Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402268.roa
File: AS402268.roa (raw, json)
Hash identifier: L3WUIATLYDd+nlSK9MI1eOM4Zwy77A8pYo5WDulm6BA=
Subject key identifier: 08:C1:0C:CB:53:F2:A5:72:C9:B7:68:84:23:98:AA:82:82:1A:0D:6F
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 55CEF93FDCA301B9AC29FD0D8D976386208BB231
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402268.roa
Signing time: Wed 06 May 2026 00:43:09 +0000
ROA not before: Wed 06 May 2026 00:38:09 +0000
ROA not after: Wed 05 May 2027 00:43:09 +0000
asID: 402268
IP address blocks: 78.105.165.0/24 maxlen: 24
78.105.188.0/24 maxlen: 24
78.105.220.0/24 maxlen: 24
78.105.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 May 2026 11:18:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:ce:f9:3f:dc:a3:01:b9:ac:29:fd:0d:8d:97:63:86:20:8b:b2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: May 6 00:38:09 2026 GMT
Not After : May 5 00:43:09 2027 GMT
Subject: CN=08C10CCB53F2A572C9B768842398AA82821A0D6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:32:60:ed:14:fd:9c:b7:d5:ee:df:48:e1:de:
d3:e3:6e:30:5f:47:84:6d:1d:1d:dc:d6:84:94:b5:
12:39:11:8b:b7:3e:08:69:4f:6c:a8:2c:ee:dd:32:
89:5b:68:8f:13:3f:ae:40:d2:77:46:35:4c:fd:dc:
e4:e6:8a:6c:9d:5b:b1:ed:8a:54:5b:b7:1b:f8:6b:
da:09:e3:08:60:8f:c9:c5:6b:fc:9f:aa:2c:de:48:
0b:29:2c:02:5d:27:d1:3c:ce:e7:09:18:9c:f4:eb:
d7:78:7e:21:5d:26:58:c3:a5:35:f1:88:ac:2a:91:
96:82:d6:d3:11:ac:91:66:50:45:53:ee:e1:7d:6c:
80:15:b5:1f:d8:64:f5:d3:dc:90:32:30:b4:0e:01:
3a:11:77:56:5b:07:da:9e:b1:25:5c:57:5d:e2:2c:
58:a1:db:eb:99:60:f2:21:10:6b:1b:a9:b7:eb:3d:
6a:e0:03:f4:4e:34:35:40:48:0b:29:67:76:0f:be:
1e:d3:01:ea:b8:17:39:77:78:f1:2d:c9:27:5d:6e:
39:39:5b:53:58:64:07:88:d2:93:7f:42:1f:ac:ed:
80:68:5f:1c:3e:98:a5:a1:b4:4b:51:79:b1:06:f6:
4f:5a:85:8b:f7:1d:78:fd:79:d8:0e:b9:20:1f:d5:
fc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C1:0C:CB:53:F2:A5:72:C9:B7:68:84:23:98:AA:82:82:1A:0D:6F
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402268.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.165.0/24
78.105.188.0/24
78.105.220.0/24
78.105.245.0/24
Signature Algorithm: sha256WithRSAEncryption
04:57:d1:95:4f:ab:e4:86:db:95:68:ba:84:89:eb:d6:bf:3b:
ef:ca:71:17:9e:11:15:f5:9a:7a:9d:fa:ce:b7:10:cd:bf:be:
77:d2:bc:fd:5f:b3:79:65:ee:c6:f2:61:26:e5:35:61:14:42:
41:d3:8f:25:f1:5a:3b:9c:04:0a:03:f6:71:de:80:24:92:4a:
1c:07:c0:05:2b:75:d0:4d:34:86:7f:ac:11:b1:8d:08:c1:67:
04:3e:57:e2:ee:b2:28:27:18:9f:2d:62:f8:91:d9:06:85:8c:
b4:25:ae:a5:04:1f:97:d3:e4:6d:8f:44:aa:54:83:71:09:47:
ce:fb:fe:01:3d:89:8d:c1:36:b1:27:58:25:9b:5b:62:63:f9:
4f:b6:d7:36:9e:01:12:3c:cd:30:01:2a:a0:fd:74:00:b2:b0:
dc:26:72:de:17:52:b3:27:4c:4d:c7:2a:7d:2e:45:b9:c2:0d:
05:6a:21:2c:c1:89:77:66:94:e2:68:f1:7a:78:aa:7c:d3:4b:
98:ea:c9:6f:cc:7e:1c:42:7c:f7:91:9c:9d:d9:0b:5b:c6:95:
b0:ed:c3:8b:a2:2f:c6:c2:18:74:3f:c5:86:40:ac:5e:ea:3b:
ea:0d:4e:2a:3d:93:42:1b:61:55:8e:ab:05:1c:9d:c0:c3:62:
67:32:7c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 10 15:53:12 2026 by rpki-client