Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402475.roa
File: AS402475.roa (raw, json)
Hash identifier: SOoP073+h3nxP31WBHvdzs6scC3FK6iYSRC/H0q9gc0=
Subject key identifier: C2:BF:DF:5A:C7:B9:50:76:42:DF:41:0F:C8:73:5E:19:42:0D:FF:D4
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 21A94019DF2E40013148330D562B3B1DAFEC751F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402475.roa
Signing time: Mon 24 Aug 2026 00:01:47 +0000
ROA not before: Sun 23 Aug 2026 23:56:47 +0000
ROA not after: Mon 23 Aug 2027 00:01:47 +0000
asID: 402475
IP address blocks: 96.62.76.0/24 maxlen: 24
96.62.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:a9:40:19:df:2e:40:01:31:48:33:0d:56:2b:3b:1d:af:ec:75:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 23 23:56:47 2026 GMT
Not After : Aug 23 00:01:47 2027 GMT
Subject: CN=C2BFDF5AC7B9507642DF410FC8735E19420DFFD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d4:ba:e7:9a:3e:05:63:0a:63:a5:94:f0:eb:
2d:3e:2b:b0:5b:5a:a8:0a:f5:98:1b:b3:41:ac:9b:
de:0f:a3:63:0b:99:3a:3d:44:de:0f:70:de:92:aa:
0f:65:c0:a5:6d:3b:53:46:9e:5b:ba:ca:58:4d:24:
89:ad:4d:31:71:20:3f:a7:d6:ac:57:aa:de:22:4b:
92:42:a5:08:47:7e:29:25:51:de:1e:48:58:e7:45:
ad:92:f2:60:cf:c0:85:86:6a:48:96:41:dc:64:85:
7f:80:a6:93:af:92:31:0c:32:33:0b:9b:e6:c9:e4:
41:4a:06:d2:ad:4b:54:40:fd:d4:c0:06:b8:20:7a:
66:12:d6:61:23:64:c3:13:8b:c2:f6:00:5b:d8:d5:
44:ef:8b:5c:77:ab:2a:4d:e6:b1:2f:8a:1d:97:57:
d6:7e:0f:f4:c0:d1:aa:2e:6b:21:04:1b:c3:e6:15:
06:ff:75:be:f3:d9:3e:a9:6d:51:dc:f1:09:d8:14:
fe:7e:1d:13:e6:02:10:e6:aa:e9:a5:42:a5:ee:c7:
c0:06:29:81:1c:8d:28:38:96:c4:a5:b5:37:77:b8:
c7:13:9a:4d:2a:77:39:3d:03:10:3d:6d:b7:e8:c6:
af:8e:59:c6:7d:b0:2f:f3:6e:bf:a5:7e:fb:f8:3d:
58:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BF:DF:5A:C7:B9:50:76:42:DF:41:0F:C8:73:5E:19:42:0D:FF:D4
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402475.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.76.0/24
96.62.89.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:b4:cd:0a:80:8b:56:52:00:27:43:19:97:06:55:ce:ae:f4:
5d:06:f5:6e:a2:36:58:eb:be:cf:7f:9f:bb:27:b1:02:5b:a4:
36:bf:f1:5f:d0:f9:3a:6c:53:79:b5:35:0d:4e:b4:d1:bb:de:
33:f0:df:af:8d:e0:ce:67:80:6f:de:0a:bd:47:5d:58:4c:8c:
26:b2:9c:66:b1:90:18:f0:17:d0:0c:6a:46:2b:1c:43:cd:70:
ff:30:ea:d7:c3:99:b9:7e:38:8a:5a:8d:8d:34:f7:4b:2e:51:
c8:18:1e:1c:bb:28:e6:c7:aa:dd:f9:54:d2:9c:e4:a7:19:df:
dc:9d:e9:98:e9:31:bd:bb:ce:cb:10:34:ec:f8:70:7c:ea:89:
c0:8c:7a:d6:32:81:cb:c8:5a:e3:18:bf:fc:d3:ab:e0:5a:e1:
cb:e1:77:fc:d9:e2:67:96:d6:e0:db:f6:c8:ca:7d:a9:c3:54:
4a:34:15:ef:f5:bc:6b:78:3c:ab:e1:37:22:4d:6a:69:f1:9a:
14:94:1f:61:3e:2c:b4:51:89:b1:7d:56:69:76:3e:35:bc:43:
81:c3:db:76:4e:29:71:ef:b9:5c:05:6a:52:45:aa:f6:6f:2f:
ce:13:7a:5f:8e:91:2e:b1:ad:a8:84:15:51:7e:1c:b5:c4:50:
4c:8e:50:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:35:04 2026 by rpki-client