Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402671.roa
File: AS402671.roa (raw, json)
Hash identifier: 1HhYmSA1oxPUHmWALsWR7207krc9eKKMfS7OlJIQE84=
Subject key identifier: 14:6E:05:58:52:2A:3A:DB:F7:F1:8C:34:BA:31:F3:57:E1:5E:0E:6B
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0BB5C6D3A3C225460FAEF4A41D24286490A58A01
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402671.roa
Signing time: Fri 16 Oct 2026 22:25:37 +0000
ROA not before: Fri 16 Oct 2026 22:20:37 +0000
ROA not after: Fri 15 Oct 2027 22:25:37 +0000
asID: 402671
IP address blocks: 94.118.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:b5:c6:d3:a3:c2:25:46:0f:ae:f4:a4:1d:24:28:64:90:a5:8a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 16 22:20:37 2026 GMT
Not After : Oct 15 22:25:37 2027 GMT
Subject: CN=146E0558522A3ADBF7F18C34BA31F357E15E0E6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5c:c7:0d:0c:a0:83:b5:a1:14:49:f9:7b:39:
79:15:95:a7:a2:55:3c:7a:a7:01:83:7c:91:54:36:
2f:ad:fb:86:19:9e:10:78:af:d1:7f:c2:9d:d0:81:
8b:09:e5:be:8d:f7:f1:a8:35:21:e2:b6:57:d6:93:
19:d5:0d:f4:b0:6f:f8:95:d8:c9:dd:d1:20:58:21:
25:ea:6e:94:4c:6e:03:c5:e2:80:27:0b:09:cb:6e:
3a:7c:68:1b:84:fe:e3:f5:69:a8:39:46:e6:96:4c:
2b:30:cc:76:e8:c8:ae:ef:a4:35:e6:f2:a9:f3:66:
23:6c:4a:df:6b:63:5f:13:e8:70:8f:27:3a:d7:66:
c2:57:0e:86:d0:45:44:3f:42:c9:fa:ba:ef:60:88:
6d:a0:7f:cc:2e:83:ab:7d:b6:41:31:74:a3:f3:36:
56:a4:0f:1d:93:a9:3a:3a:3f:aa:6b:7b:97:91:93:
7a:b1:68:d4:8e:c4:2d:3a:11:69:af:f7:9a:5b:0f:
cd:e0:4d:db:56:60:69:c7:6a:90:9e:d6:9d:e7:5e:
5a:8c:50:67:6d:32:dd:a5:e7:78:00:c6:67:6d:a1:
31:3d:21:b2:94:cc:46:17:c0:35:52:a8:2d:7c:a8:
2a:74:3a:cb:55:86:25:eb:62:2e:6c:15:c3:4a:dd:
ae:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6E:05:58:52:2A:3A:DB:F7:F1:8C:34:BA:31:F3:57:E1:5E:0E:6B
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402671.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.137.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:fe:8a:bc:c4:76:a0:f8:fa:30:c3:2b:e4:8e:aa:28:7c:3b:
05:40:d0:1e:af:31:22:51:48:3c:3b:15:42:6f:70:fa:49:af:
77:44:29:8b:d8:41:83:4d:d1:5f:1b:ca:36:06:86:fe:2e:17:
ff:88:69:93:c7:68:5a:30:18:4a:9f:12:35:67:23:b7:21:55:
8f:89:c6:cb:7e:a1:d7:90:3a:f5:13:96:0c:e1:49:f2:01:2f:
b7:1e:d8:ad:d6:6d:dc:f6:49:03:5b:c0:14:0e:74:4e:c2:a6:
24:d7:9b:58:2d:ec:74:f7:fc:5f:c4:ec:8b:8e:f8:79:51:16:
22:23:9d:4f:4d:29:17:c9:f5:df:80:3c:6e:99:bf:f2:52:7b:
42:89:9e:06:1f:45:ef:d1:b2:20:69:e7:d6:73:07:07:bc:f7:
c3:84:4e:a5:89:ec:9c:cd:93:17:be:f3:4c:5c:fc:f3:06:f4:
80:47:77:9a:29:4b:8e:56:e0:57:5b:fe:87:32:82:9a:a2:38:
0e:b5:09:c0:aa:90:4c:a1:b1:ad:97:13:61:12:79:7a:8f:87:
8f:f0:c4:d8:63:f3:be:06:8a:7c:65:b1:bc:19:6a:96:c7:0e:
fc:da:b5:2c:12:80:0d:55:3c:c4:af:30:4a:a3:59:71:c3:a1:
3e:9a:b5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 01:31:30 2026 by rpki-client