Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402288.roa
File: AS402288.roa (raw, json)
Hash identifier: kKzehaBqYccO2YpmkItRVy0+VKMIUJikQp3+qCONqbA=
Subject key identifier: 74:40:70:E1:E6:3F:20:99:95:4C:F5:50:AB:4D:1E:AF:05:4B:6A:E2
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5F3D73B22830A42F13F278ED3D59FA7973510667
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402288.roa
Signing time: Wed 12 Aug 2026 00:52:51 +0000
ROA not before: Wed 12 Aug 2026 00:47:51 +0000
ROA not after: Wed 11 Aug 2027 00:52:51 +0000
asID: 402288
IP address blocks: 51.146.132.0/24 maxlen: 24
51.194.41.0/24 maxlen: 24
51.194.45.0/24 maxlen: 24
51.194.46.0/24 maxlen: 24
51.194.91.0/24 maxlen: 24
51.194.124.0/24 maxlen: 24
51.241.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:3d:73:b2:28:30:a4:2f:13:f2:78:ed:3d:59:fa:79:73:51:06:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 12 00:47:51 2026 GMT
Not After : Aug 11 00:52:51 2027 GMT
Subject: CN=744070E1E63F2099954CF550AB4D1EAF054B6AE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dc:be:9e:01:95:4f:98:17:86:2f:4f:38:d8:
51:16:b6:5d:12:f8:7b:15:1a:c4:70:2e:1b:fa:ad:
75:8e:d1:6b:a2:a2:03:7b:53:80:ed:5b:8f:cb:ea:
0e:42:66:35:f0:58:f4:7f:3e:8c:04:e1:cb:69:62:
d6:6b:5b:6d:e0:b9:77:98:cf:7e:37:7d:ed:6e:ef:
8d:62:7f:d8:6e:1e:f2:8d:7f:af:4c:d8:f9:82:9b:
39:ed:ca:e3:cd:50:09:e2:d1:5c:04:aa:cd:fa:e1:
26:2f:a4:6d:3d:65:5b:17:50:1a:ac:af:96:3b:d9:
27:d4:4d:d7:11:19:7a:9c:4b:10:ec:17:36:bb:f3:
53:b4:43:46:7f:70:75:e6:8f:d6:ec:1a:3b:c2:2c:
a0:8e:38:19:8f:3e:ad:b5:54:8f:4c:38:39:43:39:
6a:62:a8:1a:ea:a0:fd:54:6a:f8:0b:cc:a4:a4:6e:
00:04:8a:50:1e:eb:6e:e3:94:9e:6b:f5:dc:ee:2b:
8e:d2:62:57:03:5f:71:3d:82:72:65:7b:7c:48:bd:
de:e2:d1:5b:cf:2d:df:b9:ac:66:35:4d:97:18:d7:
20:b9:07:bd:0c:8f:54:45:e1:da:3a:98:6f:7e:1f:
7e:9e:14:0e:f0:d5:ad:77:0b:1d:d2:dc:4d:bd:b4:
cd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:40:70:E1:E6:3F:20:99:95:4C:F5:50:AB:4D:1E:AF:05:4B:6A:E2
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402288.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.132.0/24
51.194.41.0/24
51.194.45.0-51.194.46.255
51.194.91.0/24
51.194.124.0/24
51.241.210.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:2d:8e:30:b3:b3:f7:b0:c3:5d:fa:16:71:dd:d2:fa:8c:ae:
9f:96:82:30:cd:0a:fe:5b:b2:90:f4:c0:d6:db:22:b4:86:fb:
73:a1:53:f7:53:f0:6e:ad:2a:c4:0c:e0:5c:ef:e6:0b:73:ed:
2f:d4:91:8e:33:97:33:68:76:ed:22:7f:a3:6f:4c:f5:c0:61:
c9:61:22:0a:7a:cf:81:71:9e:e4:d0:61:2b:02:2f:f6:ae:ad:
73:99:63:3d:3c:61:70:3c:cf:27:aa:3d:65:87:7e:59:f7:8e:
0e:05:d6:8e:f0:63:61:cd:52:4b:df:59:29:d0:cf:d1:29:aa:
61:bc:b6:12:61:26:50:1f:a7:e8:49:6a:49:2a:8b:24:69:69:
5e:fa:83:a5:08:a7:15:15:62:d2:8c:bb:aa:e4:c7:cb:07:9d:
ec:ce:c8:95:5b:dc:7c:b0:96:7e:a3:ad:1f:5a:23:d9:62:90:
9f:1d:0e:45:6b:0b:5b:5a:4f:ad:a4:f2:f0:58:52:c0:39:a2:
20:4a:f1:35:f7:32:1f:16:9e:93:d7:bd:30:21:12:1d:82:c2:
09:33:ab:df:c4:5e:a2:c1:37:4c:d1:3d:a0:33:5d:33:3f:b3:
b3:55:f6:d6:07:17:51:82:7a:5e:9c:84:46:a3:16:0e:57:d3:
8c:f4:7d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 07:13:13 2026 by rpki-client