Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402671.roa
File: AS402671.roa (raw, json)
Hash identifier: clUWZ8KmDLo2DJ9W+ve456nHX+76lZlKKXRqga8JmIo=
Subject key identifier: 7C:09:97:5A:5F:35:1B:19:C5:41:CC:D3:9C:4D:53:54:B8:BB:6C:F3
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1AEE1D238C2253AFB4DA808684D61028F027EF72
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402671.roa
Signing time: Mon 21 Sep 2026 12:29:38 +0000
ROA not before: Mon 21 Sep 2026 12:24:38 +0000
ROA not after: Mon 20 Sep 2027 12:29:38 +0000
asID: 402671
IP address blocks: 94.118.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ee:1d:23:8c:22:53:af:b4:da:80:86:84:d6:10:28:f0:27:ef:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 21 12:24:38 2026 GMT
Not After : Sep 20 12:29:38 2027 GMT
Subject: CN=7C09975A5F351B19C541CCD39C4D5354B8BB6CF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c4:6d:71:ae:86:ef:22:59:d9:01:b2:2d:b2:
f6:d9:33:9d:ed:00:08:b3:75:22:ea:72:ce:09:9c:
ff:46:d3:7b:8c:cb:de:78:1f:7f:28:3d:d0:ab:b0:
08:f1:e1:dc:fa:72:9a:6d:43:4a:65:7c:56:f1:15:
31:89:12:9a:91:35:dd:02:df:7e:8e:c2:d3:01:1f:
42:18:71:57:9a:f6:fd:af:01:c4:55:f9:27:b6:e7:
af:c1:bc:b3:1e:5c:79:2f:54:88:b9:ea:25:21:a0:
99:64:e4:b3:aa:9f:b8:99:01:40:3b:ed:83:6c:38:
37:f3:d0:7f:5a:bc:10:1d:b2:73:87:70:46:fc:3c:
81:ef:7e:de:b0:08:26:24:b2:d4:62:44:3c:6a:1d:
9b:e1:83:5b:0f:a1:cd:bf:64:d3:50:17:9d:07:52:
ca:77:72:f5:68:e0:b0:52:10:01:b3:cd:69:d3:10:
60:44:c4:55:55:cc:2d:b8:c0:72:d6:03:20:4f:16:
b0:69:b0:d6:93:50:34:86:96:b6:ab:7b:b3:97:00:
4d:3d:c7:ed:ef:5d:de:8a:5f:f0:5a:06:44:06:88:
b4:7a:f5:8c:d8:fe:af:1a:fb:7f:62:39:1c:9a:cd:
ef:c4:3f:49:a0:28:a5:20:b2:e1:16:69:2e:b2:7e:
c4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:09:97:5A:5F:35:1B:19:C5:41:CC:D3:9C:4D:53:54:B8:BB:6C:F3
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402671.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.56.0/24
Signature Algorithm: sha256WithRSAEncryption
14:94:a6:15:02:2d:44:e3:3c:d2:13:a4:55:7d:df:6b:11:5d:
fa:9b:ce:ea:a1:b5:f2:5b:73:b1:c6:5e:4e:5d:67:fc:cf:a0:
b9:ee:c6:38:f1:5d:8c:12:22:21:a2:fe:2f:4f:0f:03:18:6e:
0d:76:57:74:25:1b:6c:a1:80:7f:e2:c0:a9:16:20:78:50:22:
17:c2:e6:eb:20:a9:84:37:31:2f:e4:53:8e:04:b0:30:1e:6c:
04:f7:57:df:68:7b:3c:1e:50:e7:51:a3:75:0f:37:76:d9:99:
65:d5:48:8f:89:a7:11:b3:83:e6:80:d7:d5:bc:aa:e8:9c:14:
c9:ee:7b:ee:19:63:74:c9:2f:44:18:95:95:ab:0a:1f:11:04:
26:51:a2:bf:05:5d:19:63:39:c1:2d:c5:73:87:0a:4f:19:d6:
a0:2e:93:15:9a:2d:dd:c5:29:d7:06:f0:91:38:65:b7:31:41:
79:17:43:e2:bb:91:b7:51:ef:33:8e:15:ca:e8:46:e9:e4:0d:
03:87:65:2f:1d:bd:1e:34:3b:4c:48:fe:ec:c3:c7:f9:07:33:
34:dd:4a:e3:58:7b:a4:10:9d:5e:88:ac:18:d9:bb:96:ba:5f:
54:b4:5b:3d:b7:c5:a4:a6:6a:61:7f:12:5e:f6:89:7d:a2:9b:
4b:89:92:78
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUGu4dI4wiU6+02oCGhNYQKPAn73IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA5MjExMjI0MzhaFw0yNzA5MjAxMjI5MzhaMDMxMTAvBgNV
BAMTKDdDMDk5NzVBNUYzNTFCMTlDNTQxQ0NEMzlDNEQ1MzU0QjhCQjZDRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVxG1xrobvIlnZAbItsvbZM53t
AAizdSLqcs4JnP9G03uMy954H38oPdCrsAjx4dz6cpptQ0plfFbxFTGJEpqRNd0C
336OwtMBH0IYcVea9v2vAcRV+Se256/BvLMeXHkvVIi56iUhoJlk5LOqn7iZAUA7
7YNsODfz0H9avBAdsnOHcEb8PIHvft6wCCYkstRiRDxqHZvhg1sPoc2/ZNNQF50H
Usp3cvVo4LBSEAGzzWnTEGBExFVVzC24wHLWAyBPFrBpsNaTUDSGlrare7OXAE09
x+3vXd6KX/BaBkQGiLR69YzY/q8a+39iORyaze/EP0mgKKUgsuEWaS6yfsRpAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUfAmXWl81GxnFQczTnE1TVLi7bPMwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTNDAyNjcxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXnY4
MA0GCSqGSIb3DQEBCwUAA4IBAQAUlKYVAi1E4zzSE6RVfd9rEV36m87qobXyW3Ox
xl5OXWf8z6C57sY48V2MEiIhov4vTw8DGG4Ndld0JRtsoYB/4sCpFiB4UCIXwubr
IKmENzEv5FOOBLAwHmwE91ffaHs8HlDnUaN1Dzd22Zll1UiPiacRs4PmgNfVvKro
nBTJ7nvuGWN0yS9EGJWVqwofEQQmUaK/BV0ZYznBLcVzhwpPGdagLpMVmi3dxSnX
BvCROGW3MUF5F0Piu5G3Ue8zjhXK6Ebp5A0Dh2UvHb0eNDtMSP7sw8f5BzM03Urj
WHukEJ1eiKwY2buWul9UtFs9t8WkpmphfxJe9ol9optLiZJ4
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:49:13 2026 by rpki-client