Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: QLi6EfjfDjNgJ6oc7Lg83/Van/MyyaaO3bcaQnvCZPc=
Subject key identifier: 1B:7B:4D:13:57:CE:2B:0B:DA:33:EB:48:65:CD:C8:4F:8D:88:6F:0E
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 55800B44CE87438A9BAB0B0F74B6889794750B1B
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS402265.roa
Signing time: Mon 24 Aug 2026 01:13:32 +0000
ROA not before: Mon 24 Aug 2026 01:08:32 +0000
ROA not after: Mon 23 Aug 2027 01:13:32 +0000
asID: 402265
IP address blocks: 46.236.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:80:0b:44:ce:87:43:8a:9b:ab:0b:0f:74:b6:88:97:94:75:0b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Aug 24 01:08:32 2026 GMT
Not After : Aug 23 01:13:32 2027 GMT
Subject: CN=1B7B4D1357CE2B0BDA33EB4865CDC84F8D886F0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0e:8e:78:b1:b5:09:c0:40:43:62:af:7d:7e:
db:61:f1:46:d7:73:07:b2:56:da:7f:9b:29:e0:e8:
31:58:91:d1:ab:69:6d:8c:71:41:f6:d8:a6:ad:df:
72:4c:56:01:b3:9c:ce:52:64:b1:bb:b7:af:05:c3:
bf:b1:42:00:a8:0f:6b:60:76:70:97:ea:65:8e:9d:
96:19:01:63:4f:50:86:32:65:f6:f5:e6:08:1b:9b:
b9:a5:d4:2c:9f:7c:a9:f2:8d:3f:c3:a1:31:9e:42:
b4:fb:2b:c0:cb:23:51:3d:17:08:d2:57:cd:34:35:
1a:6f:7b:e2:75:67:6a:14:c3:b6:ee:b9:f5:0b:ba:
36:28:62:ad:07:bc:42:fc:a4:8b:c2:06:be:a0:ff:
00:b4:f8:c0:fb:ec:41:cb:a5:90:18:dc:cf:88:e7:
c4:a9:5e:26:ab:cb:05:b6:74:88:a8:5b:c1:d4:29:
1b:47:9e:12:e7:d0:2f:01:fa:d1:f4:9a:63:f6:f9:
09:ec:af:0d:df:a5:57:6b:28:c3:1e:78:11:26:ad:
4f:81:03:ee:b7:8b:a7:ed:11:d2:a6:70:14:82:f3:
16:cf:ac:bd:25:85:9b:59:60:24:3f:ee:12:b8:26:
1d:65:ed:b1:00:48:79:66:18:39:6d:a0:c8:d9:83:
44:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7B:4D:13:57:CE:2B:0B:DA:33:EB:48:65:CD:C8:4F:8D:88:6F:0E
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.194.0/24
Signature Algorithm: sha256WithRSAEncryption
79:ed:79:52:26:06:1b:44:6c:e3:63:ba:81:a8:b7:8e:3d:75:
e5:d0:e2:ec:8f:34:8c:e8:4e:ac:e0:3b:ee:06:f6:b1:1e:d3:
75:70:4e:46:bb:3b:2b:56:96:d9:a4:02:52:60:76:7a:bd:bf:
0a:e0:02:d8:5b:27:34:d1:97:ed:6c:d2:2e:c4:5c:cc:e1:18:
15:66:4c:84:5c:1b:8f:25:68:43:a3:60:e7:9a:50:04:e3:bf:
0a:89:ba:f3:0c:c3:5a:c8:2d:14:ca:0f:19:58:0f:df:16:f6:
da:98:d8:32:52:0e:0d:a7:de:e8:14:11:30:80:24:66:59:2f:
5d:97:58:ab:eb:64:64:8f:0e:11:75:30:ce:c5:5f:b9:b8:96:
40:71:ec:8f:54:86:56:26:ce:ec:70:99:40:9b:8b:66:9a:20:
31:14:fd:51:c9:81:48:f3:ad:2e:b4:3f:aa:d0:cd:6e:cb:0b:
f8:3b:ee:7b:a3:86:89:57:a0:97:14:7b:cb:04:f7:e4:e5:89:
f9:df:b5:cf:71:62:28:fe:28:66:b3:b7:23:44:b3:26:aa:8b:
79:35:c8:2e:41:a7:e9:c1:9b:e6:d3:2d:8f:1e:87:5f:33:c3:
2a:4d:6a:67:10:3e:a0:69:0a:70:3a:fa:f8:e5:d1:9c:83:65:
02:91:27:86
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUVYALRM6HQ4qbqwsPdLaIl5R1CxswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNjA4MjQwMTA4MzJaFw0yNzA4MjMwMTEzMzJaMDMxMTAvBgNV
BAMTKDFCN0I0RDEzNTdDRTJCMEJEQTMzRUI0ODY1Q0RDODRGOEQ4ODZGMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMDo54sbUJwEBDYq99ftth8UbX
cweyVtp/myng6DFYkdGraW2McUH22Kat33JMVgGznM5SZLG7t68Fw7+xQgCoD2tg
dnCX6mWOnZYZAWNPUIYyZfb15ggbm7ml1CyffKnyjT/DoTGeQrT7K8DLI1E9FwjS
V800NRpve+J1Z2oUw7buufULujYoYq0HvEL8pIvCBr6g/wC0+MD77EHLpZAY3M+I
58SpXiarywW2dIioW8HUKRtHnhLn0C8B+tH0mmP2+Qnsrw3fpVdrKMMeeBEmrU+B
A+63i6ftEdKmcBSC8xbPrL0lhZtZYCQ/7hK4Jh1l7bEASHlmGDltoMjZg0Q9AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUG3tNE1fOKwvaM+tIZc3IT42Ibw4wHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt
NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTNDAyMjY1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuzC
MA0GCSqGSIb3DQEBCwUAA4IBAQB57XlSJgYbRGzjY7qBqLeOPXXl0OLsjzSM6E6s
4DvuBvaxHtN1cE5GuzsrVpbZpAJSYHZ6vb8K4ALYWyc00ZftbNIuxFzM4RgVZkyE
XBuPJWhDo2DnmlAE478KibrzDMNayC0Uyg8ZWA/fFvbamNgyUg4Np97oFBEwgCRm
WS9dl1ir62Rkjw4RdTDOxV+5uJZAceyPVIZWJs7scJlAm4tmmiAxFP1RyYFI860u
tD+q0M1uywv4O+57o4aJV6CXFHvLBPfk5Yn537XPcWIo/ihms7cjRLMmqot5Ncgu
QafpwZvm0y2PHodfM8MqTWpnED6gaQpwOvr45dGcg2UCkSeG
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:30:46 2026 by rpki-client