Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402252.roa
File: AS402252.roa (raw, json)
Hash identifier: LV0kOpTDghKvKH2VqQRS7c8lMnm7sY6gNsysBEn2+k0=
Subject key identifier: 57:93:17:8F:84:EF:F5:E9:CA:D3:08:41:FC:90:E4:48:8C:86:78:5E
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0FB825DF2ABADDFF2BE2C1F231DF299AE3B05F77
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402252.roa
Signing time: Mon 25 May 2026 15:41:08 +0000
ROA not before: Mon 25 May 2026 15:36:08 +0000
ROA not after: Mon 24 May 2027 15:41:08 +0000
asID: 402252
IP address blocks: 51.146.23.0/24 maxlen: 24
78.105.113.0/24 maxlen: 24
78.105.118.0/24 maxlen: 24
78.105.125.0/24 maxlen: 24
78.105.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:b8:25:df:2a:ba:dd:ff:2b:e2:c1:f2:31:df:29:9a:e3:b0:5f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 25 15:36:08 2026 GMT
Not After : May 24 15:41:08 2027 GMT
Subject: CN=5793178F84EFF5E9CAD30841FC90E4488C86785E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bf:ad:6e:f7:3c:20:c7:45:e2:2b:5c:59:7b:
d6:8b:6d:a1:ee:72:d7:cb:36:51:bd:5c:ba:af:7e:
d6:13:20:1b:2e:fd:33:17:98:05:70:ac:e8:56:2c:
bc:40:5c:9f:63:03:c4:ba:49:31:87:3e:37:a0:10:
d9:fd:7f:df:4e:3c:f7:32:77:a2:d1:1b:5c:40:1b:
cc:eb:95:6c:d3:25:e8:33:5e:18:ed:1c:6b:63:53:
ad:a6:01:cb:e6:e1:b5:ea:63:3f:85:3c:61:60:88:
47:74:b3:63:98:e8:a5:fc:8f:72:c7:19:6a:14:80:
b8:4d:5c:24:0c:06:d4:76:ad:d7:c0:0f:08:f6:ca:
f4:26:72:9b:76:aa:f0:1b:ce:d0:b1:7e:e0:62:62:
dd:06:4f:35:01:e2:f4:61:7d:91:a2:5e:1a:b0:30:
3a:13:3c:a2:ce:bf:d2:d8:a4:db:32:8b:25:37:42:
39:c8:b9:f1:91:c5:ff:f1:0d:9e:a6:48:05:74:96:
49:e8:56:5b:7f:aa:95:c1:a9:19:dd:0c:88:c9:b8:
03:04:5b:e0:ab:fb:f1:63:6a:ff:9b:7c:72:57:d7:
70:06:eb:b5:6f:7f:82:8c:ae:50:68:0c:51:7c:3b:
f0:97:f5:41:2a:cc:bb:85:86:8b:0e:fe:4c:45:31:
75:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:93:17:8F:84:EF:F5:E9:CA:D3:08:41:FC:90:E4:48:8C:86:78:5E
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.23.0/24
78.105.113.0/24
78.105.118.0/24
78.105.125.0/24
78.105.247.0/24
Signature Algorithm: sha256WithRSAEncryption
95:9b:22:ff:df:56:0b:e2:5e:3c:c3:57:81:4c:5b:5d:d4:5b:
b2:d7:c6:18:79:df:53:a5:33:b0:51:ad:27:34:6f:e8:7d:21:
0d:c2:84:9b:db:52:5d:a5:62:e7:53:91:fd:b5:9b:02:82:8d:
25:bf:0d:3a:67:f1:a0:06:3f:87:51:18:ef:9b:a1:4a:b9:fa:
87:40:3e:1c:14:39:04:84:78:f1:00:89:6b:cb:f6:3e:39:36:
5b:fa:17:71:b7:5d:9e:6d:3b:4c:19:b8:2d:00:36:c0:8b:ad:
c2:70:52:dc:d1:36:26:3e:1f:0d:e8:ba:ed:ed:8b:4d:a4:64:
41:6c:f0:36:d2:37:64:3e:63:cc:a7:41:2f:7f:6c:08:dd:c0:
fd:4a:bb:5e:82:12:a6:bb:12:cc:79:5f:fb:52:40:56:67:e6:
54:df:5a:01:29:52:5f:53:08:f1:09:d2:cf:1a:43:02:a4:65:
cd:09:20:71:94:5e:46:45:9a:3b:06:7e:c7:74:76:13:2b:6b:
c5:54:f5:6b:17:e5:49:de:9e:aa:87:df:2f:19:2e:e5:29:7e:
e0:14:f2:79:6f:e8:29:b8:c7:39:d6:9d:60:25:18:9b:a8:85:
39:77:f6:4d:64:9f:a2:27:2e:ff:df:a9:c9:57:21:e5:5c:27:
e0:47:60:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 08:31:06 2026 by rpki-client