Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402866.roa
File: AS402866.roa (raw, json)
Hash identifier: XQrFBNfNDJOngprjMM2vmEBH7nz7zedFXN4WziVp940=
Subject key identifier: 79:41:56:46:06:89:5C:D6:3B:34:5E:0B:41:1E:91:12:46:4C:5A:42
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 583A53C11844899849940BF07410D75F6996D717
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402866.roa
Signing time: Sat 17 Oct 2026 16:27:07 +0000
ROA not before: Sat 17 Oct 2026 16:22:07 +0000
ROA not after: Sat 16 Oct 2027 16:27:07 +0000
asID: 402866
IP address blocks: 51.194.159.0/24 maxlen: 24
94.118.3.0/24 maxlen: 24
94.118.6.0/24 maxlen: 24
94.118.8.0/24 maxlen: 24
94.118.11.0/24 maxlen: 24
94.118.13.0/24 maxlen: 24
94.118.15.0/24 maxlen: 24
94.118.17.0/24 maxlen: 24
94.118.29.0/24 maxlen: 24
94.118.66.0/24 maxlen: 24
94.118.106.0/24 maxlen: 24
94.118.178.0/24 maxlen: 24
94.118.226.0/24 maxlen: 24
94.118.238.0/24 maxlen: 24
94.118.254.0/24 maxlen: 24
188.220.21.0/24 maxlen: 24
188.220.216.0/24 maxlen: 24
188.220.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:3a:53:c1:18:44:89:98:49:94:0b:f0:74:10:d7:5f:69:96:d7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 17 16:22:07 2026 GMT
Not After : Oct 16 16:27:07 2027 GMT
Subject: CN=7941564606895CD63B345E0B411E9112464C5A42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d0:6f:51:c6:c6:29:03:35:0f:9b:a2:77:c1:
66:cd:1e:31:68:ff:b3:92:21:a9:5e:52:53:98:f5:
ac:91:aa:58:3e:93:21:18:07:ad:c3:34:29:54:ac:
6d:a7:6a:a7:83:d6:f9:81:94:19:3e:45:7d:b8:d5:
22:c4:bd:71:46:6d:87:f8:6b:1c:7a:4d:66:7b:b2:
f8:0d:ef:bd:f0:5c:17:ea:11:24:3e:b1:eb:14:09:
cf:58:c0:15:4a:2b:69:61:5c:6c:14:61:0f:ee:01:
5a:37:18:4d:53:9c:dc:6a:d1:98:df:58:db:3e:9f:
e0:71:e5:a0:2a:eb:31:da:00:37:00:56:25:1a:f0:
4c:53:11:98:69:a0:96:94:2e:f0:61:08:4d:54:fd:
d0:f0:11:96:7e:56:8d:ce:5d:5a:28:2a:1d:40:f5:
a2:46:8a:dc:1d:fe:6e:c5:9f:84:01:10:d2:7b:7d:
61:7e:b2:32:aa:74:18:86:4c:3b:07:3d:c5:cc:95:
32:5d:00:85:af:f8:e9:1a:41:95:1b:39:fd:9f:94:
a4:f1:b4:26:da:68:63:d9:e6:90:85:47:fe:46:28:
5d:6a:d2:bb:07:7e:6f:e3:53:84:86:a8:a0:67:45:
2e:af:58:74:96:a3:5b:a0:b1:d0:49:16:22:9e:6a:
a3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:41:56:46:06:89:5C:D6:3B:34:5E:0B:41:1E:91:12:46:4C:5A:42
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402866.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.159.0/24
94.118.3.0/24
94.118.6.0/24
94.118.8.0/24
94.118.11.0/24
94.118.13.0/24
