Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402475.roa
File: AS402475.roa (raw, json)
Hash identifier: Ksrsd00kKkANXXCExMSz60Ijai+m6mahd4UO3rCg6vE=
Subject key identifier: 7D:ED:7E:61:89:D3:2A:62:EA:CD:B7:7C:35:BE:44:26:01:29:C4:C0
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6EE6FA2CDF3E0851120F268F26F2298145B041AE
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402475.roa
Signing time: Fri 06 Nov 2026 10:21:03 +0000
ROA not before: Fri 06 Nov 2026 10:16:03 +0000
ROA not after: Fri 05 Nov 2027 10:21:03 +0000
asID: 402475
IP address blocks: 94.118.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:e6:fa:2c:df:3e:08:51:12:0f:26:8f:26:f2:29:81:45:b0:41:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 6 10:16:03 2026 GMT
Not After : Nov 5 10:21:03 2027 GMT
Subject: CN=7DED7E6189D32A62EACDB77C35BE44260129C4C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2a:2f:37:50:c6:1e:43:5e:02:27:7a:ae:3b:
8d:a8:ac:ce:d7:19:0b:ac:9c:f4:df:26:81:f7:49:
2f:f0:b4:80:f4:a6:31:88:59:b9:26:2d:f7:d7:21:
1e:f0:3f:cd:55:a9:99:9f:b7:ea:69:d1:c2:69:4a:
79:bc:4a:cf:7b:b8:7d:47:7a:c3:ae:aa:18:1b:d5:
eb:0a:2e:b1:27:34:09:d0:15:8f:77:9c:d9:48:cb:
41:b2:85:26:0a:cd:46:f7:7c:ee:13:7d:2d:d3:a1:
46:f5:1f:fd:e1:e4:f7:85:a1:1a:8f:d9:cc:b2:fe:
09:05:1b:a9:a9:11:f3:84:51:db:53:80:6a:5a:94:
c4:cd:01:a0:32:27:51:21:6d:d7:ce:0f:43:4c:7c:
72:dc:b3:38:cd:f6:88:ee:84:28:10:8d:34:15:ba:
0c:81:71:de:29:6a:d7:0b:d3:d2:d6:bc:64:ff:5a:
f0:64:f6:5a:8f:09:bd:10:e8:37:61:dd:5c:f8:bb:
7f:15:e3:3f:c5:03:5a:3b:c0:cb:80:08:3c:1f:3f:
17:ed:9a:3e:f1:63:0d:39:f2:41:46:cf:86:cb:68:
3d:06:ee:2c:2e:24:e2:85:3c:f1:d8:3f:34:7a:50:
f7:3e:08:74:e2:89:16:a5:bc:be:c4:15:2f:2f:8c:
29:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:ED:7E:61:89:D3:2A:62:EA:CD:B7:7C:35:BE:44:26:01:29:C4:C0
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402475.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.201.0/24
Signature Algorithm: sha256WithRSAEncryption
09:d6:e7:af:7e:e8:12:82:e2:22:31:c7:db:e7:a6:65:93:a0:
4c:f3:35:db:fe:af:32:1a:df:9b:99:8a:ed:f1:c7:b9:4c:ee:
75:b8:72:98:89:4b:24:3b:fb:5d:ac:5c:c5:71:67:65:f0:60:
94:1a:e4:96:96:ee:56:f1:5d:06:08:20:45:fa:94:98:c5:9a:
e8:ee:a4:80:f2:3a:74:1e:04:80:fe:0d:80:76:89:e0:f5:df:
3e:8d:0c:7b:f4:33:da:73:b4:55:9e:0f:95:35:7c:c9:88:69:
eb:5f:d6:68:17:0b:1a:cb:01:77:95:db:99:66:4b:91:55:1c:
59:e9:29:4d:5b:6b:a5:12:43:11:9c:90:70:5d:b0:08:d0:56:
ea:30:4d:3c:f1:60:fb:e4:af:09:9b:ba:63:48:39:fb:15:55:
30:91:e3:ea:f0:a3:52:a9:e5:8f:61:a6:22:a2:16:3c:87:f2:
67:82:db:43:48:0c:68:b9:7e:65:d7:28:f7:3e:c2:30:32:8e:
c7:57:c3:40:61:1c:1c:fc:9b:7d:a5:b6:6c:af:69:a6:89:4a:
74:7b:e4:57:30:92:d4:62:62:1e:e8:f7:64:14:75:75:a8:bb:
c0:7c:73:8c:98:14:fd:b1:ee:1a:d5:a5:1f:90:4b:f8:9d:5a:
e7:b4:bf:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 07:38:16 2026 by rpki-client