Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402215.roa
File: AS402215.roa (raw, json)
Hash identifier: KA2bVgs2misJcQmGBVi318OijaxMhcRIVC7qBJWowGE=
Subject key identifier: D3:70:DC:77:10:1C:3D:AC:14:07:8B:73:66:3F:BD:DE:5C:01:F8:87
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6955BCF383B5E3857A2926B9AF25BB8986E7E8D2
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402215.roa
Signing time: Thu 23 Jul 2026 16:35:50 +0000
ROA not before: Thu 23 Jul 2026 16:30:50 +0000
ROA not after: Thu 22 Jul 2027 16:35:50 +0000
asID: 402215
IP address blocks: 51.194.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:55:bc:f3:83:b5:e3:85:7a:29:26:b9:af:25:bb:89:86:e7:e8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 23 16:30:50 2026 GMT
Not After : Jul 22 16:35:50 2027 GMT
Subject: CN=D370DC77101C3DAC14078B73663FBDDE5C01F887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e7:b0:9b:c6:2d:f1:b5:e1:2a:80:f0:93:f2:
13:ae:d0:49:90:c3:75:4d:32:74:c4:f6:de:b8:a4:
c4:d9:f7:3e:ec:1a:12:20:bf:b6:61:0a:3b:fe:9b:
cc:b1:64:c8:18:c7:d5:af:81:c9:3b:f1:14:cd:e7:
07:4f:ed:86:33:9e:c1:24:f6:83:52:aa:f6:0f:0f:
5b:9f:16:97:8b:6b:0c:f4:45:28:a8:a3:29:f7:20:
52:84:91:0b:5b:a8:27:a3:62:fa:09:a6:20:e7:ab:
31:9f:df:d5:11:49:9b:00:9a:c8:40:a1:c3:c9:fe:
06:50:16:e1:49:83:cc:d3:79:fe:66:c6:ff:8b:69:
a8:13:d7:14:9f:ec:b6:40:e4:10:6b:41:18:e7:2f:
02:2d:11:55:6e:83:53:20:ad:9f:9e:65:75:f6:08:
86:23:e3:24:2a:0f:1a:30:56:ad:f0:21:68:d8:f1:
85:ce:5b:e4:0d:d8:44:4b:c8:12:97:a4:55:8e:c6:
c1:ef:44:71:81:76:d9:a8:fb:83:7e:c7:62:de:06:
03:70:0b:3b:7f:33:ca:76:b9:51:11:e7:51:4c:07:
f4:81:fa:ff:1f:1f:63:72:36:b2:16:1c:35:35:74:
0a:95:2c:c0:13:b0:18:5a:c2:9a:5e:c9:c5:b5:6f:
2f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:70:DC:77:10:1C:3D:AC:14:07:8B:73:66:3F:BD:DE:5C:01:F8:87
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.140.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:31:4f:41:74:e7:ea:0c:38:d6:ce:40:98:be:c7:aa:0c:f9:
ba:4f:a5:a8:7b:3c:dc:72:6c:d2:79:84:32:ea:8b:02:5e:fc:
85:d6:ee:15:32:23:4a:cf:04:54:eb:d6:b5:54:e8:2f:30:2e:
74:7f:84:0c:35:69:fc:89:d5:b4:30:db:5c:2e:1a:11:1a:66:
53:95:b5:00:96:34:9f:63:de:70:3b:77:fd:50:58:f1:eb:23:
91:5f:0e:65:48:ec:db:05:21:67:9a:14:fd:94:21:04:24:a6:
0f:f9:51:ef:ac:79:33:1c:ba:15:1c:82:b9:23:27:c6:41:93:
5f:c7:88:0a:42:c1:82:16:2c:72:bb:8a:b8:2a:41:1f:54:cc:
ee:b1:23:9e:94:86:8e:fc:99:b7:cb:4a:96:fb:b9:f7:7c:0d:
dd:41:aa:3f:ce:ca:e5:58:e2:9a:32:f6:14:1a:91:32:47:a1:
44:34:c9:88:af:fc:0e:75:f5:e3:62:bc:83:21:8f:26:1f:1c:
31:a3:bd:8b:8a:2d:4d:66:f9:8d:78:05:29:52:74:7b:35:f9:
73:d5:a4:6d:21:7b:69:25:2c:75:94:20:8f:1b:eb:36:8c:f9:
c1:fa:a5:39:af:ce:e4:f9:76:39:59:5d:88:81:1a:8c:de:4d:
a9:b3:3d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:06:22 2026 by rpki-client