Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402642.roa
File: AS402642.roa (raw, json)
Hash identifier: jPA/2+729j/Th1gfibJJ+wwTO50esKmu4VfV/pZZdSY=
Subject key identifier: 51:68:58:F6:75:C5:7B:67:38:77:C9:94:E0:5D:9B:E6:31:81:A1:5F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0BE8EC0267D9E99192B18E5F76A0A544D9CE28EE
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402642.roa
Signing time: Thu 02 Jul 2026 09:23:07 +0000
ROA not before: Thu 02 Jul 2026 09:18:07 +0000
ROA not after: Thu 01 Jul 2027 09:23:07 +0000
asID: 402642
IP address blocks: 146.103.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:e8:ec:02:67:d9:e9:91:92:b1:8e:5f:76:a0:a5:44:d9:ce:28:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 2 09:18:07 2026 GMT
Not After : Jul 1 09:23:07 2027 GMT
Subject: CN=516858F675C57B673877C994E05D9BE63181A15F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d5:3d:07:af:c2:82:a4:ba:74:d4:3b:2c:15:
bd:3f:01:98:b4:88:e6:52:11:a9:16:aa:6b:5e:49:
2b:32:8c:61:16:db:84:08:a3:b2:ff:c6:cb:fd:62:
b5:8f:8d:64:bd:90:59:3c:49:24:11:7c:38:8a:bd:
e6:3a:a1:75:80:83:92:c2:c0:2f:dc:f4:cd:a2:7a:
9b:13:0d:a1:06:3a:8b:9c:35:63:a8:a5:6b:d4:e3:
c8:81:2d:9b:4f:84:34:09:20:6e:e1:2c:4a:6a:0d:
b2:3a:75:2a:6b:cc:1c:a6:a7:0b:89:fb:2e:6e:9e:
ba:8f:50:38:7f:cc:15:e5:d6:9f:31:cc:e6:2c:16:
af:a8:b6:66:97:e0:2d:88:2c:26:fa:2a:0c:c7:b8:
59:df:11:b6:5a:a6:dc:1f:c0:47:53:d4:99:1b:02:
e2:20:31:15:b7:1f:16:79:2a:c0:d2:b4:10:66:01:
94:5d:1a:d0:75:1c:66:5e:f4:f1:17:bb:4a:67:ca:
28:99:29:64:12:76:4a:43:03:d1:ed:29:89:fb:20:
5c:e4:34:f7:99:18:54:d5:78:ad:8d:e8:b3:53:c1:
23:66:8a:93:20:43:05:3e:58:4d:04:d2:80:a1:51:
16:09:0a:d4:3f:82:0f:c8:05:22:32:71:60:0b:9a:
b8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:68:58:F6:75:C5:7B:67:38:77:C9:94:E0:5D:9B:E6:31:81:A1:5F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS402642.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.29.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:2b:de:b5:ab:cf:d5:74:e4:4b:c5:0a:e5:e7:6f:e1:94:d0:
03:26:e1:51:16:0b:bf:36:61:92:24:b9:bd:3e:f9:9f:7a:3a:
60:d8:23:ed:91:f5:89:d3:39:31:95:e4:c1:ff:dd:9d:cd:6c:
75:5d:d4:5d:46:fd:ab:51:42:ef:a1:14:55:59:52:8e:df:ec:
ef:96:b8:75:e9:3a:ff:c8:97:a3:04:70:ed:3a:be:f2:8b:e8:
53:15:25:e0:7f:e6:25:15:2c:0c:c2:c1:02:90:b0:4e:87:32:
72:b1:4e:e5:cb:47:cb:66:e1:c4:07:41:49:5e:d4:60:d9:a2:
e8:11:01:5d:e9:f7:a1:07:25:63:d8:b6:85:9c:61:7b:5f:f3:
ce:68:27:b5:ec:87:a5:25:ed:70:8c:a0:d5:54:38:7a:b6:52:
6f:80:f2:83:de:8a:b0:52:be:3d:f4:99:c4:bc:01:b1:9d:df:
50:72:24:cb:45:6f:9d:2e:96:0d:85:29:1b:79:d9:98:1d:84:
ea:26:3a:af:9f:6d:ed:bd:f4:84:4f:c0:28:c6:ab:5b:8f:2e:
2d:17:df:93:20:66:65:2d:c2:b6:2b:9e:db:91:b8:69:d9:26:
28:da:21:5b:96:f1:e8:7b:c8:cd:6c:fd:41:35:b6:1e:58:f1:
17:43:a3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 20:47:01 2026 by rpki-client