Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS402899.roa
File: AS402899.roa (raw, json)
Hash identifier: cV/VVnLtbFlxwSBQnMDExERDzcmFdi0yI47FP3HZ+fg=
Subject key identifier: 25:31:BC:7A:48:D8:65:5A:9C:FF:FA:D7:B2:15:B5:DB:F0:C4:4A:ED
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 766797F30FB1AF8F1AE76F3147574D0A4A6B5438
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS402899.roa
Signing time: Thu 01 Oct 2026 10:41:12 +0000
ROA not before: Thu 01 Oct 2026 10:36:12 +0000
ROA not after: Thu 30 Sep 2027 10:41:12 +0000
asID: 402899
IP address blocks: 212.74.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:67:97:f3:0f:b1:af:8f:1a:e7:6f:31:47:57:4d:0a:4a:6b:54:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Oct 1 10:36:12 2026 GMT
Not After : Sep 30 10:41:12 2027 GMT
Subject: CN=2531BC7A48D8655A9CFFFAD7B215B5DBF0C44AED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:98:e6:cc:7a:67:84:60:da:c9:4b:3e:0b:90:
08:a5:f6:88:b7:4b:70:ed:8b:aa:03:37:af:20:20:
ed:82:fc:54:38:24:75:d0:db:72:df:31:42:1c:64:
04:42:0b:25:1b:84:0d:79:5e:30:0e:03:fd:be:e8:
67:98:64:f0:4d:02:29:54:81:52:3d:f6:22:92:30:
a1:63:e7:0c:10:c0:4a:22:99:14:d7:22:7c:af:e2:
73:2b:0d:a6:b8:d2:45:77:a9:ab:7f:71:a5:fa:1d:
80:9f:2c:ed:ba:25:57:e6:ff:2e:0f:9a:12:d2:36:
52:87:8c:63:40:eb:fc:d6:68:95:63:42:a2:b7:76:
07:63:9a:17:26:5d:c2:ef:3a:7b:08:d7:94:1a:b9:
9d:56:40:d5:76:77:8d:6f:c3:f7:a6:d7:45:e3:64:
dd:f7:4d:4b:a4:f1:e3:1b:20:ad:6f:27:32:f4:f6:
18:a5:a4:ff:a0:1f:e7:5d:ff:39:01:0f:23:a4:88:
df:3c:fc:05:69:5b:d5:5b:22:d1:c8:0e:69:7d:24:
13:40:e5:e5:a1:ea:ca:1b:5f:75:15:ae:71:79:e8:
3d:f7:60:46:b7:a1:43:b7:49:82:6f:5d:7e:13:83:
70:f4:d3:19:7f:a8:75:13:12:7a:5b:91:43:46:c0:
a5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:31:BC:7A:48:D8:65:5A:9C:FF:FA:D7:B2:15:B5:DB:F0:C4:4A:ED
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS402899.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.54.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:6c:db:24:c0:80:aa:fd:2d:82:f7:e8:f1:a0:9a:20:ed:b7:
38:33:bf:0c:6d:20:17:bb:61:fb:2b:e5:f8:fc:8b:bb:7d:78:
1e:d1:2e:a7:6f:7d:47:76:23:fc:c6:76:cf:f3:84:f0:11:3a:
ea:d4:cf:02:3f:e5:87:d6:d3:82:cc:fc:df:0d:dd:62:06:9c:
ea:4d:d5:f6:6c:dc:9c:3a:0a:7e:03:c7:37:b3:51:2d:73:00:
5e:87:db:db:c8:89:4f:86:f6:83:23:9a:63:4a:e0:a7:f1:48:
31:39:d0:95:95:0c:61:28:dd:09:ac:1f:45:f5:e6:b6:94:24:
8c:fb:12:48:fd:52:7e:2e:f9:7f:87:55:90:b6:ad:8c:f1:7e:
f4:bc:a5:f9:09:24:3c:b2:a8:cb:e1:c7:0d:b7:72:a2:12:dd:
3f:fd:9a:b2:a4:8e:4f:67:b6:96:69:67:6b:8d:a9:3b:5b:d9:
d4:2c:90:a2:00:4a:ac:cb:5a:eb:af:c3:52:c3:54:93:19:49:
b2:50:76:9e:65:62:56:d5:6f:f7:44:e5:16:a1:3a:7d:5e:aa:
2c:ba:5b:27:e2:8f:a3:27:6a:cc:51:41:e6:57:5b:6f:ba:86:
50:19:45:a9:57:f8:6b:a7:c7:62:42:36:63:37:21:a2:6a:a7:
bb:9e:82:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:18:21 2026 by rpki-client