Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402493.roa
File: AS402493.roa (raw, json)
Hash identifier: NttJv9A/mS4GZLcsOtUcSzKrsVQTcMSOHH9617iZzOQ=
Subject key identifier: 01:93:CE:61:04:A1:6B:00:B8:46:9A:DC:07:62:4E:BF:26:DF:23:C3
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0D862F3165A6105073437480313D58E75D1EEAB3
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402493.roa
Signing time: Thu 25 Jun 2026 06:21:04 +0000
ROA not before: Thu 25 Jun 2026 06:16:04 +0000
ROA not after: Thu 24 Jun 2027 06:21:04 +0000
asID: 402493
IP address blocks: 51.146.239.0/24 maxlen: 24
51.241.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:86:2f:31:65:a6:10:50:73:43:74:80:31:3d:58:e7:5d:1e:ea:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 25 06:16:04 2026 GMT
Not After : Jun 24 06:21:04 2027 GMT
Subject: CN=0193CE6104A16B00B8469ADC07624EBF26DF23C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:42:f8:79:4c:be:47:b9:56:e0:5c:c0:ac:01:
5e:b4:47:87:64:51:9a:d0:98:3d:65:34:38:60:71:
91:2a:78:d0:21:a0:e4:13:2e:74:73:48:e7:c8:65:
4e:1a:e3:1b:3b:9b:1d:c1:49:16:b7:10:74:dc:c3:
b4:0f:a3:f2:58:5f:47:89:6d:27:21:96:03:7d:2c:
cb:5b:45:c3:93:47:25:b0:cb:37:25:0b:df:3c:83:
32:7e:23:83:30:be:a2:fa:b3:e5:11:a0:d0:ba:64:
24:81:b0:8b:56:a2:c0:9a:87:b5:40:de:95:2d:9f:
ed:e0:e0:5c:7e:23:d8:14:e8:48:d5:90:62:a8:de:
1d:5b:9d:cf:7e:f4:6a:e4:b2:64:66:3b:0a:36:42:
b4:ba:95:0f:c9:ed:fd:5c:81:aa:47:10:21:ad:5a:
f2:88:90:da:15:72:4f:98:61:bc:96:7b:da:57:2f:
46:57:fc:30:7f:95:b1:91:80:24:dc:21:55:20:55:
95:dd:30:14:8f:9f:54:74:9c:21:de:7b:9a:df:12:
1d:93:01:80:26:98:39:d6:12:e2:62:b9:06:92:61:
63:98:33:9d:38:fe:82:2b:23:94:75:ea:31:05:21:
2f:b7:1b:a6:36:3e:70:ea:96:ae:a0:d5:ee:5a:9b:
22:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:93:CE:61:04:A1:6B:00:B8:46:9A:DC:07:62:4E:BF:26:DF:23:C3
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402493.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.239.0/24
51.241.139.0/24
Signature Algorithm: sha256WithRSAEncryption
66:b4:d2:05:ba:f1:26:7c:23:dd:1d:03:ff:63:12:91:1d:0f:
a7:7a:c4:90:e3:82:4e:bc:33:d1:bc:e6:b8:e1:f3:8a:1e:15:
5b:e6:34:f8:78:b3:8a:b0:eb:d8:2f:d1:0a:48:03:63:0f:3b:
96:2b:3d:eb:eb:64:39:eb:22:c2:b0:95:53:2f:c6:2b:0b:eb:
7a:9b:3f:82:3e:a6:92:9b:b7:74:ef:71:c2:fd:1d:f2:06:f1:
fe:32:9e:ad:7b:2d:25:95:65:5c:5e:b7:c5:a1:ed:49:da:46:
2f:28:e5:cc:4c:0a:b9:31:18:a5:6b:14:27:9c:31:13:d9:4e:
86:64:92:cf:66:ad:f8:cd:19:9a:28:63:cf:9c:08:ef:65:d7:
a0:58:73:01:53:89:6f:15:26:de:bb:7c:a5:29:83:3d:86:ce:
42:da:a6:ad:ec:f6:22:d6:0c:93:36:6c:a1:85:a0:23:47:8e:
f5:4e:9b:6d:56:18:e4:95:b8:6f:15:45:2c:8a:7a:8c:ca:92:
24:87:3c:fa:54:71:83:bd:95:10:75:67:d1:63:3d:c9:b3:f2:
7b:8a:87:6d:7c:4a:3d:c3:10:96:9b:10:a4:27:c0:f8:ea:37:
bc:d9:d9:9b:0c:b2:d6:f3:98:16:f9:c4:a5:a3:e8:6e:9b:0b:
3e:62:66:e7
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUDYYvMWWmEFBzQ3SAMT1Y510e6rMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA2MjUwNjE2MDRaFw0yNzA2MjQwNjIxMDRaMDMxMTAvBgNV
BAMTKDAxOTNDRTYxMDRBMTZCMDBCODQ2OUFEQzA3NjI0RUJGMjZERjIzQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYQvh5TL5HuVbgXMCsAV60R4dk
UZrQmD1lNDhgcZEqeNAhoOQTLnRzSOfIZU4a4xs7mx3BSRa3EHTcw7QPo/JYX0eJ
bSchlgN9LMtbRcOTRyWwyzclC988gzJ+I4MwvqL6s+URoNC6ZCSBsItWosCah7VA
3pUtn+3g4Fx+I9gU6EjVkGKo3h1bnc9+9GrksmRmOwo2QrS6lQ/J7f1cgapHECGt
WvKIkNoVck+YYbyWe9pXL0ZX/DB/lbGRgCTcIVUgVZXdMBSPn1R0nCHee5rfEh2T
AYAmmDnWEuJiuQaSYWOYM504/oIrI5R16jEFIS+3G6Y2PnDqlq6g1e5amyJbAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUAZPOYQShawC4RprcB2JOvybfI8MwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTNDAyNDkzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAM5Lv
AwQAM/GLMA0GCSqGSIb3DQEBCwUAA4IBAQBmtNIFuvEmfCPdHQP/YxKRHQ+nesSQ
44JOvDPRvOa44fOKHhVb5jT4eLOKsOvYL9EKSANjDzuWKz3r62Q56yLCsJVTL8Yr
C+t6mz+CPqaSm7d073HC/R3yBvH+Mp6tey0llWVcXrfFoe1J2kYvKOXMTAq5MRil
axQnnDET2U6GZJLPZq34zRmaKGPPnAjvZdegWHMBU4lvFSbeu3ylKYM9hs5C2qat
7PYi1gyTNmyhhaAjR471TpttVhjklbhvFUUsinqMypIkhzz6VHGDvZUQdWfRYz3J
s/J7iodtfEo9wxCWmxCkJ8D46je82dmbDLLW85gW+cSlo+humws+Ymbn
-----END CERTIFICATE-----
Generated at Sun Jul 19 18:43:34 2026 by rpki-client