Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS402899.roa
File: AS402899.roa (raw, json)
Hash identifier: OUr2attfRwaXJjSAM+iD89BZopKDD9xND+oOJc6KW4E=
Subject key identifier: EA:C1:45:8F:82:74:86:3E:64:8F:8E:2D:F2:71:B0:66:D9:87:F9:0E
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 322EEA783F96756F9895AFCBDEDB84E3EE8748DD
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS402899.roa
Signing time: Thu 08 Oct 2026 13:42:02 +0000
ROA not before: Thu 08 Oct 2026 13:37:02 +0000
ROA not after: Thu 07 Oct 2027 13:42:02 +0000
asID: 402899
IP address blocks: 2a03:f100::/29 maxlen: 29
2a05:b600::/29 maxlen: 29
2a09:c0::/29 maxlen: 29
2a09:240::/29 maxlen: 29
2a09:fe80::/29 maxlen: 29
2a10:ed80::/29 maxlen: 29
2a10:f180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:2e:ea:78:3f:96:75:6f:98:95:af:cb:de:db:84:e3:ee:87:48:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 8 13:37:02 2026 GMT
Not After : Oct 7 13:42:02 2027 GMT
Subject: CN=EAC1458F8274863E648F8E2DF271B066D987F90E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0b:c5:d9:ee:7c:14:c0:e7:3f:58:eb:cc:b0:
d6:aa:bf:85:8f:65:bf:54:d6:54:d9:f8:8c:1f:69:
18:70:f8:53:77:bb:bf:f7:3b:42:be:eb:25:96:40:
ea:75:4e:b3:66:12:ed:b5:57:3b:1d:6e:ca:11:45:
5a:c6:fa:5b:71:3d:65:74:ac:64:06:2d:f8:96:75:
c8:31:79:ab:b2:24:8a:3e:b7:ea:76:a8:91:1a:42:
9e:e4:e3:ba:99:5f:e3:21:50:43:f2:8d:b5:a0:6f:
05:af:05:8d:9d:05:93:de:fa:55:db:69:65:23:13:
58:80:f8:1e:f5:98:88:1c:18:03:cf:9c:43:2e:4b:
09:16:83:11:9b:f5:e3:65:5c:62:24:0e:b9:5b:b0:
42:1b:7a:e3:6f:fb:1c:06:00:85:69:53:3c:9a:34:
46:d7:d2:8c:bb:82:3d:2e:e9:8e:94:6d:e5:66:db:
61:bf:fc:f7:f3:52:7f:9f:60:bf:dc:ca:2b:b4:77:
62:5b:e7:6e:61:e8:32:13:f1:54:9b:d2:be:ca:b0:
9d:a1:16:27:e6:c2:92:9e:b3:d7:a3:15:76:01:80:
55:a3:04:7d:6e:1e:20:62:fe:d2:68:a8:75:7d:b9:
df:2d:42:d8:a0:4d:33:c7:9f:8f:dc:ae:47:ed:ca:
1e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C1:45:8F:82:74:86:3E:64:8F:8E:2D:F2:71:B0:66:D9:87:F9:0E
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS402899.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:f100::/29
2a05:b600::/29
2a09:c0::/29
2a09:240::/29
2a09:fe80::/29
2a10:ed80::/29
2a10:f180::/29
Signature Algorithm: sha256WithRSAEncryption
36:88:19:86:9a:5e:bd:c3:89:25:b5:07:2f:64:17:06:67:09:
1e:ec:e4:4f:ec:33:6f:f9:60:fe:f9:75:a7:83:f0:49:e7:82:
e6:87:6a:42:a0:e2:df:14:47:bc:f8:8b:fd:3d:d8:95:ae:24:
ca:6b:44:d0:04:25:20:4a:f3:53:bc:72:aa:b7:c4:19:95:13:
ca:8d:42:03:28:d4:97:03:2b:e3:65:3b:fb:55:ae:db:d5:8a:
de:4d:8a:7b:f7:ec:4b:73:9d:ca:1e:2d:84:41:66:22:47:a3:
75:38:16:2e:5d:ba:2f:c6:b9:d3:cd:6f:33:96:5b:68:d7:1d:
fb:47:da:23:5f:33:71:5f:9c:a6:c4:bc:d4:8a:e1:49:91:3f:
e1:d9:ac:f3:47:da:ff:8d:ee:12:bf:79:69:7a:a6:42:95:9a:
30:1d:73:58:c5:81:6e:90:6a:c0:38:63:fd:2f:cc:76:c3:e7:
39:34:f4:ae:18:6d:4b:bf:d3:6a:bf:37:75:c8:16:f3:5e:70:
c4:44:48:9f:18:b9:63:98:e1:ef:12:fd:f3:66:fd:4b:b8:40:
e6:1e:3d:39:34:a9:84:7d:59:06:7d:68:36:ed:07:42:f5:b7:
ab:b7:93:a4:ba:c3:e4:17:0f:fb:0d:2f:03:84:16:14:b2:4c:
ff:28:9e:38
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUMi7qeD+WdW+Yla/L3tuE4+6HSN0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNjEwMDgxMzM3MDJaFw0yNzEwMDcxMzQyMDJaMDMxMTAvBgNV
BAMTKEVBQzE0NThGODI3NDg2M0U2NDhGOEUyREYyNzFCMDY2RDk4N0Y5MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhC8XZ7nwUwOc/WOvMsNaqv4WP
Zb9U1lTZ+IwfaRhw+FN3u7/3O0K+6yWWQOp1TrNmEu21VzsdbsoRRVrG+ltxPWV0
rGQGLfiWdcgxeauyJIo+t+p2qJEaQp7k47qZX+MhUEPyjbWgbwWvBY2dBZPe+lXb
aWUjE1iA+B71mIgcGAPPnEMuSwkWgxGb9eNlXGIkDrlbsEIbeuNv+xwGAIVpUzya
NEbX0oy7gj0u6Y6UbeVm22G//PfzUn+fYL/cyiu0d2Jb525h6DIT8VSb0r7KsJ2h
FifmwpKes9ejFXYBgFWjBH1uHiBi/tJoqHV9ud8tQtigTTPHn4/crkftyh65AgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQU6sFFj4J0hj5kj44t8nGwZtmH+Q4wHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTNDAyODk5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAAjAxAwUDKgPx
AAMFAyoFtgADBQMqCQDAAwUDKgkCQAMFAyoJ/oADBQMqEO2AAwUDKhDxgDANBgkq
hkiG9w0BAQsFAAOCAQEANogZhppevcOJJbUHL2QXBmcJHuzkT+wzb/lg/vl1p4Pw
SeeC5odqQqDi3xRHvPiL/T3Yla4kymtE0AQlIErzU7xyqrfEGZUTyo1CAyjUlwMr
42U7+1Wu29WK3k2Ke/fsS3Odyh4thEFmIkejdTgWLl26L8a5081vM5ZbaNcd+0fa
I18zcV+cpsS81IrhSZE/4dms80fa/43uEr95aXqmQpWaMB1zWMWBbpBqwDhj/S/M
dsPnOTT0rhhtS7/Tar83dcgW815wxERInxi5Y5jh7xL982b9S7hA5h49OTSphH1Z
Bn1oNu0HQvW3q7eTpLrD5BcP+w0vA4QWFLJM/yieOA==
-----END CERTIFICATE-----
Generated at Mon Oct 19 23:36:25 2026 by rpki-client