Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS401418.roa
File: AS401418.roa (raw, json)
Hash identifier: K1JqtB0bkL3aPEagwxxDytd2ILOVl+dhxTQHgvype38=
Subject key identifier: ED:FD:B5:10:9A:16:AE:0D:4B:80:64:75:58:44:20:A8:3E:45:E8:A7
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 6FD8189D16590BB24F0783D4DB08D1D5434EC757
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS401418.roa
Signing time: Fri 06 Nov 2026 16:14:07 +0000
ROA not before: Fri 06 Nov 2026 16:09:07 +0000
ROA not after: Fri 05 Nov 2027 16:14:07 +0000
asID: 401418
IP address blocks: 152.89.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:d8:18:9d:16:59:0b:b2:4f:07:83:d4:db:08:d1:d5:43:4e:c7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Nov 6 16:09:07 2026 GMT
Not After : Nov 5 16:14:07 2027 GMT
Subject: CN=EDFDB5109A16AE0D4B806475584420A83E45E8A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:78:57:ec:5b:b1:fc:c3:7b:dc:16:13:18:ff:
3c:59:bc:b1:af:9f:ca:06:86:00:05:c6:7f:d6:ea:
5f:c0:62:8c:7d:61:09:e5:82:e6:16:b1:e2:09:09:
f4:0a:ab:29:3c:eb:2d:8c:f9:13:6d:a5:48:b5:43:
3d:07:56:66:56:8d:81:4e:56:8f:e9:ab:4f:33:6f:
ab:6a:7d:11:94:d6:f9:05:da:07:10:cf:36:bb:c0:
c1:27:21:7c:d0:6e:de:ea:ed:42:e1:d5:ab:61:ed:
64:2c:3c:a4:32:30:42:b1:8a:de:3e:4d:1f:1e:bf:
8f:d1:ee:38:e0:1d:23:c7:6e:10:a5:0d:49:e3:b6:
91:32:5d:d7:a1:07:5a:e5:ab:97:1d:77:59:a0:74:
8a:aa:0e:44:66:da:2c:f8:b9:d0:2b:2f:1d:e8:81:
f2:4a:83:c8:dd:91:2d:80:b4:83:13:3e:11:a1:ae:
4e:76:75:d6:f5:f8:85:6f:98:d1:68:63:0f:9c:84:
b4:f7:7c:d0:68:78:07:79:7f:f4:b8:29:4e:ff:82:
0b:0c:38:32:53:1f:f7:48:fd:f5:0d:49:20:39:0b:
05:75:ec:3b:5c:6c:da:e4:ad:03:7e:86:ea:82:f3:
38:02:8a:1d:52:c2:05:b8:7e:d4:13:6e:f9:29:c6:
fb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FD:B5:10:9A:16:AE:0D:4B:80:64:75:58:44:20:A8:3E:45:E8:A7
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS401418.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.250.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:f7:de:62:40:cd:ad:ef:46:04:a7:fb:38:0b:77:83:14:02:
e2:bf:09:68:c0:df:a9:08:7e:35:f4:12:a2:b8:5e:1e:e8:f3:
ed:93:ee:3a:53:3e:90:59:08:bc:71:e9:5c:d9:97:f1:4a:e7:
05:48:07:ee:49:a4:60:fd:8b:9e:a9:04:c3:01:23:b4:80:3e:
06:7a:6c:43:f9:b7:25:ce:9c:b3:7f:aa:21:14:59:02:dd:10:
ea:f1:c5:09:65:0b:fd:3f:01:0a:2e:b7:13:db:74:63:5d:67:
1a:32:a8:14:ef:a1:22:04:73:61:3d:17:79:33:34:56:b6:c5:
f8:82:2f:c0:ae:a0:08:c1:ac:17:a4:3c:0e:27:a2:51:69:2b:
54:0e:ae:a0:44:ef:9e:44:c3:78:be:5b:3b:30:02:19:77:f5:
fb:10:cb:e3:b4:2f:c3:2f:4e:76:be:08:c4:b7:4f:be:d3:8d:
8e:46:dc:35:44:a3:79:ff:9a:42:21:8f:0b:a5:57:d7:68:1d:
fd:36:24:b6:1b:93:2f:b6:e7:ee:83:89:1b:74:1b:b2:f1:02:
20:ee:25:f4:06:7c:44:76:22:a4:89:16:ab:fb:08:b1:35:f4:
7a:28:a3:35:c3:7e:17:4d:47:1c:cd:c3:97:6a:1d:42:84:61:
cf:4b:3e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:23:07 2026 by rpki-client