Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402899.roa
File: AS402899.roa (raw, json)
Hash identifier: X9k2p82jYkBHGzJgnKEfNVves1CMTdynXcSIOsIQyX8=
Subject key identifier: 83:C2:A3:22:94:56:5E:D5:F6:58:37:FE:31:55:8B:0C:F7:82:D8:5F
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 667F1AF8A918649EBC996DE8F25162C109E4D2C4
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402899.roa
Signing time: Mon 21 Sep 2026 08:21:17 +0000
ROA not before: Mon 21 Sep 2026 08:16:17 +0000
ROA not after: Mon 20 Sep 2027 08:21:17 +0000
asID: 402899
IP address blocks: 94.118.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:7f:1a:f8:a9:18:64:9e:bc:99:6d:e8:f2:51:62:c1:09:e4:d2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 21 08:16:17 2026 GMT
Not After : Sep 20 08:21:17 2027 GMT
Subject: CN=83C2A32294565ED5F65837FE31558B0CF782D85F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6d:df:07:e2:37:e2:b1:3c:59:2a:52:2c:ad:
9d:d2:37:40:ee:fb:79:d1:09:ea:49:f1:03:a4:3a:
3d:9e:89:9a:8f:b3:2b:56:2f:f8:ea:d7:fa:c8:62:
7e:a5:30:4f:7a:20:2f:26:61:34:3d:9b:cc:27:88:
bf:8c:56:27:8e:90:f1:4a:3c:7e:db:57:fc:68:cc:
53:1f:90:a6:2a:6c:60:89:40:49:9a:db:09:45:91:
e4:d7:ee:6c:77:ef:bb:29:15:a3:e9:db:b4:7f:b0:
2b:e2:32:18:55:1e:53:68:38:c2:f8:05:79:d8:c0:
2d:5d:ee:19:5c:1b:7f:91:f7:98:9e:66:ee:de:02:
ed:87:62:a6:b2:de:f3:ff:6f:38:be:34:60:21:85:
eb:15:e6:10:b6:46:cb:b0:c2:d0:0c:48:32:b4:4c:
80:e1:a8:b3:fc:0d:6b:f3:4b:1e:a3:75:10:dc:cc:
9f:31:7d:e5:90:01:85:e2:d9:c8:a7:58:f4:42:9d:
9d:65:e3:7c:8c:ef:90:e5:23:f6:63:2a:4d:11:13:
d0:fc:4b:ab:49:2c:36:e4:f9:ba:d9:40:72:0a:50:
57:f3:aa:d4:cc:a1:eb:7d:9e:14:cd:33:b0:50:eb:
ae:e6:31:91:b0:81:66:1a:5e:d3:4b:a7:4a:1f:b8:
c1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C2:A3:22:94:56:5E:D5:F6:58:37:FE:31:55:8B:0C:F7:82:D8:5F
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402899.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.33.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:b3:78:d5:60:f5:ad:85:ae:99:ae:f5:01:b3:24:78:d5:4c:
6a:ec:97:72:99:25:13:ee:6c:96:35:e4:ff:06:12:40:27:b8:
71:1c:ea:4d:f1:ef:f1:22:f2:a5:b5:49:1f:bb:73:05:68:d4:
46:28:8e:8c:7f:60:a0:04:dd:79:ca:01:33:04:70:b7:13:40:
a7:ff:12:cc:ce:55:f2:d4:de:23:ca:f0:9a:f5:a3:86:68:fc:
45:da:48:c6:0f:91:a4:b9:e9:72:c3:4d:1c:53:25:e1:d9:5d:
31:dc:73:10:7d:80:b6:e4:f8:9c:6b:e4:60:9b:7f:68:13:f7:
e6:b2:77:5c:99:c2:7c:f7:6b:9f:92:6f:68:5e:c1:13:3e:19:
7c:49:5e:ae:4f:b6:30:c1:e9:c0:21:8e:e0:8c:f7:53:9a:35:
23:5a:a1:4d:9b:48:d9:66:26:9b:9c:08:82:71:90:25:97:99:
fc:8a:71:ee:09:d2:46:23:11:4f:d0:57:20:d9:93:b1:d4:1e:
25:c4:18:a2:73:a7:45:c2:07:08:bc:3c:29:60:82:88:84:c4:
8c:10:7e:6f:36:f0:e3:e2:d4:58:0c:fa:6e:59:c9:d2:94:47:
39:ad:f5:f5:d8:1c:7b:5d:3a:3e:57:d9:6c:ee:9f:dc:5e:22:
36:2a:a8:e8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUZn8a+KkYZJ68mW3o8lFiwQnk0sQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA5MjEwODE2MTdaFw0yNzA5MjAwODIxMTdaMDMxMTAvBgNV
BAMTKDgzQzJBMzIyOTQ1NjVFRDVGNjU4MzdGRTMxNTU4QjBDRjc4MkQ4NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTbd8H4jfisTxZKlIsrZ3SN0Du
+3nRCepJ8QOkOj2eiZqPsytWL/jq1/rIYn6lME96IC8mYTQ9m8wniL+MVieOkPFK
PH7bV/xozFMfkKYqbGCJQEma2wlFkeTX7mx377spFaPp27R/sCviMhhVHlNoOML4
BXnYwC1d7hlcG3+R95ieZu7eAu2HYqay3vP/bzi+NGAhhesV5hC2RsuwwtAMSDK0
TIDhqLP8DWvzSx6jdRDczJ8xfeWQAYXi2cinWPRCnZ1l43yM75DlI/ZjKk0RE9D8
S6tJLDbk+brZQHIKUFfzqtTMoet9nhTNM7BQ667mMZGwgWYaXtNLp0ofuMHtAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUg8KjIpRWXtX2WDf+MVWLDPeC2F8wHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTNDAyODk5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXnYh
MA0GCSqGSIb3DQEBCwUAA4IBAQCMs3jVYPWtha6ZrvUBsyR41Uxq7JdymSUT7myW
NeT/BhJAJ7hxHOpN8e/xIvKltUkfu3MFaNRGKI6Mf2CgBN15ygEzBHC3E0Cn/xLM
zlXy1N4jyvCa9aOGaPxF2kjGD5Gkuelyw00cUyXh2V0x3HMQfYC25Pica+Rgm39o
E/fmsndcmcJ892ufkm9oXsETPhl8SV6uT7YwwenAIY7gjPdTmjUjWqFNm0jZZiab
nAiCcZAll5n8inHuCdJGIxFP0Fcg2ZOx1B4lxBiic6dFwgcIvDwpYIKIhMSMEH5v
NvDj4tRYDPpuWcnSlEc5rfX12Bx7XTo+V9ls7p/cXiI2Kqjo
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:49:11 2026 by rpki-client