Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS401896.roa
File: AS401896.roa (raw, json)
Hash identifier: aE6oOiiVUx5ZAkvJLJcQt24AZXkmpzCLak8YrXufnIk=
Subject key identifier: 9A:2D:A5:1B:AA:53:88:69:05:20:02:F4:EA:F8:CD:2F:C4:05:A5:18
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 62EAB436732630EA3F858011DDB8E144278D73A1
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS401896.roa
Signing time: Tue 28 Apr 2026 19:56:22 +0000
ROA not before: Tue 28 Apr 2026 19:51:22 +0000
ROA not after: Tue 27 Apr 2027 19:56:22 +0000
asID: 401896
IP address blocks: 2a14:7585:d300::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:ea:b4:36:73:26:30:ea:3f:85:80:11:dd:b8:e1:44:27:8d:73:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Apr 28 19:51:22 2026 GMT
Not After : Apr 27 19:56:22 2027 GMT
Subject: CN=9A2DA51BAA538869052002F4EAF8CD2FC405A518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0b:67:00:92:5c:1c:75:9d:3c:d3:3e:64:73:
f8:db:25:77:42:89:1d:01:ee:ca:3d:ed:bc:18:da:
b9:40:03:82:aa:95:ea:81:18:45:ef:36:b9:98:99:
c2:94:19:81:cd:7a:15:15:fe:d0:81:60:14:00:b9:
ac:0c:9e:6b:66:03:b9:c7:d9:a5:b7:35:d2:d6:2a:
b2:62:b1:fb:88:4c:93:84:d8:0a:5c:2b:b5:81:db:
84:c7:0f:63:b9:3c:8a:0d:46:26:f6:2c:01:24:f2:
ed:50:7f:78:6a:f6:a9:f6:6c:95:4f:a0:a8:34:71:
2a:db:9d:01:6b:9a:cb:29:e1:4f:f8:61:a5:22:ee:
23:18:3d:b1:e9:4a:7f:ef:12:60:89:d4:5f:5c:7e:
82:fe:c0:59:ed:58:d4:8f:46:39:b3:0d:a9:45:93:
09:96:00:21:08:fb:5d:78:d2:ef:ec:e4:08:f4:39:
96:18:62:86:28:03:d1:b1:00:b6:6a:8f:c3:55:b0:
df:80:16:02:6f:4f:47:aa:d5:32:82:9e:83:e9:10:
ef:c4:f1:07:3d:25:df:2f:ed:1f:05:0b:00:45:e4:
54:c5:a5:19:ab:ab:dd:05:f4:76:5b:2c:f4:4d:69:
d9:45:1c:de:4e:0d:c4:71:f0:b6:3b:fc:09:6f:0a:
91:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2D:A5:1B:AA:53:88:69:05:20:02:F4:EA:F8:CD:2F:C4:05:A5:18
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS401896.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7585:d300::/44
Signature Algorithm: sha256WithRSAEncryption
8c:5b:97:1d:0b:41:23:e4:42:0b:75:0f:33:99:fd:5a:dd:d3:
a7:ef:7c:aa:e9:55:08:07:a0:8f:fe:d0:aa:31:54:23:60:d9:
3a:71:50:1e:e8:85:c5:57:c7:65:90:e7:d8:88:4a:33:45:55:
c9:be:d4:09:61:ba:02:b0:85:36:75:d9:3b:4e:24:14:98:6a:
c0:2c:66:59:d7:37:32:7b:a9:1d:f7:c9:be:7e:2a:69:6e:c0:
9d:0d:ae:da:1d:fc:d4:5b:7f:7c:07:37:ff:1e:24:11:94:98:
46:68:4d:d0:f9:86:4e:eb:49:2c:a3:2e:28:41:52:6f:23:c6:
49:80:88:03:0d:9a:a9:3f:73:94:54:1c:e2:a8:d6:7f:6b:7a:
3e:8a:91:54:6d:ad:d7:0f:a3:77:1f:87:01:a5:08:1e:dd:29:
44:87:83:e8:f2:2e:75:99:5b:96:26:b9:b0:5f:14:56:68:2b:
33:f7:c1:1a:95:1e:b1:e2:82:07:6c:2e:69:45:d2:1b:3f:7d:
b5:9c:b3:e0:7c:e3:20:93:de:f8:7e:80:ff:4b:c8:15:60:16:
2b:b6:2b:e4:76:1f:9d:00:87:a6:7a:93:83:3d:26:47:15:45:
3c:98:54:97:8a:11:20:81:78:c6:f3:0c:0f:59:06:e5:7b:ef:
81:05:56:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:52 2026 by rpki-client