Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402298.roa
File: AS402298.roa (raw, json)
Hash identifier: DMBf+7xQlkdIQQRFuJGNpd9E3PFwrlkwDOA2PTBFlLQ=
Subject key identifier: E2:26:B0:1E:B5:3E:C9:BE:F3:8B:0A:0A:A6:6A:F3:CE:8F:E4:FA:9E
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 26283E0E76FCF6B11A409D58B339FABB715B2870
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402298.roa
Signing time: Wed 29 Apr 2026 17:10:17 +0000
ROA not before: Wed 29 Apr 2026 17:05:17 +0000
ROA not after: Wed 28 Apr 2027 17:10:17 +0000
asID: 402298
IP address blocks: 51.194.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 14:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:28:3e:0e:76:fc:f6:b1:1a:40:9d:58:b3:39:fa:bb:71:5b:28:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Apr 29 17:05:17 2026 GMT
Not After : Apr 28 17:10:17 2027 GMT
Subject: CN=E226B01EB53EC9BEF38B0A0AA66AF3CE8FE4FA9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:25:f4:fd:99:85:24:11:61:03:77:4c:47:ee:
07:12:c1:3b:40:93:0e:3f:a4:5e:0d:5f:e9:7d:36:
78:81:7b:65:7a:5d:db:72:f8:6b:04:fc:9d:43:32:
5f:df:37:3c:ba:8a:84:8f:66:09:3c:61:c7:7a:14:
f9:3f:74:df:0d:6e:26:ba:9f:5f:b8:ea:11:6d:60:
87:17:fe:08:13:a6:4e:8b:83:74:07:af:15:ce:25:
67:2f:db:b6:93:b6:1a:5e:b1:6a:9b:a0:a3:ab:5d:
d8:3e:4e:23:c1:da:f6:81:bb:9b:6e:13:f0:f6:83:
ca:b3:12:5b:3e:f7:e8:c8:b5:08:1c:57:6d:a4:d7:
44:9b:a7:77:2f:6c:10:35:fa:7e:cc:24:82:dc:ae:
bf:c3:4b:41:78:3f:4e:30:eb:b1:54:8d:c5:ba:fd:
db:ea:17:aa:3c:95:69:59:84:32:31:bb:3e:1d:99:
9b:66:2f:00:a2:67:0b:fa:7b:3b:64:b2:ed:eb:5e:
73:5f:76:1e:ec:8f:9e:94:09:b4:6a:6f:df:7f:bf:
02:16:52:8d:67:0b:04:98:12:ac:83:91:67:5f:28:
8d:f4:34:98:7d:5d:a8:6c:0d:56:58:42:1b:36:d0:
eb:89:7c:5c:99:8d:64:17:36:b6:86:ce:63:94:63:
87:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:26:B0:1E:B5:3E:C9:BE:F3:8B:0A:0A:A6:6A:F3:CE:8F:E4:FA:9E
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402298.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.156.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:f7:08:4c:56:6f:eb:ee:0c:90:59:0c:32:25:0a:7f:ab:e2:
32:6d:95:83:ba:8d:21:97:85:4e:d2:59:99:f5:d3:60:9f:f1:
fe:e1:38:d5:26:19:99:c2:f1:83:d1:e6:b9:f8:0b:1c:d2:a3:
a4:06:54:e0:03:7d:86:f9:a7:4e:15:65:92:94:07:85:e0:f2:
8b:d9:15:23:b0:17:02:fb:5b:a2:74:bd:8c:f9:ce:9d:2c:e4:
32:6a:3d:0f:51:30:fc:d0:87:0f:8e:85:f5:7e:27:b0:dc:a4:
14:6c:3b:7b:9c:b5:23:af:be:d6:53:1c:dc:70:1f:2f:8a:9c:
b1:cd:94:e8:f1:58:63:f1:b7:fe:2b:76:2a:d4:c6:09:bf:0f:
73:37:25:52:de:7f:5b:88:62:35:ad:ee:e0:27:c4:5a:8e:3c:
4a:60:eb:a7:df:a3:01:ea:2f:a9:29:8d:b0:19:a2:a7:76:d3:
56:5f:ef:a4:71:8d:db:4d:f6:9c:79:b0:6a:fa:0d:ae:26:27:
a0:ba:d2:9e:9f:09:96:70:27:ee:b9:9a:25:28:ff:dd:d9:be:
cc:03:f6:9b:34:04:0e:b6:f7:1f:1f:24:d3:ea:93:1a:de:1e:
7b:1b:1d:93:4a:00:24:3f:3e:11:ed:b9:31:9a:5a:e8:3d:7c:
8f:e6:9a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:26:09 2026 by rpki-client