Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS401322.roa
File: AS401322.roa (raw, json)
Hash identifier: /wAF43Rxnqc7lEaWeVdMypYOGUMEEcXwQcDQeU8NEn4=
Subject key identifier: F4:E5:44:F8:77:45:2A:EE:51:B0:52:B3:EE:AD:4D:6F:FF:20:D6:D2
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 5FFCBB7CFF4A4D91A8BBD3980E0694896854FACF
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS401322.roa
Signing time: Wed 11 Nov 2026 07:48:14 +0000
ROA not before: Wed 11 Nov 2026 07:43:14 +0000
ROA not after: Wed 10 Nov 2027 07:48:14 +0000
asID: 401322
IP address blocks: 90.96.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:fc:bb:7c:ff:4a:4d:91:a8:bb:d3:98:0e:06:94:89:68:54:fa:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Nov 11 07:43:14 2026 GMT
Not After : Nov 10 07:48:14 2027 GMT
Subject: CN=F4E544F877452AEE51B052B3EEAD4D6FFF20D6D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b6:05:50:b0:01:1a:37:49:f5:be:64:74:54:
ae:db:0f:b5:d7:9a:8a:fa:9f:9a:cf:a1:02:b1:04:
62:2e:bf:37:37:c5:c5:a8:dd:f7:cc:e6:95:b4:1a:
4d:33:06:6a:fb:8c:31:dd:4a:3c:2e:0a:ad:7c:d4:
db:73:42:9a:fb:b9:6d:b4:dc:5f:4e:e5:6b:a0:d7:
0b:a0:92:66:fd:4b:f8:5e:10:da:a0:76:e4:02:c5:
c0:38:00:10:a3:6d:49:e1:07:1d:92:bb:01:32:95:
bf:12:20:a8:ea:9c:58:1d:4e:fa:c7:0a:55:ab:5c:
94:25:fb:66:1a:cb:65:9f:8e:46:66:8c:00:99:bb:
c6:61:8b:69:01:20:ec:a0:f4:aa:4d:5a:d9:b7:f0:
d4:df:e5:64:eb:0b:d3:3f:45:5a:3c:31:07:1b:51:
c3:dc:2f:05:2d:b2:8a:8a:b2:eb:16:c8:90:83:f8:
75:b6:70:29:26:0d:92:c8:79:c2:9f:08:06:99:5e:
7b:c1:0e:1a:20:5d:03:cd:c9:c0:84:38:05:3d:ea:
6d:0a:61:77:62:5a:2e:c8:2e:8c:23:e9:14:75:50:
c8:44:0f:98:59:68:e3:df:1e:24:42:96:88:29:62:
dd:de:65:b1:81:53:50:73:af:b6:9e:19:14:57:26:
81:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E5:44:F8:77:45:2A:EE:51:B0:52:B3:EE:AD:4D:6F:FF:20:D6:D2
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS401322.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.96.81.0/24
Signature Algorithm: sha256WithRSAEncryption
50:fb:fc:40:79:2c:38:df:53:e6:36:f8:fc:ee:6a:fd:44:c2:
01:01:8d:a4:7c:6e:e3:23:cf:bf:c6:21:5a:bd:21:b7:9f:57:
4a:ed:33:34:c0:05:3a:38:a4:37:e3:0b:21:fb:73:6e:7f:25:
35:86:f5:d8:db:f9:55:39:be:ab:cb:14:7a:37:06:f5:1f:45:
1f:87:4e:98:9e:95:f9:6a:14:cc:dc:df:f7:35:2c:61:5c:1a:
00:20:b5:7e:83:9d:ba:17:2c:5f:83:33:db:88:7e:e7:28:6a:
67:9d:c6:c7:ec:46:c6:e0:03:eb:ee:8e:f7:a9:58:06:4c:db:
30:3f:d7:be:31:1c:ba:3a:4d:bc:ad:81:04:77:48:d6:e4:a0:
ff:0f:47:1a:e9:c1:a0:c1:3f:d7:7e:38:82:33:3d:77:2d:71:
5b:45:80:14:ed:77:ba:6d:e8:2a:d4:76:89:1c:84:cb:d6:82:
44:da:ad:4b:ce:78:ab:12:c9:ed:1d:d2:4a:a9:76:8d:8d:b0:
7c:24:2a:62:c9:f3:df:7d:c2:48:ef:e4:47:ac:2d:3f:88:62:
9e:17:5d:51:6e:87:be:c6:1d:db:ed:4e:1d:d8:ea:4f:04:64:
a5:63:c0:e3:42:f8:70:1d:5b:9f:3e:6f:6d:d9:07:01:3b:1a:
ec:82:6b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:53:51 2026 by rpki-client