Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402655.roa
File: AS402655.roa (raw, json)
Hash identifier: 44f6F0jj05Xb/vsl9J9Ahr+N+jp9npJfDJWgutlPQec=
Subject key identifier: 83:47:9F:03:D6:91:BD:A1:45:82:3F:D2:6F:B3:44:84:94:1A:B8:C6
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4E7154BF90164301B88556C56F9367A8076C15F3
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402655.roa
Signing time: Tue 14 Jul 2026 14:27:28 +0000
ROA not before: Tue 14 Jul 2026 14:22:28 +0000
ROA not after: Tue 13 Jul 2027 14:27:28 +0000
asID: 402655
IP address blocks: 188.221.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:71:54:bf:90:16:43:01:b8:85:56:c5:6f:93:67:a8:07:6c:15:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 14 14:22:28 2026 GMT
Not After : Jul 13 14:27:28 2027 GMT
Subject: CN=83479F03D691BDA145823FD26FB34484941AB8C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:67:75:f1:29:60:3f:44:e4:f4:bc:0b:41:84:
e6:16:8a:f8:98:95:06:b9:80:6f:05:e0:4e:c6:86:
2f:e4:97:04:4a:ec:8a:65:44:02:98:38:f6:b9:15:
d0:ed:ac:93:70:36:f5:62:81:22:1a:d6:77:8a:a9:
17:4a:4e:05:49:38:36:b7:28:ec:9d:34:5a:97:7e:
7d:02:2c:a5:d1:f1:09:a0:94:b3:cd:9d:db:dd:eb:
1c:82:b5:21:07:b1:47:f7:72:38:ba:37:a0:55:6e:
17:bc:18:45:b6:eb:7b:1f:c5:67:7a:ad:18:14:c3:
96:1c:57:fa:4c:73:3c:b0:b3:a4:50:1d:84:67:d3:
45:f9:0d:34:a6:99:ce:74:d0:07:f8:cd:4e:8e:6c:
23:a2:61:ea:bb:c7:95:d7:17:9e:88:c6:da:9a:72:
fe:c4:98:75:a5:8a:8a:a9:be:56:4e:39:2e:95:d2:
d6:83:9d:f5:1c:2a:b9:81:b9:f7:ea:9f:74:16:ff:
7e:d3:0f:6b:70:4e:8d:22:a5:a9:9e:83:60:33:09:
89:59:0c:a2:22:4c:f0:8b:7f:81:2a:09:72:57:eb:
52:b9:f4:78:30:38:a3:5e:91:c5:da:e3:41:c4:00:
43:6b:b7:74:3a:01:fe:d2:7b:1f:1d:10:cb:75:82:
8f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:47:9F:03:D6:91:BD:A1:45:82:3F:D2:6F:B3:44:84:94:1A:B8:C6
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402655.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.221.157.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:c4:aa:01:39:92:37:19:06:aa:ef:bc:52:17:00:0c:2e:cf:
3c:4d:29:8a:70:77:7a:08:43:b6:9f:4b:57:36:29:96:9a:24:
c8:d8:65:0d:bf:bf:75:65:0a:09:53:2f:78:86:23:f6:00:4c:
d0:d4:0f:86:74:24:3c:3f:83:35:da:ba:62:74:74:ee:8c:76:
48:79:fc:96:5d:1c:e6:92:2b:3b:e2:54:40:36:47:0c:dd:0e:
e7:b1:5f:36:bc:52:77:3c:04:c4:ae:ea:8e:45:d4:8f:74:b0:
aa:e2:3c:85:4e:af:be:20:21:2e:b1:fa:f7:41:10:65:4d:65:
5c:90:a5:e6:0d:8a:5b:1f:f0:0c:8e:7a:4a:66:f8:95:b1:a4:
18:98:00:fe:5f:43:91:f3:7f:2b:54:10:8e:46:92:65:56:4c:
4f:d2:f9:79:47:c2:6f:75:2b:cc:b9:b4:3a:d9:86:2b:7d:d7:
14:8c:cb:97:6b:4c:9e:b1:6b:d8:3d:ca:72:9b:93:f5:8f:d4:
54:7c:f6:06:fd:10:7b:39:be:ed:c2:0e:da:3e:6b:16:c9:4d:
c6:ce:76:0a:46:d9:4f:19:01:fe:b2:a2:47:5b:f9:4b:ba:09:
33:7b:23:35:a8:4e:8f:e9:4d:a7:49:75:37:39:ee:64:d6:80:
08:a8:37:06
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUTnFUv5AWQwG4hVbFb5NnqAdsFfMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA3MTQxNDIyMjhaFw0yNzA3MTMxNDI3MjhaMDMxMTAvBgNV
BAMTKDgzNDc5RjAzRDY5MUJEQTE0NTgyM0ZEMjZGQjM0NDg0OTQxQUI4QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Z3XxKWA/ROT0vAtBhOYWiviY
lQa5gG8F4E7Ghi/klwRK7IplRAKYOPa5FdDtrJNwNvVigSIa1neKqRdKTgVJODa3
KOydNFqXfn0CLKXR8QmglLPNndvd6xyCtSEHsUf3cji6N6BVbhe8GEW263sfxWd6
rRgUw5YcV/pMczyws6RQHYRn00X5DTSmmc500Af4zU6ObCOiYeq7x5XXF56Ixtqa
cv7EmHWlioqpvlZOOS6V0taDnfUcKrmBuffqn3QW/37TD2twTo0ipameg2AzCYlZ
DKIiTPCLf4EqCXJX61K59HgwOKNekcXa40HEAENrt3Q6Af7Sex8dEMt1go/NAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUg0efA9aRvaFFgj/Sb7NEhJQauMYwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTNDAyNjU1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvN2d
MA0GCSqGSIb3DQEBCwUAA4IBAQBLxKoBOZI3GQaq77xSFwAMLs88TSmKcHd6CEO2
n0tXNimWmiTI2GUNv791ZQoJUy94hiP2AEzQ1A+GdCQ8P4M12rpidHTujHZIefyW
XRzmkis74lRANkcM3Q7nsV82vFJ3PATEruqORdSPdLCq4jyFTq++ICEusfr3QRBl
TWVckKXmDYpbH/AMjnpKZviVsaQYmAD+X0OR838rVBCORpJlVkxP0vl5R8JvdSvM
ubQ62YYrfdcUjMuXa0yesWvYPcpym5P1j9RUfPYG/RB7Ob7twg7aPmsWyU3GznYK
RtlPGQH+sqJHW/lLugkzeyM1qE6P6U2nSXU3Oe5k1oAIqDcG
-----END CERTIFICATE-----
Generated at Sun Jul 19 18:42:55 2026 by rpki-client