Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402487.roa
File: AS402487.roa (raw, json)
Hash identifier: Rn0RjV9rA3MNABXyLX5rxS+tDmlJfBcJ1EaKGp4Wn5Y=
Subject key identifier: 7D:A2:B7:9F:03:17:5B:19:D7:52:57:C4:57:93:21:5B:1F:34:6C:0F
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1616A443E9B168DBB880C1C3198BA52B67BB30CD
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402487.roa
Signing time: Fri 17 Jul 2026 06:13:26 +0000
ROA not before: Fri 17 Jul 2026 06:08:26 +0000
ROA not after: Fri 16 Jul 2027 06:13:26 +0000
asID: 402487
IP address blocks: 51.146.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:16:a4:43:e9:b1:68:db:b8:80:c1:c3:19:8b:a5:2b:67:bb:30:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 17 06:08:26 2026 GMT
Not After : Jul 16 06:13:26 2027 GMT
Subject: CN=7DA2B79F03175B19D75257C45793215B1F346C0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:46:55:be:0c:51:e7:1d:4a:ba:ae:f5:e6:7f:
3f:a5:b6:74:df:2e:d0:08:21:e8:d5:19:8f:29:c1:
59:28:c0:bb:09:1d:87:8a:46:48:6f:66:04:a3:19:
24:01:ee:1e:d0:a8:13:d5:f3:4c:67:4d:20:1f:e1:
64:5c:c8:35:28:53:3a:90:ec:78:9f:72:df:ad:86:
19:fb:25:db:fd:e9:18:9b:3b:92:35:31:8f:ad:48:
4a:fb:98:db:14:04:aa:66:6c:ab:de:9c:a9:cf:05:
14:76:06:8e:fa:84:43:13:32:70:df:1a:87:1c:f7:
e9:b0:82:5f:4a:d6:5e:68:c3:da:94:8d:03:27:7d:
8c:8e:9f:ca:41:89:91:f5:ca:a8:25:9e:4e:3b:64:
e4:a1:71:32:46:fa:25:c4:e1:ab:9e:48:a9:93:e9:
87:df:3d:a8:36:d7:42:c8:35:d2:56:12:89:3e:17:
00:ad:12:62:71:c4:30:15:6c:d8:a9:cf:fa:ea:a7:
b9:3a:62:f9:73:a2:32:08:ab:ca:14:3f:e3:70:58:
44:28:a1:d4:46:18:e0:c9:2d:28:e2:9a:90:d9:7f:
03:2f:7d:ad:51:71:da:d0:da:90:ab:c3:e8:f9:52:
97:e2:d2:bf:54:40:3d:a4:6c:12:0a:50:98:52:d1:
f1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A2:B7:9F:03:17:5B:19:D7:52:57:C4:57:93:21:5B:1F:34:6C:0F
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402487.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.6.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:b2:b8:90:98:67:4c:f3:f5:17:c1:d7:c8:61:e7:f4:b1:21:
43:48:39:38:fd:28:d1:72:9a:a3:df:d0:14:f0:96:c8:9c:ea:
04:e7:4e:4d:c6:dd:c8:24:a8:d0:47:51:fc:dd:22:2e:07:76:
90:80:cc:1b:b9:a4:ff:43:62:0f:82:ca:7b:6f:82:53:40:0a:
c4:c1:9c:70:a6:6d:de:2d:2f:45:f2:ae:eb:50:6a:22:36:bc:
38:be:49:29:d9:a6:c0:af:30:7e:fd:89:5e:4a:6f:48:4a:00:
f8:ee:45:ce:2e:f9:f7:e8:74:eb:cd:f8:a8:1e:b8:28:9b:58:
73:a4:3a:05:ca:6c:05:d7:20:52:24:58:5c:14:f8:f3:e0:02:
df:60:a4:98:ae:a0:c9:78:96:7c:f9:cb:42:ba:ce:64:e1:e0:
6a:0f:52:d3:7e:f7:f6:04:d3:12:89:dd:92:a6:d0:87:6d:7a:
7a:ed:f6:9d:ad:3f:6f:66:a2:23:39:86:5a:cf:bd:db:c2:7c:
4b:36:0c:29:cb:da:f3:64:6d:5d:a9:6d:d2:7a:00:73:08:c0:
35:92:23:10:7b:c5:76:37:a1:a0:68:b2:51:42:1d:cc:fa:65:
16:04:96:94:f7:db:98:ed:e5:4b:fe:b7:1f:a2:f9:3c:b4:0c:
80:a2:81:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:06:28 2026 by rpki-client