Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402899.roa
File: AS402899.roa (raw, json)
Hash identifier: cylJ+2jGDkWh7SeSY1Y1fIGQRbIZzo+sn4U3i1Xv2KE=
Subject key identifier: 99:36:03:17:43:6B:05:8C:2A:76:DA:26:21:67:4D:97:B0:B2:B2:11
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7C9C84493E5369EE1250A68FA44F91AD113E692E
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402899.roa
Signing time: Thu 08 Oct 2026 09:30:42 +0000
ROA not before: Thu 08 Oct 2026 09:25:42 +0000
ROA not after: Thu 07 Oct 2027 09:30:42 +0000
asID: 402899
IP address blocks: 94.118.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:9c:84:49:3e:53:69:ee:12:50:a6:8f:a4:4f:91:ad:11:3e:69:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 8 09:25:42 2026 GMT
Not After : Oct 7 09:30:42 2027 GMT
Subject: CN=99360317436B058C2A76DA2621674D97B0B2B211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c4:8d:03:ce:4f:c5:49:d6:42:30:9b:74:ec:
a6:fe:7e:a7:21:55:38:c7:3d:49:fe:f7:c2:a3:cc:
db:fe:86:de:01:18:d5:bd:c7:44:82:72:d9:5a:47:
28:cd:3c:b1:00:32:da:be:f0:1d:45:61:11:5d:a1:
99:a7:8c:42:70:b7:47:19:09:a2:7d:99:01:ff:07:
c7:79:bd:0e:b0:60:63:78:bc:21:70:20:46:80:f1:
e1:ab:85:09:f1:d9:ca:92:86:a8:7a:ae:de:48:aa:
fc:aa:67:50:d1:fc:b2:dd:bf:1c:5c:ad:43:e9:97:
f2:95:18:8b:d2:35:14:c2:3f:10:31:3e:19:27:10:
3d:9d:62:1f:45:86:8c:97:13:23:6c:2d:ea:4a:54:
d9:14:dd:2d:13:90:6d:4f:69:7d:a6:c2:d3:a7:1a:
bc:90:a9:06:c6:b0:f0:fe:73:b9:7f:87:76:4e:87:
57:94:dc:c4:c2:ee:e1:e2:f9:86:d3:45:36:0c:c5:
bf:cc:b9:05:c3:f8:57:15:dc:c2:1b:05:4a:0e:91:
3f:9c:59:35:1d:29:78:07:65:3d:40:88:08:9e:bf:
61:8a:b0:fd:56:c9:9a:0e:60:99:1f:53:10:91:94:
87:69:85:ea:91:c4:ab:9a:81:cb:e9:5f:0f:c2:07:
34:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:36:03:17:43:6B:05:8C:2A:76:DA:26:21:67:4D:97:B0:B2:B2:11
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402899.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.33.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:da:fe:2f:b3:01:19:7c:29:e3:21:57:c6:af:d0:d3:2e:dd:
ad:bb:a2:6e:8c:a5:90:ce:5f:ce:a7:48:5f:80:3f:04:45:3a:
57:ab:dc:00:99:d3:b5:f4:5d:ad:05:52:d8:09:a8:c9:f8:29:
61:fe:52:43:68:f6:25:82:94:79:6b:01:40:f4:3d:b7:4f:db:
72:71:0d:9c:a8:f3:aa:2b:24:1a:63:76:bd:1e:a2:5e:dc:5d:
64:b8:31:e2:96:e6:e2:68:77:ad:e4:aa:57:f9:2e:8f:e0:54:
50:f2:5d:df:fb:0e:ce:f9:5e:5e:68:ba:c9:67:9d:6d:e2:4f:
a4:05:b5:c2:6b:6e:fe:22:f5:65:7a:bc:2c:46:f7:77:f2:97:
12:d5:1d:a1:e8:d5:e2:b5:22:28:c1:7c:c8:d7:ed:6b:2d:22:
f2:86:ee:cb:79:5b:44:d9:0f:6a:c7:ba:73:b6:7f:e0:62:85:
39:94:fd:1b:a5:73:98:3d:62:f9:ed:b6:65:6d:6b:0e:7a:84:
3e:aa:41:d4:e1:60:41:89:49:0d:5d:70:23:db:9c:48:79:79:
15:46:d2:44:69:5c:34:23:ba:60:c7:d6:b5:96:c7:93:c6:fd:
a7:56:6e:dd:e0:30:ca:7d:e8:9c:09:9b:53:66:51:57:5c:62:
92:4f:12:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 01:30:33 2026 by rpki-client