Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402276.roa
File: AS402276.roa (raw, json)
Hash identifier: AW+o1YAnRni915Po+y5x7xWe7e2tFPH76s/6DjsGjfc=
Subject key identifier: 40:F7:31:FC:AF:85:C9:65:1A:50:1E:9D:3C:3E:DF:4A:96:2E:42:A8
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 33831C796AC88E5DDEA5BADF4DCFD2383AD70F7F
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402276.roa
Signing time: Fri 08 May 2026 14:13:44 +0000
ROA not before: Fri 08 May 2026 14:08:44 +0000
ROA not after: Fri 07 May 2027 14:13:44 +0000
asID: 402276
IP address blocks: 51.194.208.0/24 maxlen: 24
51.194.254.0/24 maxlen: 24
78.105.200.0/24 maxlen: 24
78.105.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:83:1c:79:6a:c8:8e:5d:de:a5:ba:df:4d:cf:d2:38:3a:d7:0f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 8 14:08:44 2026 GMT
Not After : May 7 14:13:44 2027 GMT
Subject: CN=40F731FCAF85C9651A501E9D3C3EDF4A962E42A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3e:93:06:7a:df:9b:c2:49:28:72:1a:61:ef:
d2:6b:8d:b3:c9:68:ef:56:06:18:e1:2e:0d:68:51:
c5:3b:3c:15:d3:e0:a0:39:27:09:a5:a5:d7:48:dd:
8f:49:c0:bd:5d:25:bf:07:17:30:f1:af:70:f2:0e:
a8:84:85:fd:a2:df:09:f0:fa:d0:07:a0:03:6d:07:
88:4c:c0:de:9f:81:44:b7:83:d2:0c:79:34:e0:91:
8e:c4:ac:45:c7:38:47:7d:45:21:7e:4d:26:2a:ad:
08:0d:4d:80:e8:f9:66:28:5f:37:ad:48:ff:82:97:
7e:b6:91:be:d7:d0:83:40:ed:9c:7b:9d:17:6e:e2:
82:ab:fb:f3:75:39:5a:c8:eb:84:63:f4:80:ff:b9:
d0:0d:9a:2a:76:7c:d5:fa:dd:58:6b:3b:90:56:ca:
28:93:8c:e0:4b:53:7f:3f:3a:d1:da:dd:3b:f7:14:
91:1e:83:95:dd:c8:bd:8d:ae:b1:75:20:d5:27:0d:
d8:c4:da:7f:65:f9:7a:b2:d1:2e:80:78:ab:6f:2f:
2f:a2:85:b1:1a:7d:ac:76:b8:1b:fa:b2:c3:0e:83:
d2:22:e0:f3:c6:21:91:cd:38:70:00:c2:0b:b7:a2:
87:ed:bb:9b:4b:a0:27:4f:3f:f6:61:63:ed:83:42:
d9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F7:31:FC:AF:85:C9:65:1A:50:1E:9D:3C:3E:DF:4A:96:2E:42:A8
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.208.0/24
51.194.254.0/24
78.105.200.0/24
78.105.242.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:c5:b4:f4:9b:7e:cf:80:76:53:04:13:d5:5a:f5:07:4a:8b:
0a:5c:f4:4e:26:35:6c:33:d6:d6:d0:00:24:f4:b8:1d:c2:2d:
0d:c6:b8:ed:a2:e0:51:e5:7b:81:c0:cc:14:89:33:b8:1f:02:
31:24:74:c5:cf:a8:e1:28:bd:49:7c:d9:be:71:84:9e:9d:3c:
0a:d3:39:45:93:c0:09:29:9c:1d:e9:9d:81:7d:cf:f5:8f:45:
e0:9c:c2:e3:50:50:9a:78:9d:cb:ed:79:5b:9d:34:42:4d:27:
04:da:52:8e:d2:23:53:43:71:ab:cb:d9:fa:cf:f3:d0:0f:17:
2e:2e:9c:a4:36:9d:cc:52:4e:88:52:bb:b3:9b:c4:4e:51:4b:
b9:cb:ba:a3:ac:e5:b5:53:46:1c:a6:5c:82:02:53:11:ba:f1:
d2:62:d1:f3:c3:08:00:60:ea:9a:2b:16:91:de:06:50:57:19:
f8:9e:46:5b:72:67:31:9f:af:59:e0:6c:18:e6:70:26:04:98:
e3:5a:ad:9a:ea:d4:eb:98:6c:d0:a4:f9:f8:3c:cd:1e:7c:bd:
2c:0c:51:38:d3:a1:2f:94:0a:fc:d3:d8:86:51:01:8d:bb:68:
d5:6c:8b:b4:8f:55:dc:49:4c:1c:b4:5b:97:45:76:4e:b9:c4:
46:05:ed:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:21 2026 by rpki-client