Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS402215.roa
File: AS402215.roa (raw, json)
Hash identifier: 6HXa5wVSGLpZx9TuEojmud3lue76tsNcFqHzAm+Xm2I=
Subject key identifier: BE:34:52:99:8B:40:2B:71:F8:0A:AE:14:3C:57:10:10:6D:58:8A:F0
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 53F1CBF9D5B7A9103148F395B50C293796B457B0
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS402215.roa
Signing time: Sun 23 Aug 2026 17:03:04 +0000
ROA not before: Sun 23 Aug 2026 16:58:04 +0000
ROA not after: Sun 22 Aug 2027 17:03:04 +0000
asID: 402215
IP address blocks: 186.241.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:f1:cb:f9:d5:b7:a9:10:31:48:f3:95:b5:0c:29:37:96:b4:57:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Aug 23 16:58:04 2026 GMT
Not After : Aug 22 17:03:04 2027 GMT
Subject: CN=BE3452998B402B71F80AAE143C5710106D588AF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f5:5d:7a:40:fc:53:51:d3:0c:6e:d8:3f:07:
59:ee:a7:7f:45:62:62:41:61:b4:e4:9c:f2:1f:2e:
fd:0b:72:b9:4f:6a:4a:51:a0:18:2f:cf:fd:ef:71:
3a:15:a2:c6:20:8f:51:f4:3b:11:04:a1:5a:f1:a7:
93:a1:bc:56:b7:2a:68:ac:a0:9c:e5:92:cb:29:1c:
a7:92:94:d6:a3:54:51:02:5b:04:4e:93:69:4c:4e:
a2:24:ab:0c:ea:bb:8e:e4:de:0b:3a:1f:12:58:9b:
29:af:1d:3e:eb:76:5e:d4:e4:6b:1e:46:90:fd:80:
60:a9:fe:53:c1:43:f7:bd:c8:96:19:ba:80:53:c6:
66:bf:ee:a0:37:f7:ce:f0:4c:2f:7a:a3:d3:40:a5:
9a:38:bf:3c:f1:49:79:3b:11:eb:bd:26:0e:ae:9a:
a4:32:d6:74:6d:74:99:c4:c9:b6:99:25:7a:65:a2:
99:bd:a1:55:0f:93:be:69:d7:eb:ce:2b:75:90:10:
b4:7e:3a:60:c0:52:c6:ea:91:d1:d5:52:a2:c7:09:
3a:86:86:46:d9:af:97:92:3d:50:3d:a9:7a:11:b9:
cd:72:18:ab:fe:93:bd:78:97:73:31:1f:42:59:48:
e8:7a:c1:0d:dc:2e:32:0a:27:76:ab:d9:72:17:d3:
14:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:34:52:99:8B:40:2B:71:F8:0A:AE:14:3C:57:10:10:6D:58:8A:F0
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS402215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.241.178.0/24
Signature Algorithm: sha256WithRSAEncryption
98:a4:9b:36:9e:ac:f5:d8:2e:68:53:25:40:23:1b:b6:88:a1:
08:b9:9a:2a:fc:a9:46:08:45:ee:46:1f:9c:f1:7b:71:8a:32:
ef:7d:a9:ff:57:19:3b:42:1f:74:c0:e1:89:98:f3:30:3d:09:
7b:fa:f2:a8:0b:0a:42:af:76:51:7b:f1:16:93:e9:77:91:e0:
e7:cb:9f:82:09:99:62:74:cf:f3:df:25:8d:51:1a:ce:d6:82:
a6:7f:c8:ab:55:1f:28:25:db:0e:b8:2a:05:11:60:74:da:d2:
fb:d4:f5:df:50:46:c5:37:a5:01:d6:6b:2e:c3:cf:7b:95:f9:
aa:e7:9b:6a:97:84:b8:86:d7:67:a4:8f:70:86:c4:00:b7:19:
2c:b6:fe:ee:be:d1:28:96:0f:8c:3d:64:f6:e2:6a:db:1c:f5:
6d:f5:c7:be:f7:0c:8f:ef:ad:38:51:1e:05:ed:1a:91:22:11:
8b:74:bf:b9:d2:6f:03:61:ee:07:7c:84:cd:83:f6:dd:e1:e7:
6e:6b:1c:e1:5f:2e:ee:d7:e6:fa:7d:7d:1d:9d:42:ce:b5:d0:
b2:9a:14:7d:0e:e3:18:ae:26:60:bc:6b:7d:8c:1b:60:c0:da:
74:ef:75:0c:d5:6f:2e:79:83:b1:32:46:b7:8c:5f:69:ff:95:
76:7a:ee:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:33:09 2026 by rpki-client