Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402511.roa
File: AS402511.roa (raw, json)
Hash identifier: lAf3Yc7Zt3CQtOTy5vEbqSIRUIM7J8633hzzsI+11Iw=
Subject key identifier: 0D:F7:5E:93:6D:64:70:61:F5:6A:3B:98:7C:F6:E3:73:B2:C7:FF:FA
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2E93FC4E21F6FCD344D368A0D4096BA0FBCED1C8
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402511.roa
Signing time: Thu 01 Oct 2026 16:03:07 +0000
ROA not before: Thu 01 Oct 2026 15:58:07 +0000
ROA not after: Thu 30 Sep 2027 16:03:07 +0000
asID: 402511
IP address blocks: 188.221.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:93:fc:4e:21:f6:fc:d3:44:d3:68:a0:d4:09:6b:a0:fb:ce:d1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 1 15:58:07 2026 GMT
Not After : Sep 30 16:03:07 2027 GMT
Subject: CN=0DF75E936D647061F56A3B987CF6E373B2C7FFFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:28:73:20:5f:21:d7:08:c1:ec:98:1c:12:2d:
76:e0:81:a4:ac:e6:e5:0c:12:d7:93:ca:b6:53:8d:
32:17:37:33:a1:05:a3:b0:4b:df:e8:94:5f:a9:af:
8e:5a:07:a2:cf:dc:52:4c:ce:71:11:2e:14:2e:93:
9a:0a:9a:10:0f:5b:62:b1:a5:a0:51:63:43:17:d1:
a2:26:ee:fb:d2:66:79:9a:a3:c9:27:4c:26:ca:48:
8d:81:e1:81:86:78:a3:5d:92:ca:bc:b1:fd:30:58:
d6:fc:0d:d1:a5:d2:8b:18:ec:c0:07:2b:ff:d2:48:
11:6b:3c:de:95:95:0f:09:a9:e3:a4:db:d7:3b:9c:
46:d7:46:14:bb:62:e7:41:03:b7:02:be:54:be:3f:
75:da:83:4c:68:4a:97:86:55:b1:ac:6c:91:58:ca:
fa:93:25:0b:a0:fb:a5:7d:7c:62:bc:b6:48:3b:26:
16:ac:21:4a:d1:6f:1e:3f:16:08:16:c8:13:9c:d8:
69:33:70:a5:2b:19:14:00:ac:1c:ab:aa:e3:de:87:
78:87:77:46:9d:51:af:7f:47:21:ce:62:97:23:c0:
ab:26:d5:47:52:dc:1b:56:74:5c:80:ed:a8:fa:4c:
48:6b:ad:e7:8e:e5:6d:77:18:19:23:ab:67:70:4f:
3a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F7:5E:93:6D:64:70:61:F5:6A:3B:98:7C:F6:E3:73:B2:C7:FF:FA
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402511.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.221.102.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:0c:35:2d:ba:07:59:24:d1:4f:2b:69:56:0e:eb:3b:5c:99:
26:75:c0:03:e8:b1:ad:22:77:48:5f:4f:5b:85:81:cf:81:e8:
f0:c5:70:93:ca:ae:c9:74:e8:c8:c0:f5:02:c7:05:70:99:9e:
11:34:73:4b:a3:0f:34:3e:2d:18:61:0d:99:c2:bf:7e:58:c0:
e6:89:a2:4e:0f:7a:be:1e:1a:aa:48:c8:9a:80:07:b5:56:e4:
d4:dd:d8:7d:ce:88:55:99:37:ec:63:48:89:5e:86:f2:ea:1e:
9d:1f:81:0d:1e:f9:0d:fd:3c:83:45:e9:ea:f8:90:73:1b:6e:
6a:35:dd:d3:89:f1:ac:a5:87:df:24:94:f0:89:42:b5:39:23:
ac:f6:68:dc:9f:b9:a5:2f:dc:41:f6:f1:e7:1e:03:d2:29:c3:
6e:ec:98:00:4f:4f:5f:77:2d:56:0f:86:18:49:e6:95:1f:b7:
a0:d2:2c:9d:02:4b:cc:1e:07:86:e5:6c:e7:8b:cd:ed:95:9b:
d7:bc:91:50:6c:ec:f2:d3:08:52:02:1f:79:e6:df:5c:a6:54:
ce:71:15:07:fd:10:f2:17:73:40:74:d4:14:06:2b:7e:a0:ed:
9a:d1:bb:85:cd:57:e6:0d:c4:af:f3:e9:16:96:cb:b3:81:08:
99:26:5e:77
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIULpP8TiH2/NNE02ig1AlroPvO0cgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjEwMDExNTU4MDdaFw0yNzA5MzAxNjAzMDdaMDMxMTAvBgNV
BAMTKDBERjc1RTkzNkQ2NDcwNjFGNTZBM0I5ODdDRjZFMzczQjJDN0ZGRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2KHMgXyHXCMHsmBwSLXbggaSs
5uUMEteTyrZTjTIXNzOhBaOwS9/olF+pr45aB6LP3FJMznERLhQuk5oKmhAPW2Kx
paBRY0MX0aIm7vvSZnmao8knTCbKSI2B4YGGeKNdksq8sf0wWNb8DdGl0osY7MAH
K//SSBFrPN6VlQ8JqeOk29c7nEbXRhS7YudBA7cCvlS+P3Xag0xoSpeGVbGsbJFY
yvqTJQug+6V9fGK8tkg7JhasIUrRbx4/FggWyBOc2GkzcKUrGRQArByrquPeh3iH
d0adUa9/RyHOYpcjwKsm1UdS3BtWdFyA7aj6TEhrreeO5W13GBkjq2dwTzplAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUDfdek21kcGH1ajuYfPbjc7LH//owHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTNDAyNTExLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvN1m
MA0GCSqGSIb3DQEBCwUAA4IBAQA7DDUtugdZJNFPK2lWDus7XJkmdcAD6LGtIndI
X09bhYHPgejwxXCTyq7JdOjIwPUCxwVwmZ4RNHNLow80Pi0YYQ2Zwr9+WMDmiaJO
D3q+HhqqSMiagAe1VuTU3dh9zohVmTfsY0iJXoby6h6dH4ENHvkN/TyDRenq+JBz
G25qNd3TifGspYffJJTwiUK1OSOs9mjcn7mlL9xB9vHnHgPSKcNu7JgAT09fdy1W
D4YYSeaVH7eg0iydAkvMHgeG5Wzni83tlZvXvJFQbOzy0whSAh955t9cplTOcRUH
/RDyF3NAdNQUBit+oO2a0buFzVfmDcSv8+kWlsuzgQiZJl53
-----END CERTIFICATE-----
Generated at Mon Oct 19 21:13:27 2026 by rpki-client