Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402535.roa
File: AS402535.roa (raw, json)
Hash identifier: N/JGrPgSmDnL0LGsH2ghGzmsF5BwXImDtfMOmlGWEuo=
Subject key identifier: 66:36:79:65:15:34:B4:88:72:36:A1:38:26:A3:9E:E2:8A:1E:AE:55
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3E060341948D9122B7145A73C5E29C422E2DD04D
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402535.roa
Signing time: Fri 21 Aug 2026 08:37:53 +0000
ROA not before: Fri 21 Aug 2026 08:32:53 +0000
ROA not after: Fri 20 Aug 2027 08:37:53 +0000
asID: 402535
IP address blocks: 51.241.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:06:03:41:94:8d:91:22:b7:14:5a:73:c5:e2:9c:42:2e:2d:d0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 21 08:32:53 2026 GMT
Not After : Aug 20 08:37:53 2027 GMT
Subject: CN=663679651534B4887236A13826A39EE28A1EAE55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ac:54:30:e3:1c:e4:cb:51:93:0d:57:05:e5:
13:64:e3:9a:3c:95:a4:05:f2:57:3a:0f:e9:b1:ab:
d0:91:58:20:c8:38:d1:c7:db:e4:fc:2d:34:14:70:
bc:c3:04:50:ba:a2:26:00:ed:dc:5f:36:4f:78:a4:
e1:08:15:e8:8c:d3:bc:21:dd:45:5c:20:b7:9e:24:
f9:60:9e:22:72:56:20:47:90:10:fb:93:26:ed:bd:
30:54:73:8a:ec:7c:a7:28:e0:3f:a9:c7:01:40:c0:
33:b2:09:8e:4f:43:d4:ea:05:13:eb:10:57:60:5c:
7e:df:93:23:04:f0:b1:42:0e:79:ce:6a:d7:c3:3b:
be:17:b4:18:63:44:c5:26:07:62:64:27:90:50:b5:
3d:71:01:7a:69:86:81:83:97:84:66:35:52:26:24:
28:37:3c:ba:0b:8b:de:81:60:c3:45:91:b1:b7:71:
07:02:7d:7d:07:77:9d:b7:37:ce:dd:5a:10:37:bb:
8c:3b:17:05:78:9c:9b:88:69:a8:91:b8:3e:2b:06:
d4:78:e8:b4:f2:23:2a:f4:52:8d:85:86:61:49:21:
38:07:cd:57:56:91:8a:28:bf:ad:19:b1:0a:e5:83:
a6:30:b4:42:16:f7:9d:a2:87:e9:ef:59:b4:66:8d:
ca:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:36:79:65:15:34:B4:88:72:36:A1:38:26:A3:9E:E2:8A:1E:AE:55
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.7.0/24
Signature Algorithm: sha256WithRSAEncryption
61:f3:8d:57:17:9e:ef:6c:9c:8e:70:ac:4c:f0:ba:a4:16:3b:
97:db:0d:30:07:ad:df:f1:dd:29:46:2f:f4:5c:a9:23:7d:2d:
78:82:2c:28:e1:d1:2e:d0:e7:f4:eb:75:0d:f1:d7:1e:ef:f6:
40:7f:42:09:e8:0b:46:c4:32:30:a2:19:52:ce:76:9d:b6:bb:
a7:96:22:1d:c8:55:a7:85:64:02:a0:02:7f:24:d7:0d:11:67:
2e:6c:4a:91:55:12:a3:d4:33:fd:b0:bd:6b:89:bf:9f:d8:f4:
23:4e:ee:c0:a6:93:e8:db:68:f0:b1:a7:7a:8f:43:21:62:ec:
d2:c7:b2:0c:f4:6d:39:39:ee:d5:90:5b:af:c9:eb:b4:85:5e:
17:19:1a:bf:2d:6d:ec:2a:6a:c5:93:7a:7f:9a:1d:89:a0:9c:
d0:13:23:0c:7b:39:0a:2d:17:6e:f2:39:93:e0:c9:1f:78:1c:
97:4b:88:03:7b:53:00:27:11:2b:99:a7:0a:20:15:f9:7c:0e:
61:5c:00:45:b2:f1:58:ee:66:f0:04:f4:2c:4c:c4:57:13:24:
97:69:94:84:00:26:ce:dc:73:6d:80:3a:43:31:e2:7c:94:86:
39:9e:33:df:a2:11:d6:6a:ad:6e:23:f8:b3:46:e5:e0:9b:9a:
0e:d7:f3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:18 2026 by rpki-client