Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: YVV11R2iEq6wCuGoGtfyUQK68nqEapUYsxnIRetuljc=
Subject key identifier: 55:7D:1A:22:FA:95:30:7A:45:60:F5:7B:CA:AE:94:4A:3B:57:0B:53
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2A30F5CFB157EE6F78B9A7B1FBD54D1D35E4A8FF
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402265.roa
Signing time: Tue 22 Sep 2026 03:17:56 +0000
ROA not before: Tue 22 Sep 2026 03:12:56 +0000
ROA not after: Tue 21 Sep 2027 03:17:56 +0000
asID: 402265
IP address blocks: 51.194.189.0/24 maxlen: 24
51.194.238.0/24 maxlen: 24
51.194.239.0/24 maxlen: 24
51.241.105.0/24 maxlen: 24
51.241.114.0/24 maxlen: 24
51.241.166.0/24 maxlen: 24
51.241.211.0/24 maxlen: 24
51.241.244.0/24 maxlen: 24
78.105.150.0/24 maxlen: 24
78.105.160.0/24 maxlen: 24
78.105.184.0/24 maxlen: 24
78.105.185.0/24 maxlen: 24
78.105.197.0/24 maxlen: 24
78.105.206.0/24 maxlen: 24
188.220.0.0/24 maxlen: 24
188.220.1.0/24 maxlen: 24
188.220.5.0/24 maxlen: 24
188.220.27.0/24 maxlen: 24
188.220.104.0/24 maxlen: 24
188.220.105.0/24 maxlen: 24
188.220.107.0/24 maxlen: 24
188.220.127.0/24 maxlen: 24
188.220.140.0/24 maxlen: 24
188.220.141.0/24 maxlen: 24
188.220.143.0/24 maxlen: 24
188.220.146.0/24 maxlen: 24
188.221.30.0/24 maxlen: 24
188.221.54.0/24 maxlen: 24
188.221.62.0/24 maxlen: 24
188.221.63.0/24 maxlen: 24
188.221.80.0/24 maxlen: 24
188.221.85.0/24 maxlen: 24
188.221.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:30:f5:cf:b1:57:ee:6f:78:b9:a7:b1:fb:d5:4d:1d:35:e4:a8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 22 03:12:56 2026 GMT
Not After : Sep 21 03:17:56 2027 GMT
Subject: CN=557D1A22FA95307A4560F57BCAAE944A3B570B53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:47:48:34:e2:9d:f9:1c:76:99:bc:36:a8:8c:
7e:95:fd:bc:98:99:b9:4c:8b:b1:44:7d:06:94:e4:
84:4b:c3:27:3a:ea:6f:51:2a:94:bf:7a:be:5e:99:
23:80:f4:aa:bf:60:24:12:50:0d:66:1b:d5:36:05:
bf:2c:81:ab:0f:18:92:1d:3a:ba:54:49:6b:b8:8a:
14:db:a6:80:83:60:d5:39:26:50:73:41:f9:c5:52:
cc:aa:d0:d4:40:87:51:5b:fa:66:64:36:98:4b:6b:
e4:65:fb:dd:5b:76:92:b7:87:89:86:e5:a1:92:88:
0c:a4:a7:c7:52:b7:0e:ee:6b:f7:e0:f6:e3:e6:81:
48:ef:e6:cd:8f:ce:03:93:6c:73:31:cd:b9:bb:33:
ec:9c:47:2e:13:f0:28:2f:21:00:b3:8c:57:04:d6:
e1:83:b5:19:b7:ab:32:d3:c7:8f:c7:e4:4e:b5:c4:
cc:60:18:cc:6c:45:8a:0a:fd:3d:bd:83:7f:f6:50:
66:ff:a0:8d:42:b5:66:0e:56:64:1e:59:70:10:9b:
54:76:e3:b9:51:c3:ac:68:19:c3:60:3a:a8:ce:e0:
4e:db:66:08:da:f8:15:f3:9c:84:ce:0c:3c:3c:29:
07:85:30:20:2d:20:8e:13:3a:d6:35:c1:cf:65:b9:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7D:1A:22:FA:95:30:7A:45:60:F5:7B:CA:AE:94:4A:3B:57:0B:53
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.189.0/24
51.194.238.0/23
51.241.105.0/24
51.241.114.0/24
51.241.166.0/24
51.241.211.0/24
51.241.244.0/24
78.105.150.0/24
78.105.160.0/24
78.105.184.0/23
78.105.197.0/24
78.105.206.0/24
188.220.0.0/23
188.220.5.0/24
188.220.27.0/24
188.220.104.0/23
188.220.107.0/24
188.220.127.0/24
188.220.140.0/23
188.220.143.0/24
188.220.146.0/24
188.221.30.0/24
188.221.54.0/24
188.221.62.0/23
188.221.80.0/24
188.221.85.0/24
188.221.213.0/24
Signature Algorithm: sha256WithRSAEncryption
40:ed:1c:23:51:be:0c:42:4c:cd:c5:56:a1:f0:14:81:58:17:
4c:13:92:de:b9:f0:62:40:96:92:91:e3:78:d5:46:f4:2d:f9:
3b:90:31:42:d6:f7:45:48:4e:a2:37:5f:f6:50:62:4c:ef:f1:
15:d2:14:fa:86:d4:6e:74:0c:f3:a4:cc:80:bf:d8:6e:99:38:
9e:0d:de:37:ce:7e:ce:9a:9e:ba:1e:fb:81:fc:66:72:b0:e3:
8a:2b:21:dd:f7:cb:c4:ab:ce:6f:25:2e:6e:17:dc:8a:43:f7:
cc:33:a5:c1:8b:9f:bc:8b:cf:f3:7e:4c:7d:9a:95:fd:3e:2f:
f8:0e:b8:a1:d7:3d:bd:33:3c:6f:ad:f4:b3:fa:cc:4c:77:71:
89:26:50:a4:f6:e3:9a:2f:27:20:2e:55:73:b9:8e:e1:aa:56:
cf:55:c6:f5:5d:43:ce:d3:a4:2c:2d:6c:b4:ba:33:67:11:af:
1f:39:b7:e7:2d:d2:91:91:4b:46:c5:de:b8:19:ea:49:d1:4d:
45:52:93:8a:2e:9b:27:a1:9c:d1:14:30:0b:56:01:09:08:63:
1d:73:71:46:05:14:2c:d6:56:6b:82:93:ad:50:ff:e0:c8:92:
da:4c:6a:bf:05:9a:42:e1:58:35:5d:e1:58:85:5c:9e:46:15:
09:63:2c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:42:10 2026 by rpki-client