Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: oq5Dvq5j7ULEG7AFV/rnlrV6OT2AmeRtgarULjrYiwE=
Subject key identifier: EF:49:24:53:5E:FA:8E:E4:E6:6B:CB:52:73:DD:25:9B:7B:55:B4:47
Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Certificate serial: 21D1C4584C82158AE3C74C584AA0766A330A3377
Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402265.roa
Signing time: Thu 24 Sep 2026 02:35:47 +0000
ROA not before: Thu 24 Sep 2026 02:30:47 +0000
ROA not after: Thu 23 Sep 2027 02:35:47 +0000
asID: 402265
IP address blocks: 152.234.128.0/24 maxlen: 24
152.234.129.0/24 maxlen: 24
152.234.131.0/24 maxlen: 24
152.234.132.0/24 maxlen: 24
152.234.138.0/24 maxlen: 24
179.253.32.0/24 maxlen: 24
179.253.33.0/24 maxlen: 24
179.253.34.0/24 maxlen: 24
179.253.35.0/24 maxlen: 24
179.253.36.0/24 maxlen: 24
179.253.37.0/24 maxlen: 24
179.253.38.0/24 maxlen: 24
179.253.39.0/24 maxlen: 24
179.253.40.0/24 maxlen: 24
179.253.42.0/24 maxlen: 24
179.253.62.0/24 maxlen: 24
179.253.63.0/24 maxlen: 24
187.14.128.0/24 maxlen: 24
187.14.129.0/24 maxlen: 24
187.55.0.0/24 maxlen: 24
187.55.1.0/24 maxlen: 24
187.55.2.0/24 maxlen: 24
187.55.3.0/24 maxlen: 24
187.55.4.0/24 maxlen: 24
187.55.5.0/24 maxlen: 24
187.55.6.0/24 maxlen: 24
187.55.14.0/24 maxlen: 24
187.55.15.0/24 maxlen: 24
187.55.16.0/24 maxlen: 24
189.31.0.0/24 maxlen: 24
189.31.1.0/24 maxlen: 24
189.73.32.0/24 maxlen: 24
189.73.33.0/24 maxlen: 24
189.73.34.0/24 maxlen: 24
189.73.35.0/24 maxlen: 24
189.73.36.0/24 maxlen: 24
189.73.37.0/24 maxlen: 24
189.73.38.0/24 maxlen: 24
189.73.39.0/24 maxlen: 24
189.73.40.0/24 maxlen: 24
189.73.41.0/24 maxlen: 24
189.73.42.0/24 maxlen: 24
191.0.80.0/24 maxlen: 24
191.0.94.0/24 maxlen: 24
191.0.95.0/24 maxlen: 24
191.45.33.0/24 maxlen: 24
191.45.35.0/24 maxlen: 24
200.141.48.0/24 maxlen: 24
200.141.49.0/24 maxlen: 24
200.141.50.0/24 maxlen: 24
200.141.51.0/24 maxlen: 24
200.149.188.0/24 maxlen: 24
200.149.191.0/24 maxlen: 24
200.180.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:d1:c4:58:4c:82:15:8a:e3:c7:4c:58:4a:a0:76:6a:33:0a:33:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Validity
Not Before: Sep 24 02:30:47 2026 GMT
Not After : Sep 23 02:35:47 2027 GMT
Subject: CN=EF4924535EFA8EE4E66BCB5273DD259B7B55B447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:0d:5c:92:fb:16:94:58:15:ee:27:c3:bb:
c8:79:ee:ab:20:aa:57:73:5a:15:40:a3:66:0e:af:
45:40:eb:a7:01:cd:0a:2f:81:1f:72:dc:0d:5b:c9:
ce:32:ed:eb:46:fa:b5:1b:1e:0d:6d:e5:a8:80:93:
16:cd:04:cd:f9:17:70:37:1b:55:b4:63:f8:66:d9:
27:3a:3c:9d:7b:07:cb:a4:91:2f:18:73:3f:bd:15:
76:31:94:a1:21:72:bc:40:98:40:98:bd:5e:4a:c6:
9c:55:46:1f:86:60:ea:c2:0f:2b:79:a2:80:c9:78:
e6:bf:1d:95:c0:26:98:70:7d:12:77:e8:1b:78:92:
da:c1:96:d9:c2:f6:e5:d1:41:e7:3b:d8:84:12:b4:
ea:b9:2e:c4:7d:54:05:9d:60:20:e1:5a:11:58:9d:
a1:92:69:fb:d2:b1:67:0c:e8:0b:bb:64:23:21:b0:
65:8a:c3:02:5b:fa:49:29:39:9b:3c:b0:5b:ea:44:
30:69:73:37:b5:88:1b:41:75:d3:71:5e:46:fb:f9:
4d:1f:b1:11:65:3f:ea:df:46:01:5e:d1:96:6c:64:
d7:74:de:70:fd:38:0c:94:ff:71:7c:42:3a:8a:21:
26:ae:9f:14:38:51:27:56:74:b7:a3:34:3e:11:de:
b9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:49:24:53:5E:FA:8E:E4:E6:6B:CB:52:73:DD:25:9B:7B:55:B4:47
X509v3 Authority Key Identifier:
keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.234.128.0/23
152.234.131.0-152.234.132.255
152.234.138.0/24
179.253.32.0-179.253.40.255
179.253.42.0/24
179.253.62.0/23
187.14.128.0/23
187.55.0.0-187.55.6.255
187.55.14.0-187.55.16.255
189.31.0.0/23
189.73.32.0-189.73.42.255
191.0.80.0/24
191.0.94.0/23
191.45.33.0/24
191.45.35.0/24
200.141.48.0/22
200.149.188.0/24
200.149.191.0/24
200.180.184.0/24
Signature Algorithm: sha256WithRSAEncryption
01:48:9b:a6:fa:a0:f0:d7:98:87:90:58:b4:50:10:d5:6d:3a:
0f:73:4c:bd:45:0e:df:5a:80:2b:93:e5:55:2a:49:53:cd:b3:
1e:b1:ee:3e:35:27:2f:4c:d5:37:5d:ee:ef:c0:f5:72:7d:bf:
3b:67:c4:1c:48:cc:ca:24:48:b2:90:57:7b:cb:7e:0a:a9:3d:
ad:0f:b4:82:68:bb:41:3d:f6:1d:8e:09:92:50:77:61:37:bd:
44:0c:54:39:b7:fb:e6:cd:39:39:17:e8:ea:1d:53:4c:28:a6:
b2:9a:2e:b7:4e:f5:6a:8e:b4:00:08:23:21:bd:55:0d:96:f5:
3a:1e:84:7c:c4:10:41:0e:10:76:c2:61:4b:cc:f4:60:0d:1b:
eb:f9:cf:93:56:b7:71:a2:77:5b:72:4f:2c:c8:46:96:20:94:
3f:b4:e1:97:33:18:e1:54:ff:a1:9b:39:e4:21:45:59:82:d3:
63:65:d7:66:f0:18:82:a5:21:c8:45:7b:67:43:0b:70:a7:16:
95:fe:a0:41:54:e3:ca:c9:f3:b0:87:9d:58:b1:f2:35:a3:da:
20:0d:30:66:5c:5f:20:cc:71:c9:90:8a:61:29:06:6a:9c:45:
cd:ad:8c:f0:ef:3a:9a:ed:88:eb:34:0e:67:fa:97:87:b2:f7:
9c:0c:de:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:07:00 2026 by rpki-client