Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402604.roa
File: AS402604.roa (raw, json)
Hash identifier: mQigZJQ9Zcjd3lJksmfzszQjkEzJE+i7QQ2O+/3segY=
Subject key identifier: DA:7A:22:BF:1B:72:97:53:3E:83:83:06:57:C0:7D:FA:F8:C8:9B:C0
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 36BC1EF53578C6525345BC078893A1A7FF9C3869
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402604.roa
Signing time: Wed 08 Jul 2026 05:33:58 +0000
ROA not before: Wed 08 Jul 2026 05:28:58 +0000
ROA not after: Wed 07 Jul 2027 05:33:58 +0000
asID: 402604
IP address blocks: 51.146.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:bc:1e:f5:35:78:c6:52:53:45:bc:07:88:93:a1:a7:ff:9c:38:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 8 05:28:58 2026 GMT
Not After : Jul 7 05:33:58 2027 GMT
Subject: CN=DA7A22BF1B7297533E83830657C07DFAF8C89BC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:65:65:70:14:40:7a:45:5b:58:f5:19:18:
98:3d:66:6d:34:d6:fa:6d:41:32:af:fb:a6:bf:74:
00:e4:86:41:6a:e2:bb:ac:e8:6e:8f:7e:7c:7d:c5:
96:92:22:94:77:80:a7:0e:92:dc:af:e0:69:39:60:
c6:7d:54:87:65:fb:09:e5:f2:46:28:e1:ca:38:02:
ef:20:5c:2c:bb:99:3d:93:5d:09:8e:8a:84:e3:6e:
7b:fa:bb:c2:b4:2c:b3:51:e5:2c:29:4f:33:be:c0:
3d:77:a5:42:6b:ea:d5:ac:81:2c:27:72:0a:71:ea:
9d:11:f1:f4:bc:b0:95:f4:23:6a:92:89:4e:1f:fb:
84:ed:bf:c9:32:1b:2e:15:c1:f0:52:71:d1:9c:34:
aa:58:21:a4:8b:e7:5e:c0:3f:c5:ef:33:1e:8a:26:
be:b9:4f:07:af:30:5f:45:4e:65:29:c7:02:1b:47:
d0:15:e1:8d:36:50:d0:78:ed:7b:64:d6:de:bd:38:
34:7c:c7:b8:ab:81:8c:4b:ed:ef:20:46:a7:42:87:
3e:ba:2b:8f:dc:3f:6f:6e:79:05:97:28:c1:3f:c5:
85:89:03:9a:99:2c:c5:16:9a:6a:af:c4:c2:7f:f2:
ab:f0:2b:48:68:98:72:23:49:11:be:6c:93:c2:d4:
0d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7A:22:BF:1B:72:97:53:3E:83:83:06:57:C0:7D:FA:F8:C8:9B:C0
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402604.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.104.0/24
Signature Algorithm: sha256WithRSAEncryption
08:31:a5:96:5d:cc:26:01:03:e9:23:49:46:e8:a7:3d:f0:63:
a6:61:69:d7:f2:1a:b8:5c:fa:26:f8:91:af:47:65:45:25:11:
0a:7f:dc:46:3e:5a:2f:b7:54:0e:aa:1d:fd:88:47:f8:33:ac:
90:be:0d:64:01:c4:90:0c:29:e3:f0:f6:d2:be:f3:d0:f4:0e:
71:07:27:ff:eb:01:09:5f:90:fc:e5:f9:30:41:89:44:59:17:
85:e4:9c:26:2a:8d:88:cc:42:e7:f0:b7:ab:6f:e0:49:ef:17:
9d:62:82:c0:3d:ca:5c:f7:a7:11:85:9e:f9:54:7f:8b:40:00:
f4:5c:dc:52:53:2a:18:ef:00:bc:a7:ac:90:4f:3f:68:62:ff:
60:66:52:73:e4:29:42:20:5e:50:21:58:8d:aa:80:bd:ab:17:
3f:23:b0:5d:88:3e:1f:3f:2f:83:65:41:b6:38:81:d0:63:96:
86:ac:ab:eb:ae:be:b7:a9:1c:db:e2:29:82:ee:60:03:a3:b9:
2d:ec:d1:1a:91:ac:84:cb:3b:e6:68:16:20:c7:07:45:8e:c0:
c9:eb:f0:9a:af:2e:63:c6:3e:3e:6d:a1:b2:bc:b4:04:cd:c1:
b0:d4:1f:cf:a9:60:8a:bd:31:fc:47:e9:c8:0d:af:0c:04:65:
0c:0f:eb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:42:47 2026 by rpki-client