Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS398465.roa
File: AS398465.roa (raw, json)
Hash identifier: nhMU27aIL24HPU4il2HOeQ2QQsrA4BxzR45HrCX6huM=
Subject key identifier: 52:10:FA:F5:C1:1C:DD:6C:6A:C6:F6:B7:29:61:C2:BF:48:CD:93:89
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 3A5CDE41FC7006CF88867A3715E7382D24D1A711
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS398465.roa
Signing time: Wed 23 Sep 2026 06:15:05 +0000
ROA not before: Wed 23 Sep 2026 06:10:05 +0000
ROA not after: Wed 22 Sep 2027 06:15:05 +0000
asID: 398465
IP address blocks: 90.96.4.0/22 maxlen: 24
90.96.12.0/22 maxlen: 24
90.96.20.0/22 maxlen: 24
90.96.28.0/22 maxlen: 24
90.96.36.0/22 maxlen: 24
90.96.44.0/22 maxlen: 24
90.96.48.0/22 maxlen: 24
90.96.56.0/22 maxlen: 24
90.96.64.0/22 maxlen: 24
90.96.132.0/22 maxlen: 24
90.96.140.0/22 maxlen: 24
90.96.148.0/22 maxlen: 24
90.96.156.0/22 maxlen: 24
90.96.164.0/22 maxlen: 24
90.96.172.0/22 maxlen: 24
90.96.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:34:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:5c:de:41:fc:70:06:cf:88:86:7a:37:15:e7:38:2d:24:d1:a7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 23 06:10:05 2026 GMT
Not After : Sep 22 06:15:05 2027 GMT
Subject: CN=5210FAF5C11CDD6C6AC6F6B72961C2BF48CD9389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:66:fa:9c:c3:74:99:a2:cb:58:ea:74:2d:
85:4d:6a:89:37:b9:c6:d2:33:e5:da:c2:8c:1d:a0:
36:a8:09:c1:85:fb:05:76:a5:60:98:18:49:da:ff:
62:49:5e:eb:bd:67:9f:77:3a:b9:aa:b1:5f:bf:90:
d6:25:8e:7a:6c:ba:43:d4:d7:62:37:74:ef:a7:62:
5a:95:76:9c:7b:9b:e2:98:c6:89:a0:5e:64:16:9f:
24:32:e0:b7:14:98:23:29:4c:b0:4b:db:2a:28:7f:
1e:87:3e:c3:0b:5f:04:da:6f:16:8c:a8:c2:04:4e:
e7:96:36:5d:b2:ff:01:ea:f9:23:ad:ab:4b:2e:5c:
56:e4:0e:25:1f:4c:7b:ac:39:0c:05:83:6e:96:df:
92:e0:35:bb:23:e4:41:ae:eb:16:d1:b6:01:56:c7:
e2:fd:54:5a:33:02:69:10:19:74:b1:70:2d:56:11:
94:d1:6f:ca:92:a2:65:32:23:36:1e:12:49:86:82:
61:c9:fa:37:e2:23:b1:40:53:ba:11:82:e4:a6:76:
f6:8b:f3:dc:9b:50:0e:bd:91:ec:eb:61:3f:a0:1d:
2d:53:c4:4c:b9:aa:b8:e4:ec:ca:a2:ed:c6:11:73:
7c:ce:e4:21:c6:f7:e5:78:1c:2f:00:f5:ec:79:51:
33:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:10:FA:F5:C1:1C:DD:6C:6A:C6:F6:B7:29:61:C2:BF:48:CD:93:89
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS398465.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.96.4.0/22
90.96.12.0/22
90.96.20.0/22
90.96.28.0/22
90.96.36.0/22
90.96.44.0-90.96.51.255
90.96.56.0/22
90.96.64.0/22
90.96.132.0/22
90.96.140.0/22
90.96.148.0/22
90.96.156.0/22
90.96.164.0/22
90.96.172.0/22
90.96.240.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:39:70:82:69:4a:4f:bf:33:75:09:64:e9:55:eb:a2:42:b3:
45:92:e4:47:86:f5:ca:fd:4d:a2:dd:ab:5d:93:ba:11:b4:16:
06:f3:15:63:9f:ca:4e:fd:5f:69:40:dc:a9:20:61:97:e6:9e:
96:36:37:f3:24:94:af:e1:18:42:f9:cb:6a:b7:b8:3d:25:e3:
1a:ec:8f:99:45:a9:60:f5:7d:52:1c:8c:d0:1f:8d:f1:b5:ff:
d6:14:b9:df:6a:ca:27:31:0b:f0:53:9e:ee:00:6d:e4:55:84:
d6:94:61:b2:41:4f:94:7a:ac:53:20:30:a8:54:82:69:a5:0e:
12:5c:e2:99:39:56:04:82:d1:85:8c:d1:a0:24:a5:b3:c8:4e:
13:e0:4c:2e:da:06:c1:8e:fc:7a:b8:f3:60:2a:f2:b3:0c:d8:
f3:20:97:e5:a8:49:fc:55:6a:c1:bb:38:29:ac:6c:6d:56:82:
55:3a:90:74:76:60:4d:7a:9c:44:50:5f:a2:12:99:64:a5:30:
73:fb:08:c8:6e:27:a8:2d:92:01:2a:91:b3:e0:13:60:bf:b7:
3c:ff:fd:7b:36:c5:89:fc:b3:da:3f:0a:5e:ab:37:c5:be:81:
bf:92:df:12:ca:f6:53:f0:e8:6a:5a:ca:73:52:d0:77:fc:4c:
60:cb:75:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:11:33 2026 by rpki-client