Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS402899.roa
File: AS402899.roa (raw, json)
Hash identifier: fZA04lVeoVashyRdckEJD7E8YvqG+XPMb25vbpV8MnA=
Subject key identifier: 37:44:61:76:97:FD:36:B0:DD:FB:33:67:91:B5:2C:70:11:80:EF:61
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 1D236EA2FF222DF415D18708E849E2B1399205FC
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS402899.roa
Signing time: Sun 25 Oct 2026 16:09:23 +0000
ROA not before: Sun 25 Oct 2026 16:04:23 +0000
ROA not after: Sun 24 Oct 2027 16:09:23 +0000
asID: 402899
IP address blocks: 90.96.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:36:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:23:6e:a2:ff:22:2d:f4:15:d1:87:08:e8:49:e2:b1:39:92:05:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 25 16:04:23 2026 GMT
Not After : Oct 24 16:09:23 2027 GMT
Subject: CN=3744617697FD36B0DDFB336791B52C701180EF61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3a:d4:30:53:cf:82:45:6e:e6:73:21:d3:a8:
08:5a:6e:76:5c:ee:82:dc:50:51:be:f2:ce:ba:30:
9c:0a:bd:cd:40:24:3b:89:4a:86:b6:92:c9:a1:e7:
2d:e2:86:13:0e:ec:f8:3a:ab:3a:48:7b:96:fb:dd:
68:3c:3e:5c:09:3c:a4:97:38:c4:bd:15:22:47:7c:
da:22:f6:87:df:75:33:80:1f:6f:e6:72:af:e1:5c:
2c:a6:2f:8a:b5:24:01:f3:40:47:5d:13:a2:1f:9e:
2d:ed:1c:11:77:a6:fd:80:f6:07:32:8e:fd:59:6e:
f1:c2:f7:8b:69:81:b0:37:49:06:64:1e:bd:42:58:
aa:bd:96:0c:85:11:fd:96:2e:b4:ec:b5:ee:54:9c:
4f:61:e3:44:f4:6d:96:58:8d:1d:6e:57:ac:2b:a1:
ee:f5:ce:62:63:b8:97:a0:1f:e2:0b:7b:de:2c:2a:
61:ad:94:0b:dc:4a:91:4b:2f:6f:4c:42:41:9c:2a:
00:b0:b6:ac:7b:f3:64:bf:e4:60:e7:53:29:ec:58:
d9:ca:6d:24:ab:99:62:4e:5e:ea:61:7c:ac:8e:80:
74:55:36:af:b2:f1:e2:ec:a3:99:b0:4b:ff:3c:08:
a7:2d:65:75:00:95:db:7a:2c:bd:0e:bf:68:16:35:
cf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:44:61:76:97:FD:36:B0:DD:FB:33:67:91:B5:2C:70:11:80:EF:61
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS402899.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.96.113.0/24
Signature Algorithm: sha256WithRSAEncryption
61:87:74:7a:66:65:4b:fa:35:2a:f4:54:8a:e2:83:e8:92:5c:
8c:38:3e:e8:6e:86:33:0e:d6:28:57:72:f5:ba:cc:6f:c1:ff:
ae:76:d1:55:bb:6e:3d:19:55:31:21:b9:63:e2:85:82:87:7f:
ca:77:35:bc:a0:21:28:5a:f0:db:fe:07:71:56:3e:59:22:e3:
c6:e0:47:a4:77:7f:5a:6f:c1:02:fb:8a:5e:9c:0f:8d:c9:cb:
3d:2d:b6:d5:d4:07:01:bc:aa:19:52:ac:0e:8f:c3:2d:fa:bc:
e4:2f:5b:60:29:6c:45:50:a4:49:3e:72:42:a7:05:13:f7:01:
2f:06:f4:fb:5b:6d:27:61:72:06:fd:bf:80:83:a0:d8:e4:17:
e8:01:3b:1a:c4:d3:76:c4:81:22:d7:77:e4:bb:ff:b6:b0:ba:
0c:92:30:c4:2c:bb:bb:a8:dc:d4:08:a8:c4:46:f9:7e:3b:95:
7a:be:ca:a1:80:23:a8:8c:c5:ad:d0:50:16:8b:05:8c:a8:fb:
bd:98:3f:64:23:84:74:b3:c6:e8:48:40:44:7b:36:36:18:62:
ad:7e:4d:21:04:27:ad:43:e2:98:0f:f2:66:e4:22:81:be:66:
0a:a3:4a:59:95:3e:67:9c:d8:01:93:8c:81:5b:8a:6c:55:ed:
e7:44:62:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 15:14:35 2026 by rpki-client