Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS398465.roa
File: AS398465.roa (raw, json)
Hash identifier: gdrpid7y6EVGRSPvBp383S0RSG6dz9vbfruhmNmSENA=
Subject key identifier: 48:8F:73:8F:91:6B:7E:AE:61:29:62:7C:59:87:07:00:6D:64:F5:40
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3E44F39552CF9DDDF15D95498A0B3CE62EAEA9C8
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS398465.roa
Signing time: Wed 23 Sep 2026 06:14:56 +0000
ROA not before: Wed 23 Sep 2026 06:09:56 +0000
ROA not after: Wed 22 Sep 2027 06:14:56 +0000
asID: 398465
IP address blocks: 94.116.36.0/22 maxlen: 24
94.116.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:44:f3:95:52:cf:9d:dd:f1:5d:95:49:8a:0b:3c:e6:2e:ae:a9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 23 06:09:56 2026 GMT
Not After : Sep 22 06:14:56 2027 GMT
Subject: CN=488F738F916B7EAE6129627C598707006D64F540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8f:b5:56:8c:f4:ea:0c:46:59:81:45:1c:e1:
94:4f:e8:30:4f:d3:2f:d1:ab:d9:14:dc:8a:e9:9d:
56:0a:29:ea:e4:ef:8c:34:2e:d7:58:35:9b:b4:6a:
9c:67:f7:93:70:65:9a:23:ba:9b:ea:08:05:e3:9a:
02:f1:40:44:2c:bd:c4:5f:46:a3:01:59:2c:c6:6e:
46:48:44:8f:a9:8b:a3:4d:70:79:d5:66:d7:f4:52:
93:b5:09:d5:9a:c7:7e:3c:10:f2:67:8a:d3:3f:21:
b7:85:a6:5c:67:c2:c9:bf:ae:25:4b:12:41:8c:e7:
79:7d:fd:9f:c1:6a:e0:56:0a:1d:37:90:c3:c4:4b:
c2:b9:67:63:84:46:a0:2f:4b:41:a5:28:c2:d9:da:
f0:ac:43:7e:24:cd:2d:78:71:9d:b1:56:8d:07:85:
53:d2:f4:2f:5b:83:5a:db:0e:6a:35:0e:dd:52:4a:
c6:ff:12:d0:0d:8d:36:c9:31:38:4e:ed:61:70:97:
7b:cd:38:75:4d:5a:e3:63:ea:c8:17:6b:c0:78:ab:
2c:5e:b0:d3:ff:93:ce:77:f0:d9:c8:7d:5e:29:44:
03:bb:96:d3:99:c7:5f:1f:5f:f9:12:7b:6c:d7:d1:
29:e2:83:bc:82:28:54:98:21:2b:a3:78:53:eb:a1:
e4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8F:73:8F:91:6B:7E:AE:61:29:62:7C:59:87:07:00:6D:64:F5:40
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS398465.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.116.36.0/22
94.116.72.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:eb:c2:41:2c:60:15:01:94:3a:7d:49:9f:48:d7:c4:52:08:
b7:ac:6e:03:1a:29:5e:45:3b:97:d3:94:95:90:fd:eb:3c:f4:
11:41:57:48:03:d2:f4:eb:f3:6e:80:41:86:4b:f0:4d:49:a4:
c5:d2:f4:a4:7a:b3:af:6a:d3:a8:30:64:67:3a:a8:b1:49:37:
42:47:59:85:f5:f4:e4:5a:64:ca:e2:48:8b:ef:fb:16:bf:ad:
73:38:02:89:d4:c9:8e:03:e3:ad:a6:18:14:d7:b3:a0:e0:62:
cc:38:51:ed:ae:bf:62:e3:41:e4:e7:1e:e5:57:d0:68:ad:9d:
8b:11:3c:31:5b:7c:16:fe:db:8e:9a:0d:67:48:33:03:4e:f7:
1a:14:ac:e2:ed:c2:71:25:be:fc:b5:7a:4e:38:3f:99:bf:22:
9c:1f:2f:88:cf:aa:7a:3b:2c:73:0a:52:5b:3b:a1:0e:f1:3b:
9e:66:a1:29:42:f5:a6:e0:86:55:f6:44:94:c4:8b:30:d0:2c:
8b:dd:f0:0e:95:6f:97:b9:d1:45:5b:e5:6d:99:e7:b7:eb:f9:
0c:2c:ae:ab:d8:ce:d4:89:51:4d:32:b6:f2:a2:c4:77:ba:5c:
31:a9:c6:be:80:88:c3:79:c9:42:fe:1d:68:97:fd:ae:c7:e5:
aa:a3:2b:7f
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUPkTzlVLPnd3xXZVJigs85i6uqcgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA5MjMwNjA5NTZaFw0yNzA5MjIwNjE0NTZaMDMxMTAvBgNV
BAMTKDQ4OEY3MzhGOTE2QjdFQUU2MTI5NjI3QzU5ODcwNzAwNkQ2NEY1NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHj7VWjPTqDEZZgUUc4ZRP6DBP
0y/Rq9kU3IrpnVYKKerk74w0LtdYNZu0apxn95NwZZojupvqCAXjmgLxQEQsvcRf
RqMBWSzGbkZIRI+pi6NNcHnVZtf0UpO1CdWax348EPJnitM/IbeFplxnwsm/riVL
EkGM53l9/Z/BauBWCh03kMPES8K5Z2OERqAvS0GlKMLZ2vCsQ34kzS14cZ2xVo0H
hVPS9C9bg1rbDmo1Dt1SSsb/EtANjTbJMThO7WFwl3vNOHVNWuNj6sgXa8B4qyxe
sNP/k8538NnIfV4pRAO7ltOZx18fX/kSe2zX0Snig7yCKFSYISujeFProeQhAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUSI9zj5Frfq5hKWJ8WYcHAG1k9UAwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMzk4NDY1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXnQk
AwQCXnRIMA0GCSqGSIb3DQEBCwUAA4IBAQCc68JBLGAVAZQ6fUmfSNfEUgi3rG4D
GileRTuX05SVkP3rPPQRQVdIA9L06/NugEGGS/BNSaTF0vSkerOvatOoMGRnOqix
STdCR1mF9fTkWmTK4kiL7/sWv61zOAKJ1MmOA+OtphgU17Og4GLMOFHtrr9i40Hk
5x7lV9BorZ2LETwxW3wW/tuOmg1nSDMDTvcaFKzi7cJxJb78tXpOOD+ZvyKcHy+I
z6p6OyxzClJbO6EO8TueZqEpQvWm4IZV9kSUxIsw0CyL3fAOlW+XudFFW+Vtmee3
6/kMLK6r2M7UiVFNMrbyosR3ulwxqca+gIjDeclC/h1ol/2ux+Wqoyt/
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:49:13 2026 by rpki-client