Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS402215.roa
File: AS402215.roa (raw, json)
Hash identifier: LTen+nJXgasb7Xc0xQ+8htbGvNDdbdCZOXH3AI4ANAw=
Subject key identifier: 84:6E:97:99:62:F0:52:D3:2E:EE:83:56:C0:DF:09:AD:79:1A:51:5F
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 587EF4498563BF35CB1B0AEB2F38E318C12A1032
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS402215.roa
Signing time: Thu 02 Jul 2026 09:27:24 +0000
ROA not before: Thu 02 Jul 2026 09:22:24 +0000
ROA not after: Thu 01 Jul 2027 09:27:24 +0000
asID: 402215
IP address blocks: 152.89.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:12:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:7e:f4:49:85:63:bf:35:cb:1b:0a:eb:2f:38:e3:18:c1:2a:10:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 2 09:22:24 2026 GMT
Not After : Jul 1 09:27:24 2027 GMT
Subject: CN=846E979962F052D32EEE8356C0DF09AD791A515F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e1:0b:a9:5e:c8:09:61:a5:17:f0:3b:5f:c6:
f2:0b:c6:91:b9:03:8d:02:c8:66:d3:8b:cd:9e:80:
d4:e6:fd:5b:00:53:c0:ee:c9:73:e5:cb:b5:4b:1e:
ef:63:bf:30:ee:95:49:81:ff:95:3b:7c:e3:c8:67:
8e:03:e4:95:0b:00:2d:ca:fe:23:ae:8a:13:42:d0:
f1:6c:4f:42:8a:6f:5c:ef:a7:79:be:29:37:3d:ce:
fb:45:0e:c8:53:c1:71:89:f4:23:cc:e2:dd:e7:ae:
c5:18:0e:06:8d:27:c3:9c:b7:44:bb:54:7c:53:85:
c0:70:bb:ed:a5:c4:9f:41:5d:79:0e:dd:bf:c0:41:
6b:91:7e:07:e1:69:3f:bc:10:93:95:18:aa:11:a4:
18:cb:b6:1a:30:50:a9:20:42:7e:f8:ed:80:d9:ae:
aa:9a:5a:d7:ed:6c:9e:c9:19:ea:28:aa:ae:88:23:
b8:83:f2:e2:a0:b8:62:9e:23:75:91:19:b2:a8:1b:
77:64:0b:10:b0:22:3c:c1:61:aa:f2:15:ff:9d:51:
0a:85:fd:f4:5d:5e:ce:87:72:09:cb:63:95:ae:18:
b1:6d:f2:b9:cb:f6:4a:74:c4:ef:87:ff:7d:39:d7:
b2:12:83:90:13:2d:28:4c:aa:cb:90:48:44:b4:36:
db:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6E:97:99:62:F0:52:D3:2E:EE:83:56:C0:DF:09:AD:79:1A:51:5F
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS402215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.251.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:45:4c:f0:2b:ca:f0:3b:09:7f:86:c8:cc:f1:e2:be:1b:f8:
9e:f0:be:35:c8:5b:db:93:fe:4b:5b:81:cd:2c:1e:a0:45:0f:
30:64:e6:e6:75:5b:32:f2:a2:1a:d8:95:71:a9:80:35:47:cb:
0c:57:fd:88:c1:53:02:80:08:83:a4:83:3d:0f:e6:74:61:f6:
3f:e9:7c:8b:9c:58:0a:4d:73:7d:bd:2f:f0:11:f4:15:f2:8f:
ac:12:78:1f:c7:e3:6e:c4:f1:dc:d6:da:fb:fc:4d:7c:28:d1:
dd:d8:25:d2:83:88:08:6b:2a:69:33:3c:af:98:40:1f:f8:dc:
24:a2:73:f1:09:f3:8c:7a:db:0b:a9:3f:43:77:86:83:a4:98:
ac:b3:75:2f:29:84:29:12:35:51:f4:46:3d:79:06:f7:f7:e9:
9d:c9:62:79:3a:05:ea:cb:2c:1f:68:af:1d:03:5c:59:49:0b:
0b:48:4b:c2:0f:dc:87:bc:14:18:25:45:68:bb:cc:a3:b1:06:
e2:6e:a8:5b:84:96:de:77:52:57:72:ac:d6:d0:39:53:a9:96:
a5:ac:76:65:1a:ac:6c:b3:ce:70:bc:4a:0b:53:65:67:62:fe:
f0:b0:69:b8:2b:09:15:38:ac:3e:b0:89:d9:02:b8:5a:4f:40:
4e:89:6e:c7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUWH70SYVjvzXLGwrrLzjjGMEqEDIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNjA3MDIwOTIyMjRaFw0yNzA3MDEwOTI3MjRaMDMxMTAvBgNV
BAMTKDg0NkU5Nzk5NjJGMDUyRDMyRUVFODM1NkMwREYwOUFENzkxQTUxNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg4QupXsgJYaUX8DtfxvILxpG5
A40CyGbTi82egNTm/VsAU8DuyXPly7VLHu9jvzDulUmB/5U7fOPIZ44D5JULAC3K
/iOuihNC0PFsT0KKb1zvp3m+KTc9zvtFDshTwXGJ9CPM4t3nrsUYDgaNJ8Oct0S7
VHxThcBwu+2lxJ9BXXkO3b/AQWuRfgfhaT+8EJOVGKoRpBjLthowUKkgQn747YDZ
rqqaWtftbJ7JGeooqq6II7iD8uKguGKeI3WRGbKoG3dkCxCwIjzBYaryFf+dUQqF
/fRdXs6HcgnLY5WuGLFt8rnL9kp0xO+H/30517ISg5ATLShMqsuQSES0NtvJAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUhG6XmWLwUtMu7oNWwN8JrXkaUV8wHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTNDAyMjE1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmFn7
MA0GCSqGSIb3DQEBCwUAA4IBAQC7RUzwK8rwOwl/hsjM8eK+G/ie8L41yFvbk/5L
W4HNLB6gRQ8wZObmdVsy8qIa2JVxqYA1R8sMV/2IwVMCgAiDpIM9D+Z0YfY/6XyL
nFgKTXN9vS/wEfQV8o+sEngfx+NuxPHc1tr7/E18KNHd2CXSg4gIayppMzyvmEAf
+NwkonPxCfOMetsLqT9Dd4aDpJiss3UvKYQpEjVR9EY9eQb39+mdyWJ5OgXqyywf
aK8dA1xZSQsLSEvCD9yHvBQYJUVou8yjsQbibqhbhJbed1JXcqzW0DlTqZalrHZl
Gqxss85wvEoLU2VnYv7wsGm4KwkVOKw+sInZArhaT0BOiW7H
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:28 2026 by rpki-client