Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402252.roa
File: AS402252.roa (raw, json)
Hash identifier: XKn6mbFrRh8R6BItDzlSvUwbG6YLeH7DnHRP/6eKxe0=
Subject key identifier: 35:4D:0E:E8:50:58:F3:50:AE:B1:A5:71:10:00:F2:2A:25:30:5F:48
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1BEA85F6FC38F211B8B338D2E3588EDB3D67BF8B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402252.roa
Signing time: Wed 06 May 2026 07:46:31 +0000
ROA not before: Wed 06 May 2026 07:41:31 +0000
ROA not after: Wed 05 May 2027 07:46:31 +0000
asID: 402252
IP address blocks: 78.105.113.0/24 maxlen: 24
78.105.118.0/24 maxlen: 24
78.105.125.0/24 maxlen: 24
78.105.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:ea:85:f6:fc:38:f2:11:b8:b3:38:d2:e3:58:8e:db:3d:67:bf:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 6 07:41:31 2026 GMT
Not After : May 5 07:46:31 2027 GMT
Subject: CN=354D0EE85058F350AEB1A5711000F22A25305F48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:29:22:d0:bc:56:4f:c3:ee:82:d9:17:eb:6b:
4b:91:1b:92:a9:e1:89:a5:bb:17:6d:5d:53:16:1a:
cc:19:6c:5d:15:43:ea:b5:53:9b:ae:e7:94:a3:25:
06:79:d9:c2:15:15:c0:e2:bb:17:a3:4c:28:b3:05:
c4:bc:46:72:b1:1f:e1:13:cf:99:12:5b:a7:f7:a8:
2d:33:4c:ed:b3:8a:60:78:a2:59:b7:22:ac:da:e9:
08:cf:d5:78:8f:ea:a3:55:aa:41:a8:fd:19:c2:bd:
41:c8:eb:4c:af:ca:7f:52:4e:ef:45:ff:71:f2:f5:
ca:28:41:fb:ed:ae:f7:d8:b0:95:3d:f3:43:d8:a6:
65:72:db:e0:d9:76:23:9e:61:61:70:12:60:ae:8a:
c5:d3:c4:e9:b7:ae:13:7f:be:66:79:ef:d9:fe:47:
28:66:e9:40:94:82:1d:cf:7a:09:6a:56:ac:2a:73:
05:07:e3:dc:b1:fa:91:3c:44:38:e9:a8:c3:4d:b0:
5a:8a:22:df:75:bd:12:e1:fe:6a:43:56:44:3f:a0:
99:a5:fe:18:fb:a7:c8:ea:cc:44:31:70:2b:cc:c8:
94:d8:c4:f5:7d:7b:d6:0a:e4:3f:0c:af:49:2a:b7:
f3:0b:81:f7:ef:b5:8e:24:c5:d6:f8:6e:b5:fc:79:
1c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4D:0E:E8:50:58:F3:50:AE:B1:A5:71:10:00:F2:2A:25:30:5F:48
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.113.0/24
78.105.118.0/24
78.105.125.0/24
78.105.247.0/24
Signature Algorithm: sha256WithRSAEncryption
39:e2:f6:9c:c3:43:32:ea:32:ec:48:1a:4d:d8:dd:ec:9c:2f:
52:e6:c4:24:d7:ee:96:21:a7:f7:09:97:19:98:3e:83:8a:89:
7a:a6:06:24:1a:28:d7:7a:93:51:27:a6:28:29:22:88:e0:67:
65:77:71:06:4b:bb:9f:57:1e:2c:b9:6e:69:e6:7d:d8:c4:61:
a8:04:4d:a9:2e:51:e9:0f:28:8c:30:48:5d:9b:70:33:80:92:
3a:06:39:ef:3e:b3:87:34:6a:38:ed:6f:7d:1d:c1:a6:d1:61:
4f:96:1a:f6:c6:f6:4d:b2:4d:38:fa:98:27:fa:07:12:06:b3:
ea:94:8e:b5:28:bc:77:45:6a:df:b7:66:97:6d:9e:0b:5b:c3:
c8:55:b8:49:0a:5e:d8:30:a0:6a:24:b3:d8:8c:ef:d5:98:ba:
76:b8:6c:20:2b:a9:40:0e:ad:93:e9:91:a5:db:9a:69:d4:97:
40:31:c2:52:36:93:a8:ab:ca:5f:70:54:55:91:95:4e:15:9d:
0f:6d:ec:36:5e:3b:63:fa:04:af:d3:4d:1a:52:8b:0e:9d:3f:
38:ef:4e:ff:c7:31:d2:c4:a3:09:c7:82:93:8e:85:8d:df:49:
0a:b4:49:d0:2f:57:db:eb:36:70:2a:85:ce:c2:ff:f5:b9:b7:
c0:88:2f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:38:46 2026 by rpki-client