Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS402671.roa
File: AS402671.roa (raw, json)
Hash identifier: oDsgsiqWyzv0aH6RsNV6CCkd/Lbe5Al9mmMI0514ePk=
Subject key identifier: B7:25:57:8B:17:83:4C:1C:5A:79:97:7A:DB:EB:75:35:0D:24:17:57
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 2C793EAE3EBF014FC85FC838DB0DC8F0B2D4FD8F
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS402671.roa
Signing time: Thu 08 Oct 2026 13:43:09 +0000
ROA not before: Thu 08 Oct 2026 13:38:09 +0000
ROA not after: Thu 07 Oct 2027 13:43:09 +0000
asID: 402671
IP address blocks: 2a04:7a80::/29 maxlen: 29
2a05:c580::/29 maxlen: 29
2a09:1c0::/29 maxlen: 29
2a0a:5700::/29 maxlen: 29
2a0b:2e40::/29 maxlen: 29
2a10:ee80::/29 maxlen: 29
2a10:f280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:79:3e:ae:3e:bf:01:4f:c8:5f:c8:38:db:0d:c8:f0:b2:d4:fd:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 8 13:38:09 2026 GMT
Not After : Oct 7 13:43:09 2027 GMT
Subject: CN=B725578B17834C1C5A79977ADBEB75350D241757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:db:45:69:14:18:d3:3e:85:98:c7:be:33:c0:
f3:1e:7c:79:82:15:6f:33:fb:aa:af:aa:58:51:20:
bc:0a:61:1e:92:66:20:63:f9:9e:6a:17:19:fd:32:
31:d6:a0:f2:df:3d:b2:c8:0e:be:9e:b6:11:89:01:
c4:a6:48:1a:33:4f:33:8d:15:2e:b2:a7:78:06:36:
55:2d:c2:bd:ed:c8:2d:89:05:f5:22:d4:e8:c6:f2:
34:a6:14:aa:5c:b6:28:ec:f1:90:b7:1c:74:5a:b5:
04:95:61:2b:b8:53:90:38:11:9e:b3:98:0a:ab:7b:
7e:c9:e1:e8:41:d1:ae:33:a2:ad:c7:e7:4e:f2:1b:
af:cf:21:da:cd:a8:e0:95:f6:22:bc:25:49:ba:a0:
ac:98:ad:2c:d5:bf:00:5f:39:65:42:58:69:36:59:
28:1d:5c:4a:c8:dd:49:c0:9d:b0:d0:15:c7:85:cb:
4e:6f:ce:50:ea:30:40:82:54:51:a0:86:df:55:e9:
18:f4:b0:41:d1:53:6a:35:8a:d5:87:51:a2:2a:f9:
ad:0a:45:02:da:d0:82:52:cf:f3:d5:c0:70:50:9f:
a3:0a:9f:b0:89:35:4a:93:22:a8:40:10:db:ca:ef:
fb:df:81:6b:1e:fa:6a:75:aa:60:81:8c:59:f4:d1:
52:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:25:57:8B:17:83:4C:1C:5A:79:97:7A:DB:EB:75:35:0D:24:17:57
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS402671.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:7a80::/29
2a05:c580::/29
2a09:1c0::/29
2a0a:5700::/29
2a0b:2e40::/29
2a10:ee80::/29
2a10:f280::/29
Signature Algorithm: sha256WithRSAEncryption
03:f2:2f:8e:c5:68:f7:c6:d3:32:79:05:aa:8f:85:af:fd:d0:
8c:65:dd:05:c0:f0:c8:af:49:a4:00:03:12:06:57:b3:22:2c:
64:0d:46:77:e6:7b:e1:58:00:5c:32:73:ab:79:1e:f2:96:2f:
3d:08:f7:80:37:7a:ea:0c:31:ae:17:35:cd:bd:91:c4:19:b7:
3f:9c:a0:00:d4:4c:d4:e8:25:82:d1:05:25:b3:8d:f5:8b:f8:
47:a7:1d:f8:4b:c0:e3:00:85:57:6c:d7:0e:b3:a4:24:e3:9c:
8d:cd:9d:f5:57:09:75:47:f7:74:52:a2:f1:0c:c7:cc:c2:ee:
b5:51:18:c3:67:c2:be:bb:d6:01:df:ab:4d:52:57:28:53:01:
85:c9:3c:a2:06:f7:d3:10:f6:15:94:d3:bc:46:6c:58:e6:13:
a1:7c:cf:d0:b1:dc:bd:7a:9e:10:db:c8:ac:08:4d:a5:be:ff:
10:ce:19:40:b2:f9:b8:ae:64:67:3d:f6:19:d1:93:02:f5:96:
67:8f:3d:33:5f:ed:37:b8:c4:70:1e:e8:1d:3b:ff:73:47:95:
08:f0:3f:c9:d1:d9:91:43:ce:cc:6e:92:62:59:08:9e:d2:2b:
99:5f:88:76:c0:04:8c:a8:c6:8e:e5:88:af:55:8d:2a:71:4d:
89:68:a3:be
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIULHk+rj6/AU/IX8g42w3I8LLU/Y8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNjEwMDgxMzM4MDlaFw0yNzEwMDcxMzQzMDlaMDMxMTAvBgNV
BAMTKEI3MjU1NzhCMTc4MzRDMUM1QTc5OTc3QURCRUI3NTM1MEQyNDE3NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA20VpFBjTPoWYx74zwPMefHmC
FW8z+6qvqlhRILwKYR6SZiBj+Z5qFxn9MjHWoPLfPbLIDr6ethGJAcSmSBozTzON
FS6yp3gGNlUtwr3tyC2JBfUi1OjG8jSmFKpctijs8ZC3HHRatQSVYSu4U5A4EZ6z
mAqre37J4ehB0a4zoq3H507yG6/PIdrNqOCV9iK8JUm6oKyYrSzVvwBfOWVCWGk2
WSgdXErI3UnAnbDQFceFy05vzlDqMECCVFGght9V6Rj0sEHRU2o1itWHUaIq+a0K
RQLa0IJSz/PVwHBQn6MKn7CJNUqTIqhAENvK7/vfgWse+mp1qmCBjFn00VItAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUtyVXixeDTBxaeZd62+t1NQ0kF1cwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTNDAyNjcxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAAjAxAwUDKgR6
gAMFAyoFxYADBQMqCQHAAwUDKgpXAAMFAyoLLkADBQMqEO6AAwUDKhDygDANBgkq
hkiG9w0BAQsFAAOCAQEAA/IvjsVo98bTMnkFqo+Fr/3QjGXdBcDwyK9JpAADEgZX
syIsZA1Gd+Z74VgAXDJzq3ke8pYvPQj3gDd66gwxrhc1zb2RxBm3P5ygANRM1Ogl
gtEFJbON9Yv4R6cd+EvA4wCFV2zXDrOkJOOcjc2d9VcJdUf3dFKi8QzHzMLutVEY
w2fCvrvWAd+rTVJXKFMBhck8ogb30xD2FZTTvEZsWOYToXzP0LHcvXqeENvIrAhN
pb7/EM4ZQLL5uK5kZz32GdGTAvWWZ489M1/tN7jEcB7oHTv/c0eVCPA/ydHZkUPO
zG6SYlkIntIrmV+IdsAEjKjGjuWIr1WNKnFNiWijvg==
-----END CERTIFICATE-----
Generated at Tue Oct 20 00:13:28 2026 by rpki-client