Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402493.roa
File: AS402493.roa (raw, json)
Hash identifier: +VN6NXwK+inTKERy/5nZ/UgZE/EiZyJEdV9NTr9NMjs=
Subject key identifier: E7:82:80:ED:EA:BA:B5:5F:7B:E3:20:22:90:6D:D8:6E:06:D8:A4:7F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 20C7996CFFF671BE69CC6DD11CA4C035467FCEDB
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402493.roa
Signing time: Fri 29 May 2026 17:07:26 +0000
ROA not before: Fri 29 May 2026 17:02:26 +0000
ROA not after: Fri 28 May 2027 17:07:26 +0000
asID: 402493
IP address blocks: 162.141.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:c7:99:6c:ff:f6:71:be:69:cc:6d:d1:1c:a4:c0:35:46:7f:ce:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 29 17:02:26 2026 GMT
Not After : May 28 17:07:26 2027 GMT
Subject: CN=E78280EDEABAB55F7BE32022906DD86E06D8A47F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:cb:dd:dc:c8:b9:44:41:42:f9:fa:69:ff:
fe:18:11:87:ea:55:c1:66:50:d8:9c:be:23:9d:9e:
6f:19:71:05:82:fe:a9:ce:a1:6a:85:05:bf:8e:ec:
32:09:e7:fe:7c:f5:a5:bb:da:a6:3b:a2:42:a9:b4:
7a:54:59:64:7b:e4:72:85:bf:82:cb:be:53:33:20:
87:19:da:8a:08:de:48:b5:3c:1c:d0:a2:f9:79:82:
22:80:1e:cb:9d:aa:d9:9b:36:2c:54:77:81:f0:3e:
ae:8d:8c:a9:44:50:f0:88:36:e5:b7:ac:85:16:45:
fe:59:c0:9c:83:de:12:4e:5b:67:a3:89:b6:57:b3:
59:67:ff:a5:84:29:33:07:e8:29:4e:47:47:a0:d7:
e0:0b:0a:b5:4f:21:c5:c3:58:35:32:3a:86:57:3f:
c4:95:c6:19:5a:c2:75:9b:8a:3b:d0:38:4e:7d:da:
98:fa:f9:71:ef:cb:15:ca:3d:6f:7d:08:42:ac:2b:
7b:1b:68:1e:40:46:d2:cb:6d:e6:25:b5:33:ad:54:
51:fd:53:46:8a:bc:08:38:31:72:e3:7c:86:b5:69:
1d:f0:2a:bb:83:33:44:77:a1:55:d0:c6:ec:aa:ba:
7f:26:66:a1:da:49:d3:8e:2d:4f:4b:7a:0a:37:be:
41:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:82:80:ED:EA:BA:B5:5F:7B:E3:20:22:90:6D:D8:6E:06:D8:A4:7F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402493.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.123.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:80:b5:c3:a3:72:b2:00:f7:a1:fe:3e:e2:e2:20:21:23:ea:
c7:bb:57:71:1c:00:ab:fb:29:e8:c3:7f:4e:76:23:5b:99:04:
04:7e:7d:e0:b4:5d:9f:d6:8d:7e:b4:72:10:96:6b:6a:6e:4b:
5f:f0:16:f2:8d:c9:75:b8:95:9b:50:26:07:c1:49:11:56:e2:
28:c1:76:d1:8b:a5:7d:3a:f7:eb:93:a4:3f:7e:31:52:8b:91:
67:07:35:b5:a0:7c:b8:b2:fa:9e:f2:8d:1d:52:c8:62:44:37:
b4:44:df:ae:f9:c3:03:3b:87:ea:c3:96:c6:1b:0d:88:33:f9:
fb:3e:df:7c:5f:31:42:4d:60:3d:ae:9b:3f:82:9a:b4:07:3e:
12:af:fb:bd:a9:11:89:01:37:bc:74:72:93:4e:5b:e9:5c:e5:
1b:f7:6d:39:b7:3a:8a:57:31:29:83:0f:35:a2:6d:c0:7d:96:
88:d6:98:77:80:21:70:2a:41:a7:62:84:bf:04:0a:20:8c:d5:
d9:11:3d:cf:e6:a1:57:5b:f1:cf:f5:e4:cc:29:67:c9:5e:5a:
14:68:5f:7b:cf:67:c7:29:32:b8:8b:7e:24:5f:50:e5:71:8d:
63:2e:f3:ac:70:8c:ab:db:10:5e:5d:88:70:3e:14:ef:88:23:
80:af:a1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:53 2026 by rpki-client