Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: tAbI5PC+1Juw0kwtXVfvE3llWUP5kEZdlF6L1XQ7yGQ=
Subject key identifier: 89:F4:7F:42:54:F1:C9:37:29:2D:0A:DD:64:59:3D:01:4C:0E:7A:83
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 31799282DAE7AD254F2E85C2FFC5DBCFDA0BA82E
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS402265.roa
Signing time: Mon 25 May 2026 15:40:46 +0000
ROA not before: Mon 25 May 2026 15:35:46 +0000
ROA not after: Mon 24 May 2027 15:40:46 +0000
asID: 402265
IP address blocks: 82.139.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 01:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:79:92:82:da:e7:ad:25:4f:2e:85:c2:ff:c5:db:cf:da:0b:a8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: May 25 15:35:46 2026 GMT
Not After : May 24 15:40:46 2027 GMT
Subject: CN=89F47F4254F1C937292D0ADD64593D014C0E7A83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:93:7b:f4:77:a8:cc:b3:00:53:18:e4:89:
70:ae:02:b2:f5:ef:d9:f8:96:a9:ba:08:ac:79:df:
0f:04:22:10:d4:14:8f:a0:ca:0f:62:4f:b1:ce:45:
09:46:dc:5a:79:e1:20:61:52:b9:60:56:9c:34:b0:
ca:35:bd:ec:a4:45:de:6c:82:bf:82:de:ce:86:dd:
72:ba:a7:72:d7:72:e3:55:f8:fd:f7:f1:26:22:8c:
c6:91:02:f9:c6:0f:4b:be:db:b0:4d:7d:f3:f8:60:
89:1f:73:ca:66:7b:ee:b0:a7:b1:4e:8b:7a:20:c5:
e6:27:be:bd:6b:1f:69:a7:06:bf:ae:1d:55:34:df:
bc:c0:15:db:27:54:cc:1d:a7:f1:df:fa:7e:36:6f:
70:5c:f7:6b:4a:3f:80:64:bf:79:8f:ba:29:bb:d8:
24:50:14:4f:1b:d1:13:1a:11:34:dc:c6:c7:a5:6a:
06:2f:43:a3:61:eb:fe:35:8a:4d:21:44:d1:af:75:
e1:0c:ca:e9:c1:e5:7a:0c:62:50:24:0b:ae:a9:0d:
13:56:99:a4:65:c8:73:63:d1:b3:f9:b9:9c:61:42:
30:18:44:5f:00:d1:59:2f:46:21:bc:4f:ea:66:e6:
5f:31:b6:98:a4:3b:b2:bf:22:31:40:5d:85:e8:10:
89:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F4:7F:42:54:F1:C9:37:29:2D:0A:DD:64:59:3D:01:4C:0E:7A:83
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.244.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:ca:86:0d:46:ba:23:b5:00:6c:99:46:ef:e1:30:39:fa:f3:
db:1a:5b:5c:0f:17:b2:af:88:7d:5c:8b:8e:7d:f5:6d:72:e7:
37:66:be:ea:2c:2c:30:e2:50:0e:1e:dd:63:00:b2:7a:94:d4:
10:68:0d:db:03:8a:9e:89:44:d2:97:5a:d9:7a:ef:59:a7:95:
22:a5:97:dc:70:f0:84:02:18:09:ff:0f:3d:6d:75:1c:11:6d:
81:fb:5c:71:d8:80:92:a8:af:6a:0e:58:89:e9:66:f8:5e:99:
db:f2:48:40:b7:fd:b8:8a:9a:f3:90:f9:77:84:2a:73:f0:b4:
c5:db:92:2a:d2:4c:84:97:63:8a:a8:4b:84:bc:82:8a:72:12:
88:a0:c3:f5:93:91:84:ce:03:2e:b3:54:3d:39:27:0b:48:58:
71:94:c6:97:52:d4:41:fe:e8:50:e6:14:00:4c:83:fa:4d:af:
37:c7:59:4b:4f:d7:81:2d:7d:16:08:dc:3d:a5:4f:be:ea:2f:
19:64:63:05:d1:a1:72:30:22:d6:ed:ac:60:49:9f:d9:18:56:
51:95:ec:e8:b8:5c:ac:04:99:84:f8:dd:d2:37:01:47:21:28:
b5:a6:e5:d9:e3:93:de:4f:ce:c3:1e:87:f9:87:71:09:bb:16:
c9:23:38:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:00:04 2026 by rpki-client