption
73:6c:bc:95:fe:a7:7e:40:10:e7:ba:0a:11:52:bc:18:01:70:
5b:75:98:b5:17:7f:5d:63:e0:2d:24:c7:a5:b1:98:6e:dd:8c:
d4:b3:91:86:f9:1f:4c:d4:51:61:bf:62:58:67:b1:3f:79:34:
5f:76:25:63:44:f8:52:df:18:82:ca:ac:72:8a:e7:dd:f1:c1:
4a:f2:49:8f:a2:1f:df:b7:85:08:89:2b:c1:6a:75:7c:2c:3b:
cc:1b:e4:42:72:cc:4f:83:98:2a:05:ea:30:39:e6:7c:f1:a0:
8b:bf:20:55:c1:96:ae:64:b3:7f:5e:f2:f8:ae:84:43:e9:0d:
22:bc:fb:ca:dd:5b:52:70:f4:a7:d8:2b:05:60:f1:92:de:22:
7e:b8:1e:a2:5f:a1:6d:73:61:65:db:eb:28:fc:8a:bb:e3:6e:
af:08:62:9f:e5:4d:ff:66:f6:3c:0f:79:46:07:5c:f3:e4:ad:
cc:b2:22:52:77:da:43:de:40:3d:3d:ef:f3:c5:68:48:67:00:
8d:33:0e:aa:1f:d0:8e:5c:c8:bb:20:b3:62:c6:02:d4:02:29:
f9:0e:79:2c:93:b5:b1:e2:45:08:08:49:64:5b:dc:ac:d3:b6:
07:30:72:8b:7a:f0:fc:b0:d4:c1:c0:c0:a7:12:a4:ec:3a:9c:
bf:7f:4c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:15 2026 by rpki-client