Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS401362.roa
File: AS401362.roa (raw, json)
Hash identifier: SQ3tCpxZPwxEu9sbr3ddy0VikGQ7qjzDfodQaowmf7E=
Subject key identifier: A7:02:5C:9B:03:99:01:F0:04:94:DE:71:EE:14:4B:2C:CE:33:BD:D9
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4FEBD39BBA8002FD74FAEA060637D2ADD36F986C
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS401362.roa
Signing time: Wed 24 Jun 2026 09:39:59 +0000
ROA not before: Wed 24 Jun 2026 09:34:59 +0000
ROA not after: Wed 23 Jun 2027 09:39:59 +0000
asID: 401362
IP address blocks: 51.241.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:eb:d3:9b:ba:80:02:fd:74:fa:ea:06:06:37:d2:ad:d3:6f:98:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 24 09:34:59 2026 GMT
Not After : Jun 23 09:39:59 2027 GMT
Subject: CN=A7025C9B039901F00494DE71EE144B2CCE33BDD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:03:86:c2:cb:a4:00:d8:da:fa:d6:80:94:
3d:6e:10:fb:8d:e1:ea:b3:41:4f:09:25:e2:6f:0c:
3d:91:34:43:e1:00:18:1e:6a:01:61:d7:3f:34:4c:
ee:fe:7a:70:1e:53:96:6e:3e:9b:94:cb:4c:e2:10:
0b:01:1f:32:31:8f:04:cc:ed:51:2d:dd:79:c0:5b:
b8:eb:a4:8b:52:4e:c8:90:a3:26:14:e7:14:aa:d4:
ee:e0:2f:de:ad:af:63:f6:95:e8:d8:8c:57:7a:30:
da:30:ee:a3:b9:dc:5b:45:aa:52:19:63:86:17:62:
92:16:d9:7b:c6:a5:23:a2:32:1a:fa:5a:c5:8b:b6:
84:60:b0:b8:44:8f:d9:b9:a2:5b:b7:2f:06:80:9c:
d9:ca:45:6e:7f:40:75:ed:85:7b:5a:88:45:b8:2e:
11:90:e7:fe:c3:4c:3f:d7:be:0a:dc:e4:77:99:68:
38:b7:f2:15:a4:2c:d1:6d:34:1d:a2:bb:5c:0b:61:
25:90:b7:40:50:b3:ed:34:f1:a1:8d:a2:e9:db:64:
68:79:15:7a:a7:d1:76:17:66:60:fe:a9:8b:7b:c1:
c4:ef:59:84:2e:59:d7:7b:eb:4b:0d:c6:1f:09:5e:
a2:2c:8c:1e:02:b2:89:a7:49:0f:eb:00:f0:c0:db:
ca:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:02:5C:9B:03:99:01:F0:04:94:DE:71:EE:14:4B:2C:CE:33:BD:D9
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS401362.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.138.0/24
Signature Algorithm: sha256WithRSAEncryption
81:1c:fd:3e:c5:d1:0d:f4:bb:c5:9a:65:b4:e1:ac:7c:f4:07:
9b:ff:e9:94:c4:55:01:3d:b9:c1:cf:dd:20:8e:94:c7:08:2b:
de:40:b2:44:2c:27:30:f8:b6:42:af:7b:23:49:fb:33:57:20:
e1:78:99:4d:5a:0c:9a:4c:16:1a:63:f1:f8:5e:d1:fb:2a:64:
b1:a4:fc:69:b5:7c:4f:b7:da:29:3f:73:a7:fe:6f:34:a0:42:
d9:39:5b:6c:c9:d2:b1:de:ad:58:8d:db:59:8f:73:57:65:93:
17:81:96:8e:e2:2b:ef:ce:13:8e:10:d3:29:c0:6d:7e:f0:35:
f5:42:64:5a:0e:63:5e:a1:82:cf:ff:e6:c8:09:ba:4f:a5:4b:
b7:4e:f6:92:b8:4d:9e:b0:84:fa:e1:75:2e:6a:f0:87:cd:19:
e0:ee:d8:5e:cc:fb:b7:ce:ee:c5:f9:d1:4b:a0:db:af:11:08:
d3:5d:3e:c1:8f:eb:cd:9f:a5:a6:06:33:a1:50:76:d9:64:e4:
4c:c2:1b:cd:63:fc:5c:ea:04:0d:d4:5f:fb:03:84:3a:d7:48:
5a:96:3c:aa:11:cd:eb:ea:f1:72:7c:c8:38:74:8c:07:67:64:
7d:19:33:c9:12:75:54:f5:d5:1c:19:bb:24:ca:ef:d2:05:37:
95:0c:95:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:42:47 2026 by rpki-client