Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402976.roa
File: AS402976.roa (raw, json)
Hash identifier: WR7BH2Kp50lgoO6jUZQ+BXbWrIkjHb5fSAiFWhNq4js=
Subject key identifier: 4D:21:11:E5:7E:9A:B4:B8:18:BA:96:55:EE:9E:11:14:1A:6A:00:1E
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4FCAAE5A0B3745FF235E4B1A159D6105B4E487F4
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402976.roa
Signing time: Mon 09 Nov 2026 00:05:49 +0000
ROA not before: Mon 09 Nov 2026 00:00:49 +0000
ROA not after: Mon 08 Nov 2027 00:05:49 +0000
asID: 402976
IP address blocks: 94.118.20.0/24 maxlen: 24
188.220.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ca:ae:5a:0b:37:45:ff:23:5e:4b:1a:15:9d:61:05:b4:e4:87:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 9 00:00:49 2026 GMT
Not After : Nov 8 00:05:49 2027 GMT
Subject: CN=4D2111E57E9AB4B818BA9655EE9E11141A6A001E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2a:26:3a:a9:81:d3:cb:8a:0a:0f:ce:0a:00:
2e:bd:51:fc:20:2f:d3:50:b5:de:96:64:30:ce:27:
aa:71:b9:79:4a:91:06:e8:75:9a:31:4a:04:82:14:
56:1e:c1:ed:ce:ae:e4:a5:31:08:51:88:09:f0:68:
ed:0a:1a:2a:49:31:ce:ed:d4:08:95:dc:6c:db:c8:
c5:53:aa:f3:d5:af:eb:3c:53:db:b1:b9:bb:8a:f1:
77:6c:f9:44:a8:e5:cf:51:5b:a9:18:d3:1f:0e:73:
94:7d:cd:cf:b7:9f:a1:a8:71:cf:74:a3:38:41:8d:
01:be:fc:0c:5e:e1:d8:0d:44:94:46:66:f4:42:a0:
81:12:79:b8:1c:df:8f:f5:3f:c7:55:71:21:15:f2:
45:24:12:da:20:39:6b:ee:62:ce:4a:96:ef:04:bc:
d9:3b:75:33:d4:37:61:22:77:29:05:21:6c:39:44:
f2:90:de:8c:3e:90:43:dc:70:2d:b9:8e:fc:b5:4d:
5b:86:59:46:4f:1f:95:c0:c1:d7:7f:b1:76:e4:40:
cd:f1:a4:0e:3f:42:6d:a4:ab:dc:d7:16:f6:61:28:
7b:1a:7b:59:cb:f2:0d:e5:16:c0:44:e8:54:ed:61:
16:cc:d9:3e:4b:e5:2e:35:5c:e2:ec:c7:21:51:97:
f2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:21:11:E5:7E:9A:B4:B8:18:BA:96:55:EE:9E:11:14:1A:6A:00:1E
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402976.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.20.0/24
188.220.215.0/24
Signature Algorithm: sha256WithRSAEncryption
27:45:d4:52:16:50:11:d9:bb:1f:24:fc:c4:ff:e5:11:71:84:
ac:21:c0:2b:fd:04:2b:e0:8e:34:e1:b9:3c:00:1d:8c:bc:4e:
f7:6f:45:f1:59:29:70:89:40:b7:75:d8:f5:cd:99:65:20:63:
c9:8e:e8:b3:4e:e0:bd:92:f1:20:71:46:d1:d0:d0:57:3e:69:
52:62:83:4f:a7:b4:fc:ea:68:7d:c3:4e:ba:97:23:ff:ea:fe:
05:8a:9f:bb:46:54:07:b4:d1:a2:98:03:01:7c:ec:cd:95:62:
5c:1e:7c:4e:82:6d:ca:dd:61:e3:06:0a:48:47:81:cf:95:6c:
f6:17:13:a3:86:d1:41:1d:dc:52:24:77:b6:09:1a:9e:09:4e:
89:95:9a:bf:76:36:2d:fd:3a:1a:1e:14:df:a9:ec:66:ed:91:
d1:e7:57:44:a6:52:c4:f7:3e:0f:5f:31:0c:cb:0f:b2:37:b4:
61:bd:fb:3a:9f:ff:d1:86:4b:97:41:0e:ec:74:05:3f:b8:64:
50:ea:55:2e:d0:68:c3:33:51:f1:2b:18:81:7c:ff:7c:79:f5:
ee:36:ad:7e:a6:8c:97:81:c1:75:0f:b8:34:0b:ff:b2:2c:ba:
5c:52:0c:4c:a9:78:b5:81:49:02:1e:d1:06:0a:ac:39:70:30:
0d:96:cc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:42:54 2026 by rpki-client