Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402722.roa
File: AS402722.roa (raw, json)
Hash identifier: PeJAhZVTjEV/+G0cTZ33vAo2YOF6MLNJZSFI5yfBrzI=
Subject key identifier: 4B:13:E6:78:BE:39:FD:E5:28:9D:09:53:B2:D0:76:38:12:16:CA:6B
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 50C437696DE2EE097CBD8A9CB7DCBFCCA5CC81F0
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402722.roa
Signing time: Thu 09 Jul 2026 10:05:08 +0000
ROA not before: Thu 09 Jul 2026 10:00:08 +0000
ROA not after: Thu 08 Jul 2027 10:05:08 +0000
asID: 402722
IP address blocks: 51.146.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:c4:37:69:6d:e2:ee:09:7c:bd:8a:9c:b7:dc:bf:cc:a5:cc:81:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 9 10:00:08 2026 GMT
Not After : Jul 8 10:05:08 2027 GMT
Subject: CN=4B13E678BE39FDE5289D0953B2D076381216CA6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:15:7b:c7:84:3d:fd:b7:7e:5b:72:4a:1b:2f:
3e:d6:40:9e:f0:60:7f:70:f9:9b:71:cf:aa:cf:f1:
2f:66:55:a6:3f:d0:6f:ac:f9:4c:70:af:69:d0:e6:
28:7b:bb:c1:9f:43:1e:f5:87:d1:74:b2:0f:40:9b:
e5:a2:e3:dd:34:8d:56:69:6e:a4:03:0c:cb:26:99:
4e:c0:80:75:65:f7:26:02:f6:e6:56:1f:93:9a:1c:
45:2f:f8:bc:ae:74:33:3d:f6:86:54:17:5c:fc:76:
d7:1f:88:1e:ea:57:81:03:5e:bb:76:4e:06:1b:86:
42:a1:5b:19:94:c0:f6:d4:ed:f1:9e:b7:19:be:59:
5f:89:50:8b:86:74:4d:e2:99:8e:32:dc:c5:3f:bb:
36:63:8d:31:0a:8a:d5:52:4c:c3:41:2f:d1:4b:ea:
a7:d5:c2:ea:f0:d4:67:69:5a:65:7e:b4:81:5c:bc:
41:28:4a:bb:0a:16:74:8c:3b:51:18:99:ad:e7:f0:
17:58:c0:37:86:cb:20:b0:67:7b:81:be:21:a0:2e:
91:e2:bb:9f:e9:4a:3d:1c:a6:db:4f:58:af:07:58:
ac:d8:b5:60:a7:93:79:3b:f2:17:22:d4:65:54:3c:
93:62:87:5a:3a:d4:08:15:0a:6a:f3:04:25:ae:90:
6c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:13:E6:78:BE:39:FD:E5:28:9D:09:53:B2:D0:76:38:12:16:CA:6B
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402722.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.56.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:92:13:ac:3c:b9:bb:eb:36:b6:9c:9d:9b:40:ab:86:64:ea:
40:c3:cf:f3:49:c0:15:ef:63:01:a4:9e:50:68:9c:28:22:30:
65:3d:cf:fa:8c:5b:86:ba:6e:aa:f2:17:8c:73:61:82:44:c7:
fd:aa:5a:ac:10:4e:21:3c:28:e8:d3:c7:5b:e6:c4:5a:7c:86:
40:00:b7:e8:de:2e:71:6f:ca:53:22:c2:2b:30:78:7a:6f:ac:
da:a6:1e:2c:39:d1:e1:68:60:e4:33:11:08:13:63:99:ed:de:
60:fd:b3:c5:32:4f:7c:14:9f:23:1f:d5:58:4a:ac:2c:58:f5:
30:3f:d2:ac:44:59:fa:cb:d4:d9:94:c7:63:0d:87:b7:fd:d6:
73:70:6a:00:6c:a3:db:58:78:e5:0a:a8:f7:0f:ae:46:36:fb:
15:cd:a2:dc:65:f7:d9:57:4f:6b:52:2a:80:93:05:3f:c7:7e:
6a:e2:8c:4e:a2:86:9b:09:1c:99:e8:a4:75:49:6f:69:3e:b2:
b0:1f:5e:24:cf:d0:53:a5:c4:59:09:27:01:d7:bb:ef:6e:66:
88:09:6e:c5:b2:4c:69:9c:4a:34:63:eb:18:bf:66:73:9b:75:
c3:15:15:f5:aa:7b:51:d6:7d:5d:60:d9:0e:f8:98:19:df:15:
cc:70:81:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:43:22 2026 by rpki-client