Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS401362.roa
File: AS401362.roa (raw, json)
Hash identifier: 5R75gv6O585JwWqo0Ab6qec8buuQvZ94L3Of4ONJOn4=
Subject key identifier: 76:24:5D:2C:A4:19:37:00:57:DE:81:43:EA:F6:8C:E5:30:A3:B5:2D
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6F3511979CACDB6556E59EC129409CEFD9994720
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS401362.roa
Signing time: Tue 01 Sep 2026 12:14:12 +0000
ROA not before: Tue 01 Sep 2026 12:09:12 +0000
ROA not after: Tue 31 Aug 2027 12:14:12 +0000
asID: 401362
IP address blocks: 51.194.188.0/24 maxlen: 24
51.241.99.0/24 maxlen: 24
188.220.3.0/24 maxlen: 24
188.220.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:35:11:97:9c:ac:db:65:56:e5:9e:c1:29:40:9c:ef:d9:99:47:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 1 12:09:12 2026 GMT
Not After : Aug 31 12:14:12 2027 GMT
Subject: CN=76245D2CA419370057DE8143EAF68CE530A3B52D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b0:99:62:9c:e7:f6:e4:f0:a3:ca:75:00:5e:
a0:16:78:68:d9:24:fe:72:21:b8:47:b7:a3:3e:68:
22:72:d4:87:8b:b0:2c:fa:6a:17:62:fc:32:13:9f:
9b:54:fb:58:ea:f0:18:91:45:fd:c9:c9:dc:f3:53:
7a:7e:33:70:d2:7a:80:77:b1:22:90:d7:db:3a:ed:
cc:92:22:ff:ca:c6:19:1b:3f:05:1b:f3:b7:d0:a2:
7d:b9:c6:49:f6:1b:98:f5:a3:ea:52:db:2f:29:b7:
9b:26:4a:69:96:bb:3c:96:dc:a0:86:39:d4:25:9c:
9e:4c:5b:b0:0c:6e:d1:6a:8d:69:14:78:00:27:aa:
2f:dd:f6:ef:08:bf:20:63:65:a8:f8:65:d1:24:85:
d1:83:97:1e:2e:08:11:64:25:e0:4c:7f:68:0a:a1:
ad:80:c5:c1:7e:27:93:5c:92:35:76:a5:b0:25:e0:
87:67:5f:f3:15:50:d7:dd:c5:00:a6:d6:39:d2:e8:
80:0b:38:b6:0b:61:75:db:a3:bf:06:23:a2:86:10:
19:55:85:d5:cf:d3:79:17:4b:55:b5:c0:46:f4:25:
63:f9:8a:7e:f5:0e:66:71:73:18:13:44:94:80:be:
d6:5a:92:7f:f4:d8:30:fa:d6:6b:8b:0a:31:1b:59:
71:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:24:5D:2C:A4:19:37:00:57:DE:81:43:EA:F6:8C:E5:30:A3:B5:2D
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS401362.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.188.0/24
51.241.99.0/24
188.220.3.0/24
188.220.120.0/24
Signature Algorithm: sha256WithRSAEncryption
32:00:d8:f7:29:5b:a3:51:e6:45:73:76:88:2d:cf:47:ac:bf:
3b:d6:eb:1d:53:9e:51:63:73:e6:5a:31:51:2e:cd:7f:45:11:
53:77:8c:44:58:16:b4:a1:e7:20:af:62:16:da:40:50:ba:c0:
76:ac:32:6f:97:28:db:5a:a9:37:a2:d1:51:9d:44:d1:5d:7b:
41:ca:64:c1:31:ab:62:44:42:9b:cd:3e:fb:87:cb:1c:e0:46:
e9:c1:ec:57:8e:10:04:f7:1e:62:0c:f6:2e:35:a5:62:b7:d4:
04:53:37:e9:60:ee:8f:b1:ca:8c:05:44:fd:2e:4e:e5:5a:64:
1a:d0:a9:a1:35:ee:41:c2:0f:f1:a7:0f:a1:99:20:b2:e1:30:
8e:7f:f9:c9:28:8f:57:04:5a:a2:80:2a:a5:7c:fd:86:2e:cd:
7c:0b:da:ad:ca:40:0e:83:3d:7b:66:f0:22:a4:8e:d7:da:05:
f4:13:0d:81:f8:a7:51:08:6c:bb:10:5a:7b:be:5d:d1:dd:68:
52:30:85:3e:5d:85:b3:97:00:2e:6a:38:f5:61:30:08:88:c9:
33:cf:23:8e:5f:41:0c:17:8a:73:ec:fa:ba:b8:2b:f0:6f:49:
b6:db:05:f8:06:33:6e:65:fd:f1:83:4b:c3:a7:a3:7b:5e:da:
dc:ec:4e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 07:12:37 2026 by rpki-client