Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS402995.roa
File: AS402995.roa (raw, json)
Hash identifier: Oay8Kqnh6SfHuuxjFrxVEaukbn7q+nHfxexmu0a1Rpw=
Subject key identifier: FC:BF:ED:00:C9:C5:79:9A:4B:CA:BA:3F:EE:9F:C3:82:D2:FF:AF:18
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 10B9641910047FE34E3805E977A245D7BB68DD6A
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS402995.roa
Signing time: Sat 24 Oct 2026 16:13:38 +0000
ROA not before: Sat 24 Oct 2026 16:08:38 +0000
ROA not after: Sat 23 Oct 2027 16:13:38 +0000
asID: 402995
IP address blocks: 2a14:7582:c000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:b9:64:19:10:04:7f:e3:4e:38:05:e9:77:a2:45:d7:bb:68:dd:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 24 16:08:38 2026 GMT
Not After : Oct 23 16:13:38 2027 GMT
Subject: CN=FCBFED00C9C5799A4BCABA3FEE9FC382D2FFAF18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:3c:7e:44:29:fb:c1:66:a4:1a:bc:3e:59:
47:4d:30:c4:1e:26:54:a8:69:c7:e5:c4:45:c4:24:
74:90:fb:ee:dd:0d:a3:b7:58:52:fe:1b:0e:f0:a2:
8d:c2:76:6a:2d:ff:d6:4e:08:e3:fd:c5:e6:c0:35:
cd:4f:ef:a4:39:56:5b:b0:f1:4f:88:99:93:13:a4:
7c:e2:70:af:8b:a3:d1:65:5c:95:c6:f6:33:e9:b0:
38:0c:9a:7a:57:0e:99:f4:bb:a9:69:75:97:d8:4d:
a9:18:53:a3:75:db:dd:f4:a3:e0:15:6b:ba:18:56:
4c:ed:0e:b3:2d:34:e4:14:18:3b:34:1f:c7:19:65:
fc:cb:23:3f:c3:d3:e4:73:f2:bd:40:b1:ee:68:9f:
da:83:3d:e0:51:6e:26:bd:f5:5e:f4:2a:1e:20:dc:
41:db:1b:17:81:d1:c2:80:39:2d:a6:21:fd:3e:af:
17:63:7f:cf:d7:ea:ae:30:db:6e:75:6e:1d:ee:89:
d0:36:3d:6d:9c:47:fb:09:0d:6c:f9:1e:96:54:d6:
27:86:1c:ce:ca:aa:2b:e1:2d:26:be:d1:c2:f1:a0:
3d:05:90:39:a0:26:57:f9:90:b1:2a:d5:06:1f:79:
23:cd:8f:0b:ed:b3:a8:0c:4a:a0:31:4a:57:f5:7c:
34:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BF:ED:00:C9:C5:79:9A:4B:CA:BA:3F:EE:9F:C3:82:D2:FF:AF:18
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS402995.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7582:c000::/36
Signature Algorithm: sha256WithRSAEncryption
46:d1:ee:35:a5:ca:74:ec:6f:90:8c:06:70:0e:c7:53:3d:26:
1a:56:bf:32:fb:ee:b5:41:7a:ad:8d:96:88:79:b2:12:49:c4:
eb:b5:3c:22:d9:07:a8:a0:74:35:91:b0:01:6f:39:a9:81:19:
52:a1:5c:7a:99:24:68:9d:ed:1d:cc:86:18:8d:95:fe:1f:15:
73:3c:86:d0:a1:c6:41:12:87:09:87:50:b2:c4:27:98:16:43:
77:87:c7:c5:d8:7a:7c:c8:58:bb:90:6a:d3:52:e4:5a:01:ca:
3a:fb:3e:1f:2b:58:30:1a:2f:5a:1b:1d:7d:48:19:f9:66:57:
82:d4:fb:6c:df:1c:ac:38:52:c3:04:fa:8d:ff:cf:56:a8:2c:
9b:c7:74:05:c6:6e:87:49:87:85:58:fc:2b:fb:fd:8e:46:33:
5a:ec:60:d7:aa:7c:f6:da:75:f7:60:79:e3:84:5d:b0:d5:62:
1d:3c:66:6c:fa:cd:0f:83:ed:17:5b:cf:6e:e0:95:ce:77:d0:
59:d8:1e:cb:91:80:30:de:2a:49:cf:16:1a:29:57:2d:a5:6e:
37:d6:54:e3:1d:12:5f:1c:39:18:85:64:a1:86:23:da:f0:75:
19:d5:10:b9:b7:88:ff:ad:84:0e:35:5d:9b:70:58:bb:3f:88:
22:fa:35:b9
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUELlkGRAEf+NOOAXpd6JF17to3WowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjEwMjQxNjA4MzhaFw0yNzEwMjMxNjEzMzhaMDMxMTAvBgNV
BAMTKEZDQkZFRDAwQzlDNTc5OUE0QkNBQkEzRkVFOUZDMzgyRDJGRkFGMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Izx+RCn7wWakGrw+WUdNMMQe
JlSoacflxEXEJHSQ++7dDaO3WFL+Gw7woo3Cdmot/9ZOCOP9xebANc1P76Q5Vluw
8U+ImZMTpHzicK+Lo9FlXJXG9jPpsDgMmnpXDpn0u6lpdZfYTakYU6N12930o+AV
a7oYVkztDrMtNOQUGDs0H8cZZfzLIz/D0+Rz8r1Ase5on9qDPeBRbia99V70Kh4g
3EHbGxeB0cKAOS2mIf0+rxdjf8/X6q4w2251bh3uidA2PW2cR/sJDWz5HpZU1ieG
HM7KqivhLSa+0cLxoD0FkDmgJlf5kLEq1QYfeSPNjwvts6gMSqAxSlf1fDQhAgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQU/L/tAMnFeZpLyro/7p/DgtL/rxgwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTNDAyOTk1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKhR1
gsAwDQYJKoZIhvcNAQELBQADggEBAEbR7jWlynTsb5CMBnAOx1M9JhpWvzL77rVB
eq2Nloh5shJJxOu1PCLZB6igdDWRsAFvOamBGVKhXHqZJGid7R3MhhiNlf4fFXM8
htChxkEShwmHULLEJ5gWQ3eHx8XYenzIWLuQatNS5FoByjr7Ph8rWDAaL1obHX1I
GflmV4LU+2zfHKw4UsME+o3/z1aoLJvHdAXGbodJh4VY/Cv7/Y5GM1rsYNeqfPba
dfdgeeOEXbDVYh08Zmz6zQ+D7Rdbz27glc530FnYHsuRgDDeKknPFhopVy2lbjfW
VOMdEl8cORiFZKGGI9rwdRnVELm3iP+thA41XZtwWLs/iCL6Nbk=
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:45:06 2026 by rpki-client