Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402671.roa
File: AS402671.roa (raw, json)
Hash identifier: WWUWnARaMEiJjBozdZEglAPN3N3vd/laUQLRo50jDrA=
Subject key identifier: EF:81:7A:E7:A4:85:5F:12:62:12:71:06:89:1F:58:15:2E:6A:33:98
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5FC33A6A4760A9DCD7EB01D301BEB79E0B7DD6D2
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402671.roa
Signing time: Wed 11 Nov 2026 20:52:55 +0000
ROA not before: Wed 11 Nov 2026 20:47:55 +0000
ROA not after: Wed 10 Nov 2027 20:52:55 +0000
asID: 402671
IP address blocks: 94.118.147.0/24 maxlen: 24
94.118.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:49:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:c3:3a:6a:47:60:a9:dc:d7:eb:01:d3:01:be:b7:9e:0b:7d:d6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 11 20:47:55 2026 GMT
Not After : Nov 10 20:52:55 2027 GMT
Subject: CN=EF817AE7A4855F1262127106891F58152E6A3398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:a8:dd:0b:c4:ef:2a:e3:6e:bf:d3:0e:0f:
ba:57:04:05:1b:f9:f5:30:58:85:60:a5:d3:ce:40:
7c:3d:12:c1:9a:11:65:22:48:7a:87:01:a8:b6:4f:
17:e5:58:b6:76:6d:50:6a:c1:f4:39:4f:71:5a:cb:
c6:78:59:6c:00:ca:51:b6:df:3c:9a:f4:1a:ac:d6:
56:8c:64:ff:ff:4c:23:77:12:56:06:34:ce:6c:9a:
65:31:6a:f5:55:31:22:e2:a7:f5:1b:2a:25:48:31:
e1:1a:e5:70:28:f4:ea:9c:00:32:77:7d:a5:9f:83:
42:3a:a3:1d:d4:5d:4d:c0:ec:df:81:2d:47:56:c2:
7b:cb:b1:f6:52:a0:d5:e7:8f:83:51:55:a4:80:14:
b1:05:2a:e9:69:93:88:69:86:67:96:80:3c:cd:7a:
2d:6a:e6:56:c1:f9:79:12:bb:cf:c9:17:21:e2:7d:
fe:41:ac:47:f7:f6:ee:19:12:cf:a0:6a:aa:e6:83:
9f:64:a7:ce:3e:16:29:f7:97:cd:f1:5c:c8:63:59:
15:ac:d0:a0:8a:1b:3a:8e:97:62:a1:6c:fb:74:db:
3b:ca:9f:2e:ac:cc:99:fd:09:52:a2:51:fb:fe:6a:
d6:2c:1a:fc:8c:f8:7e:54:2b:be:7f:e9:42:62:57:
a8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:81:7A:E7:A4:85:5F:12:62:12:71:06:89:1F:58:15:2E:6A:33:98
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402671.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.147.0/24
94.118.204.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:a5:0d:a2:2b:4c:45:26:2a:73:0b:83:dd:a9:47:29:0e:11:
07:5f:cb:cd:56:09:3e:89:7f:07:a6:cf:ee:52:91:ea:05:10:
4b:b9:f1:fa:ab:bc:df:f2:1d:1d:d2:d1:25:7d:74:0d:f6:5b:
84:da:c8:a3:ac:31:59:eb:4d:ee:d4:88:1b:2e:05:9a:96:0e:
09:d8:53:33:42:6a:cb:be:f4:10:db:ef:47:b1:3b:7a:a2:ea:
29:69:89:73:05:84:ec:fc:53:58:dd:88:4e:62:5c:7f:e1:51:
3b:e0:b1:35:19:c9:7d:4e:5d:e4:3d:fc:bc:1a:ed:65:09:fb:
10:58:10:39:37:dd:82:2a:b8:46:53:e2:0d:da:38:ba:4f:c3:
b3:1a:d6:e6:60:31:1c:0e:31:4a:81:6f:18:5b:8c:f7:dd:23:
90:c8:34:be:15:dd:4a:fe:f5:b7:28:05:5c:5e:40:85:57:db:
cd:5f:60:ba:0e:b0:8d:0c:3c:2c:a0:fb:fb:45:68:fe:1e:5c:
da:2b:74:67:64:e8:ae:07:56:1b:b6:9c:d0:3a:f6:37:6a:b0:
a2:ab:7a:62:06:bd:54:4e:e7:52:7f:57:08:19:0b:4c:9e:00:
ef:b6:fd:62:61:27:10:63:e6:f7:ac:95:43:cb:0b:aa:0f:d5:
97:9d:96:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:56:28 2026 by rpki-client