Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402394.roa
File: AS402394.roa (raw, json)
Hash identifier: Mx+vRl9isuJJavSRxx28Oxm/tCGc6U2PScRq+X/FKqs=
Subject key identifier: 69:DF:68:F3:AD:6A:F7:7C:0D:4A:8A:DF:C3:F9:A9:DF:B6:BA:42:37
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7EE7E0997FBEF29E44FACF805A6B19E23C624162
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402394.roa
Signing time: Tue 23 Jun 2026 06:25:20 +0000
ROA not before: Tue 23 Jun 2026 06:20:20 +0000
ROA not after: Tue 22 Jun 2027 06:25:20 +0000
asID: 402394
IP address blocks: 51.194.118.0/24 maxlen: 24
51.194.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:e7:e0:99:7f:be:f2:9e:44:fa:cf:80:5a:6b:19:e2:3c:62:41:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 23 06:20:20 2026 GMT
Not After : Jun 22 06:25:20 2027 GMT
Subject: CN=69DF68F3AD6AF77C0D4A8ADFC3F9A9DFB6BA4237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b4:e1:b6:60:64:9b:27:33:fb:46:af:cb:a3:
43:c6:b1:cf:9e:19:96:c5:54:9b:31:ef:18:b4:5b:
26:0a:d0:ad:e2:24:4b:e7:67:ef:38:c1:1d:21:e5:
b0:2a:28:08:8b:f4:3b:4e:88:83:24:1c:a6:21:31:
09:4c:0f:4c:bc:23:78:af:b5:97:ac:d4:92:23:21:
b3:ee:aa:eb:a5:1f:b8:f2:14:3a:68:1d:7b:64:ae:
c5:c9:f6:52:ab:a2:e9:c7:c6:c2:68:b7:e6:51:51:
d7:47:3a:32:48:b0:d0:b7:ec:d6:e3:95:ed:5d:39:
00:c4:e6:2f:2d:f2:63:ba:53:01:ff:53:4c:f9:c0:
50:e5:d6:c6:2c:f2:6b:17:6d:f0:85:43:c2:30:43:
51:6b:01:03:01:1e:89:f9:26:ae:66:8e:f1:9f:ff:
77:17:39:89:32:24:01:aa:94:15:af:0b:3a:a8:51:
87:2d:99:8b:50:bd:60:a1:71:12:c7:0f:36:75:f1:
c4:63:f9:f9:1f:68:58:cb:42:7f:44:8c:ef:52:73:
62:43:66:85:6c:f9:f5:3c:e6:e6:bd:55:41:23:79:
f1:b9:bc:41:e5:d3:a1:3f:21:90:79:0c:fa:24:ab:
29:97:9f:0d:87:47:e4:18:b2:3e:6b:63:8e:df:69:
09:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DF:68:F3:AD:6A:F7:7C:0D:4A:8A:DF:C3:F9:A9:DF:B6:BA:42:37
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402394.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.118.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:36:fd:48:49:fd:58:18:83:72:82:30:eb:b8:33:23:d0:d1:
a4:ed:f8:33:6d:77:a3:32:63:b9:c3:e2:a1:28:03:0a:4c:c4:
93:06:1d:e4:19:8c:93:57:e5:47:39:08:e5:75:9f:fe:9f:2e:
3a:20:7e:f6:78:28:80:00:58:f3:a3:39:55:ec:09:c1:6e:42:
12:2a:e4:b1:fb:5e:a7:0e:a9:d4:b5:94:f1:c0:7a:81:18:83:
ac:52:ab:dc:c0:a7:2f:50:8b:55:1e:2b:90:b4:e1:37:6f:69:
17:d7:72:10:99:5d:27:47:21:ff:b0:a0:7d:84:85:cb:84:59:
ec:2f:06:6a:9d:53:1d:3e:89:da:25:75:f8:d9:31:86:fb:ca:
df:f3:16:61:85:6f:43:67:84:65:fc:f0:6a:58:ce:ba:cd:b6:
b0:e8:e7:62:f6:06:5f:a6:da:76:e5:93:5f:f1:8f:10:b1:6a:
63:78:ff:d7:d1:55:b6:22:48:fa:4e:6d:de:b3:34:e2:d0:b4:
97:e8:5b:49:40:4c:b6:09:7d:44:cb:40:f9:c7:4f:6e:3f:e7:
44:1d:e3:4d:f8:bf:a3:6f:9d:65:5e:3e:c9:23:c5:c8:74:7a:
d7:9e:14:69:16:14:5b:e5:3a:c2:38:5d:70:78:06:0a:6f:39:
b6:4e:bc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:43:31 2026 by rpki-client