Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS402288.roa
File: AS402288.roa (raw, json)
Hash identifier: 3NxZna7pnhv6gmXi1+Pgx0gjnIiC33MWxd8BSgcBjSg=
Subject key identifier: 05:FA:CA:62:64:75:A7:C7:0B:7C:6F:D6:64:7E:80:06:95:7A:BA:22
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 688C6689546EB8BF7A35EB4FCF73B105FC0F1D1C
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS402288.roa
Signing time: Tue 13 Oct 2026 01:49:53 +0000
ROA not before: Tue 13 Oct 2026 01:44:53 +0000
ROA not after: Tue 12 Oct 2027 01:49:53 +0000
asID: 402288
IP address blocks: 46.236.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 05:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:8c:66:89:54:6e:b8:bf:7a:35:eb:4f:cf:73:b1:05:fc:0f:1d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Oct 13 01:44:53 2026 GMT
Not After : Oct 12 01:49:53 2027 GMT
Subject: CN=05FACA626475A7C70B7C6FD6647E8006957ABA22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dc:44:25:a7:69:be:3d:bb:40:c7:23:ea:37:
15:d6:89:d9:96:e8:4c:1b:28:6d:95:1e:fb:fd:75:
2f:55:44:ac:42:73:dc:c5:c5:19:3b:fc:b1:9d:09:
6e:eb:aa:33:df:7b:38:59:31:db:6d:95:3c:91:eb:
c2:15:f4:dd:94:34:5f:fc:0d:ab:2b:41:6b:b3:5d:
8e:63:e8:72:27:91:95:9d:c6:62:d6:d4:80:db:6f:
a2:10:c9:aa:c1:51:01:fe:db:6c:3a:ab:c6:69:27:
c4:c7:cd:60:8a:39:e6:29:ce:78:04:0b:ea:c8:c9:
6d:6a:8a:bb:2f:d5:13:82:0d:d5:8f:58:47:52:91:
5a:35:7f:9d:e1:86:c8:60:c2:ff:1c:65:dc:75:e0:
fb:e0:4b:c3:58:54:58:ca:fe:07:67:7f:02:00:88:
b2:26:48:e1:e6:37:3a:6c:dc:d0:d8:e3:7b:a5:08:
7a:47:73:79:ff:b7:14:a2:ad:27:d3:12:55:2b:a5:
c2:f8:52:bb:7a:d8:da:c6:e8:db:bb:82:55:bd:4d:
0d:5d:dd:b1:00:fe:80:fc:b7:42:7a:8e:04:fb:2a:
e1:31:cb:be:ec:8a:f7:93:9c:d6:5c:43:6d:25:f3:
b7:0d:69:22:53:42:ad:70:95:58:55:75:75:49:c3:
fa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FA:CA:62:64:75:A7:C7:0B:7C:6F:D6:64:7E:80:06:95:7A:BA:22
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS402288.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.210.0/24
Signature Algorithm: sha256WithRSAEncryption
15:07:f6:d5:71:44:53:f9:1e:1d:d9:e8:ac:8d:df:3b:3f:96:
7f:0c:9f:58:c4:88:e6:60:5f:78:60:45:cc:4a:0c:af:5a:96:
65:d8:a7:c2:45:b7:b5:7f:c3:45:25:e0:d1:d6:19:d2:c1:b7:
ea:56:99:aa:dc:c1:f6:3b:a5:b4:71:a9:84:49:5f:67:e8:a5:
33:3f:da:69:11:dc:f9:bf:eb:42:d4:91:de:ce:76:22:fc:45:
55:bf:e7:e7:5c:8c:13:28:7b:e1:0b:71:b4:37:b0:e5:21:98:
77:91:10:e5:87:2b:70:b5:23:df:71:10:7e:3c:47:fd:d7:2b:
81:7b:e4:d5:22:ef:36:f1:88:12:50:57:87:ef:ae:c1:c6:35:
7c:f2:ac:c7:07:d9:48:0a:1a:94:ac:37:bd:48:4a:65:42:54:
61:6e:d5:67:b2:ee:19:cf:bb:fa:b2:d3:8a:31:49:4c:0f:9c:
d3:f6:f8:1c:84:4d:e2:c6:b3:d5:6a:1b:dc:16:59:98:f3:48:
02:c3:09:4f:8d:df:a7:d9:c4:d7:01:69:45:0a:35:f9:70:55:
77:80:a5:9e:e7:6e:78:14:80:6c:85:c7:9b:83:be:d1:2e:ae:
ca:31:f6:d8:d1:31:c0:7d:3c:44:10:38:5e:21:c5:0e:b8:08:
6a:98:98:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:14:43 2026 by rpki-client