Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS402475.roa
File: AS402475.roa (raw, json)
Hash identifier: LAHRpQwK0oJi5BSDJs5jT+GSmLxnatizBWGDDxvly3Y=
Subject key identifier: 6C:E4:AF:05:FF:57:B5:14:B7:97:12:29:F2:A5:86:38:CF:87:66:34
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 017514D54FF3131F3D20662609B40633B59275B9
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS402475.roa
Signing time: Thu 06 Aug 2026 13:58:15 +0000
ROA not before: Thu 06 Aug 2026 13:53:15 +0000
ROA not after: Thu 05 Aug 2027 13:58:15 +0000
asID: 402475
IP address blocks: 46.236.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:75:14:d5:4f:f3:13:1f:3d:20:66:26:09:b4:06:33:b5:92:75:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Aug 6 13:53:15 2026 GMT
Not After : Aug 5 13:58:15 2027 GMT
Subject: CN=6CE4AF05FF57B514B7971229F2A58638CF876634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:55:cc:96:f0:21:51:74:cf:43:37:1a:3e:2c:
3c:fa:5f:bb:86:fb:02:e3:42:bd:35:91:55:d3:4b:
b7:28:77:8e:f0:e1:b8:92:be:03:2f:92:3d:52:f7:
d4:f4:43:cd:3c:29:8a:4b:50:5b:74:d4:2b:9c:92:
4a:a7:42:90:f0:c5:07:2d:d7:a7:0c:9e:c8:8d:52:
c4:c5:06:5c:bf:d4:66:51:dc:6e:64:b5:d5:71:67:
0b:9a:00:46:ff:70:9d:23:98:3b:97:92:3b:78:83:
93:31:51:09:49:47:67:e5:1b:c5:48:51:37:c8:69:
65:0f:d2:0f:ac:a5:86:0d:de:6c:9f:89:12:c4:e0:
4a:e5:1a:6e:b8:8e:d7:7b:12:47:05:80:8d:d2:95:
25:33:5e:bc:fc:aa:39:9e:7f:d8:b0:a2:30:35:f8:
b1:6a:28:ea:02:b3:c1:34:3a:71:4e:cf:bb:b4:8e:
91:4f:a6:0d:85:a1:ec:ec:87:34:3f:5d:a9:77:6d:
c9:87:cd:5a:c6:9b:5c:26:49:aa:a2:66:07:20:1a:
bf:97:5c:c9:08:32:d1:58:88:9d:74:01:21:e3:c0:
34:4c:fd:82:6f:c4:33:b1:71:91:15:38:09:11:e9:
e8:5b:4b:74:f4:31:4e:40:86:6c:41:ea:e3:85:03:
49:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E4:AF:05:FF:57:B5:14:B7:97:12:29:F2:A5:86:38:CF:87:66:34
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS402475.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.203.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:07:b2:19:aa:fd:a6:34:07:8d:9b:9b:27:5c:ba:04:94:c0:
b5:86:7a:57:82:75:67:5f:0f:b6:ba:64:bb:ee:56:f0:9a:f8:
29:2e:c7:78:2d:b9:7f:2b:61:83:e7:6b:4c:87:8f:a1:af:9f:
3b:c3:fa:ec:d8:94:d1:1c:f9:85:6d:7e:49:50:d3:89:45:a7:
42:1c:fb:12:6a:f8:6f:01:cb:35:5e:c3:a5:ac:34:b4:b2:9b:
94:af:b0:f7:3b:33:22:60:d4:49:df:c3:d4:59:96:d1:e2:cd:
a1:9a:3e:c3:18:4d:19:9d:32:15:8e:21:38:36:53:02:97:af:
5e:74:37:3c:1e:94:a4:7c:fd:47:74:0a:55:08:b6:fe:82:2a:
49:f8:32:a5:c4:f7:e2:e5:c3:97:59:97:bd:c4:6a:ee:6d:e9:
11:08:3f:9d:2c:35:73:ec:87:93:18:80:c9:54:83:62:30:96:
eb:41:4e:97:d0:e1:9a:be:8f:4c:64:b3:5c:89:15:25:a5:f9:
64:39:42:3a:cd:50:f4:89:b1:9e:39:4f:b6:e9:b1:33:f3:33:
1e:54:57:af:e4:e5:42:09:65:59:e3:d3:54:45:a4:59:57:9c:
d3:88:8c:65:26:9b:f1:25:5c:c8:99:e0:f3:ad:4f:8e:b3:76:
d2:86:76:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:19:44 2026 by rpki-client