Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS402298.roa
File: AS402298.roa (raw, json)
Hash identifier: C9zrfxTgrW1yAR6lm975pBdL+AXJ6/c6ySKWRP/k7qQ=
Subject key identifier: 3E:D7:13:00:1B:34:5F:00:F3:44:64:B0:D6:37:88:1E:D5:C4:04:16
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 30E3285702A14A3FB90C360FE63142AB191BAE94
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS402298.roa
Signing time: Wed 29 Apr 2026 17:10:29 +0000
ROA not before: Wed 29 Apr 2026 17:05:29 +0000
ROA not after: Wed 28 Apr 2027 17:10:29 +0000
asID: 402298
IP address blocks: 82.139.224.0/24 maxlen: 24
212.60.152.0/24 maxlen: 24
212.60.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 13:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:e3:28:57:02:a1:4a:3f:b9:0c:36:0f:e6:31:42:ab:19:1b:ae:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Apr 29 17:05:29 2026 GMT
Not After : Apr 28 17:10:29 2027 GMT
Subject: CN=3ED713001B345F00F34464B0D637881ED5C40416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6b:18:c4:0c:18:6d:85:a6:14:0c:76:5b:a1:
74:bf:1c:c6:34:38:4b:70:e4:6e:8c:3e:e6:48:1d:
3b:82:9e:d9:11:72:0a:5a:b9:cf:05:7a:b2:6e:e6:
24:2b:20:d7:34:4d:6a:17:dc:2e:fd:19:a3:3d:5f:
c1:cd:4c:54:57:47:a3:0e:2d:70:21:a4:b8:2a:8b:
4f:96:97:d9:89:4a:8d:fb:32:05:4b:90:24:3d:28:
be:6f:5f:db:d7:17:f3:10:5d:de:fe:5c:97:24:d6:
cd:dc:d9:a9:70:11:a4:f1:13:79:d8:1e:ab:7e:df:
ad:db:44:6c:2d:60:a6:ca:9f:0c:c7:13:7d:ff:71:
82:2d:91:86:f9:8b:fc:ca:7d:75:ae:af:dc:a2:6a:
ba:b7:60:3d:99:44:62:cd:5b:35:d7:77:73:f6:80:
6c:25:f7:d5:0b:ab:d6:a0:b2:88:90:f2:2a:0f:e8:
41:73:b6:ba:78:23:bf:97:b9:a5:24:71:e9:3a:5f:
52:f9:a4:ba:c1:40:1c:02:50:01:8f:3d:76:2d:13:
68:ae:a9:37:76:ca:29:3f:90:0a:e7:db:6f:b8:28:
6c:55:d9:6f:bc:c0:4b:ed:f8:32:40:b3:85:1d:2f:
94:37:91:2a:5e:60:bd:8e:87:6b:ca:0f:30:55:fa:
6a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D7:13:00:1B:34:5F:00:F3:44:64:B0:D6:37:88:1E:D5:C4:04:16
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS402298.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.224.0/24
212.60.152.0/24
212.60.154.0/24
Signature Algorithm: sha256WithRSAEncryption
27:af:07:d3:8b:64:5a:53:b0:9c:41:88:21:d1:b8:fe:81:e0:
5c:24:89:d7:dd:2a:c3:21:07:95:7f:a6:71:91:78:ad:99:c0:
0c:bf:76:a0:e8:8f:65:16:a9:30:b4:39:20:16:8a:d9:1d:ff:
e5:bc:07:23:c7:3c:6b:71:7a:8c:9e:60:a1:53:9c:3f:4e:1b:
f8:5f:a5:cb:8f:40:e2:fb:ce:3d:a8:1d:44:54:c4:18:3d:2b:
7a:ca:eb:bc:4c:a5:8a:6c:4b:a4:21:f1:1c:ce:a8:20:24:5f:
cc:02:bb:3a:09:6e:a7:a8:06:e8:5b:eb:7e:fa:9f:e1:46:b5:
d3:d7:64:82:b2:e7:b2:8b:ab:cb:f3:31:f0:8a:03:e1:43:f9:
58:cd:e6:2e:39:97:7c:06:b0:b1:68:e9:0f:89:61:29:84:48:
00:16:93:73:27:46:25:6e:65:41:fe:fe:68:8f:ab:ef:ce:50:
ed:94:c5:0b:24:e0:db:89:61:a9:2c:31:33:f7:aa:46:78:f6:
f3:e6:ca:9b:27:3f:29:d4:78:99:19:2c:30:bf:2f:9b:3c:49:
44:6f:c6:92:1c:bd:2c:f0:8a:b0:15:30:74:a4:fe:0a:23:fa:
93:0a:e6:5d:89:7d:d6:dd:7b:e8:f6:bc:63:1d:48:f8:33:f8:
8c:6c:ba:52
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUMOMoVwKhSj+5DDYP5jFCqxkbrpQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNjA0MjkxNzA1MjlaFw0yNzA0MjgxNzEwMjlaMDMxMTAvBgNV
BAMTKDNFRDcxMzAwMUIzNDVGMDBGMzQ0NjRCMEQ2Mzc4ODFFRDVDNDA0MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6axjEDBhthaYUDHZboXS/HMY0
OEtw5G6MPuZIHTuCntkRcgpauc8FerJu5iQrINc0TWoX3C79GaM9X8HNTFRXR6MO
LXAhpLgqi0+Wl9mJSo37MgVLkCQ9KL5vX9vXF/MQXd7+XJck1s3c2alwEaTxE3nY
Hqt+363bRGwtYKbKnwzHE33/cYItkYb5i/zKfXWur9yiarq3YD2ZRGLNWzXXd3P2
gGwl99ULq9agsoiQ8ioP6EFztrp4I7+XuaUkcek6X1L5pLrBQBwCUAGPPXYtE2iu
qTd2yik/kArn22+4KGxV2W+8wEvt+DJAs4UdL5Q3kSpeYL2Oh2vKDzBV+mr7AgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUPtcTABs0XwDzRGSw1jeIHtXEBBYwHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt
NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTNDAyMjk4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUovg
AwQA1DyYAwQA1DyaMA0GCSqGSIb3DQEBCwUAA4IBAQAnrwfTi2RaU7CcQYgh0bj+
geBcJInX3SrDIQeVf6ZxkXitmcAMv3ag6I9lFqkwtDkgForZHf/lvAcjxzxrcXqM
nmChU5w/Thv4X6XLj0Di+849qB1EVMQYPSt6yuu8TKWKbEukIfEczqggJF/MArs6
CW6nqAboW+t++p/hRrXT12SCsueyi6vL8zHwigPhQ/lYzeYuOZd8BrCxaOkPiWEp
hEgAFpNzJ0YlbmVB/v5oj6vvzlDtlMULJODbiWGpLDEz96pGePbz5sqbJz8p1HiZ
GSwwvy+bPElEb8aSHL0s8IqwFTB0pP4KI/qTCuZdiX3W3Xvo9rxjHUj4M/iMbLpS
-----END CERTIFICATE-----
Generated at Thu Apr 30 17:26:08 2026 by rpki-client