94.118.15.0/24
94.118.17.0/24
94.118.29.0/24
94.118.66.0/24
94.118.106.0/24
94.118.178.0/24
94.118.226.0/24
94.118.238.0/24
94.118.254.0/24
188.220.21.0/24
188.220.216.0/24
188.220.225.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:be:d3:d0:30:8f:66:d5:16:43:de:cf:5d:73:e9:78:1a:50:
56:41:b5:d2:f6:f1:a7:45:1b:69:e8:97:fe:c4:0d:84:58:e4:
81:5f:f3:12:79:9b:2b:09:d5:c7:a3:94:e9:80:4e:43:5a:09:
1c:e7:2f:47:45:64:c8:2f:bd:55:ef:93:7f:18:df:90:24:c1:
32:cb:e2:5c:a4:9f:04:92:6f:6e:e4:03:d6:73:a6:92:ae:d0:
8e:eb:b3:8b:82:47:c9:da:1e:22:83:05:2b:fc:61:20:b0:ee:
0d:c5:5d:2d:d1:f7:62:ed:04:9d:a2:9d:b5:bf:fb:27:dc:ef:
f2:ea:9d:57:36:df:22:82:f1:a2:09:a1:46:64:17:d3:b0:c5:
1c:1d:44:fd:3e:4e:91:b0:71:99:6f:8d:2f:a3:d2:54:77:12:
6f:10:7a:ef:6d:5b:62:03:af:7c:42:4a:73:fb:6b:98:ed:1d:
d5:cc:94:14:e8:30:a4:a5:9e:c6:a2:ea:32:e2:a3:09:1f:99:
e5:7e:ff:8e:a4:0b:6c:68:cf:fc:c0:a3:7a:e2:d2:c4:e3:eb:
f7:b1:2a:d9:b1:27:4a:08:a0:7b:6b:5e:39:e7:70:07:65:be:
35:82:c0:7e:78:d0:5d:74:40:07:78:72:7b:37:d8:94:96:0b:
fe:b4:56:3d
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIUWDpTwRhEiZhJlAvwdBDXX2mW1xcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjEwMTcxNjIyMDdaFw0yNzEwMTYxNjI3MDdaMDMxMTAvBgNV
BAMTKDc5NDE1NjQ2MDY4OTVDRDYzQjM0NUUwQjQxMUU5MTEyNDY0QzVBNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe0G9RxsYpAzUPm6J3wWbNHjFo
/7OSIaleUlOY9ayRqlg+kyEYB63DNClUrG2naqeD1vmBlBk+RX241SLEvXFGbYf4
axx6TWZ7svgN773wXBfqESQ+sesUCc9YwBVKK2lhXGwUYQ/uAVo3GE1TnNxq0Zjf
WNs+n+Bx5aAq6zHaADcAViUa8ExTEZhpoJaULvBhCE1U/dDwEZZ+Vo3OXVooKh1A
9aJGitwd/m7Fn4QBENJ7fWF+sjKqdBiGTDsHPcXMlTJdAIWv+OkaQZUbOf2flKTx
tCbaaGPZ5pCFR/5GKF1q0rsHfm/jU4SGqKBnRS6vWHSWo1ugsdBJFiKeaqMpAgMB
AAGjggJxMIICbTAdBgNVHQ4EFgQUeUFWRgaJXNY7NF4LQR6REkZMWkIwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTNDAyODY2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEADPC
nwMEAF52AwMEAF52BgMEAF52CAMEAF52CwMEAF52DQMEAF52DwMEAF52EQMEAF52
HQMEAF52QgMEAF52agMEAF52sgMEAF524gMEAF527gMEAF52/gMEALzcFQMEALzc
2AMEALzc4TANBgkqhkiG9w0BAQsFAAOCAQEAHL7T0DCPZtUWQ97PXXPpeBpQVkG1
0vbxp0UbaeiX/sQNhFjkgV/zEnmbKwnVx6OU6YBOQ1oJHOcvR0VkyC+9Ve+Tfxjf
kCTBMsviXKSfBJJvbuQD1nOmkq7Qjuuzi4JHydoeIoMFK/xhILDuDcVdLdH3Yu0E
naKdtb/7J9zv8uqdVzbfIoLxogmhRmQX07DFHB1E/T5OkbBxmW+NL6PSVHcSbxB6
721bYgOvfEJKc/trmO0d1cyUFOgwpKWexqLqMuKjCR+Z5X7/jqQLbGjP/MCjeuLS
xOPr97Eq2bEnSgige2teOedwB2W+NYLAfnjQXXRAB3hyezfYlJYL/rRWPQ==
-----END CERTIFICATE-----
Generated at Mon Oct 19 21:00:38 2026 by rpki-client