Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402402.roa
File: AS402402.roa (raw, json)
Hash identifier: Y+/ZyTTRbTYGjf5vqE/0YnngrgdbCbr3HxsFyPNq6U8=
Subject key identifier: BF:7D:B6:50:58:13:0C:22:BC:7C:F8:63:B8:5B:EC:D6:05:93:C7:74
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 628F189AF9E17A518587B5EA707D46C0156A5641
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402402.roa
Signing time: Wed 11 Nov 2026 07:23:20 +0000
ROA not before: Wed 11 Nov 2026 07:18:20 +0000
ROA not after: Wed 10 Nov 2027 07:23:20 +0000
asID: 402402
IP address blocks: 94.118.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:24:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:8f:18:9a:f9:e1:7a:51:85:87:b5:ea:70:7d:46:c0:15:6a:56:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 11 07:18:20 2026 GMT
Not After : Nov 10 07:23:20 2027 GMT
Subject: CN=BF7DB65058130C22BC7CF863B85BECD60593C774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a4:77:61:ea:64:c2:ee:61:60:4d:21:5b:5b:
66:d6:37:bb:15:3e:78:7d:d8:e1:b1:45:b3:14:6c:
41:ce:15:34:99:ba:e9:3f:03:0e:a7:82:1b:11:93:
25:67:f4:a1:ec:3f:f3:88:b2:82:e6:b3:09:52:7d:
53:03:c4:33:43:8c:98:8f:2f:0c:2f:82:bf:72:83:
82:04:84:c6:91:2a:dd:30:1a:c8:96:ce:10:02:3d:
fe:76:23:e3:5b:b3:8c:3d:18:2e:30:69:9d:5c:fe:
e7:83:d7:2a:fc:71:a2:60:ed:30:c2:ca:61:bf:6a:
05:44:20:91:8a:8d:d7:df:55:7a:1b:dd:5e:4e:f1:
e8:5b:ec:19:5d:63:75:b7:33:7d:a1:67:37:09:4e:
cd:a8:3a:ad:98:41:c4:42:5f:61:4f:3f:1f:47:88:
6c:5b:13:18:47:14:5f:71:3d:d2:d4:73:97:6a:5d:
5b:43:f7:61:30:21:75:9a:70:83:65:91:67:e4:79:
ea:c8:ab:ac:1a:50:c6:a2:30:77:3c:71:71:a8:5f:
cd:a3:87:53:54:a4:06:72:fe:16:1e:ca:49:2d:6a:
bc:48:48:5f:da:82:8b:91:b4:ae:25:0a:21:53:5e:
20:a6:d4:4e:3e:ab:22:79:f9:59:76:44:44:05:65:
29:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7D:B6:50:58:13:0C:22:BC:7C:F8:63:B8:5B:EC:D6:05:93:C7:74
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402402.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.221.0/24
Signature Algorithm: sha256WithRSAEncryption
09:0f:23:5d:35:1c:e5:a8:6d:4f:f6:41:1d:4a:ea:64:34:72:
0c:e3:e1:4f:88:db:05:3b:6d:25:9a:b4:a1:5a:f8:76:42:ee:
fa:e2:5c:9a:c6:80:95:b9:3d:cc:9f:63:cb:47:fa:db:53:88:
82:24:b3:84:4f:48:ef:29:b6:3b:ed:39:3a:f0:f4:15:1c:08:
78:4e:d4:7f:c4:14:73:ad:e7:cc:ed:02:55:7b:61:d8:50:f1:
c6:03:03:82:d3:e1:b7:c2:b5:c8:b4:c0:69:a9:65:c8:79:be:
e7:29:78:a4:77:89:99:e0:88:f2:75:ee:26:a7:64:c5:14:fa:
40:97:c6:a9:8a:b2:84:cc:c2:db:11:38:3f:a9:22:08:6f:ce:
7b:f2:a7:27:c0:45:2e:cc:de:0d:1c:6c:25:a6:45:88:31:0b:
84:06:e6:db:04:a8:de:e8:33:f2:ce:33:f6:cb:de:29:7a:0b:
2a:79:16:d0:66:d6:25:63:95:1e:be:5b:a1:5e:b4:75:a2:b5:
9b:90:7b:1c:9c:cc:81:52:b3:50:57:2b:6b:6b:b1:67:17:07:
84:6f:c5:42:2e:06:d9:18:9e:e7:37:80:ee:d4:a2:41:4e:98:
ad:05:b5:4d:2a:3f:49:7f:c7:e9:9a:ee:5c:ba:4e:ac:0e:40:
77:9b:3d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:40:51 2026 by rpki-client