Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402857.roa
File: AS402857.roa (raw, json)
Hash identifier: B/8TmKx5T7To/vZwvFlF4b2Z1aNI2E5eHQR7SoWtjI8=
Subject key identifier: 2F:A4:BF:54:0A:E0:E8:E6:BB:C4:40:11:30:0B:95:36:69:6D:D2:01
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3172489E801752ECEC31439B8FDBEE2AED0D2C1B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402857.roa
Signing time: Wed 19 Aug 2026 16:15:03 +0000
ROA not before: Wed 19 Aug 2026 16:10:03 +0000
ROA not after: Wed 18 Aug 2027 16:15:03 +0000
asID: 402857
IP address blocks: 51.241.107.0/24 maxlen: 24
188.220.8.0/24 maxlen: 24
188.220.58.0/24 maxlen: 24
188.220.59.0/24 maxlen: 24
188.220.78.0/24 maxlen: 24
188.220.86.0/24 maxlen: 24
188.220.95.0/24 maxlen: 24
188.221.143.0/24 maxlen: 24
188.221.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:72:48:9e:80:17:52:ec:ec:31:43:9b:8f:db:ee:2a:ed:0d:2c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 19 16:10:03 2026 GMT
Not After : Aug 18 16:15:03 2027 GMT
Subject: CN=2FA4BF540AE0E8E6BBC44011300B9536696DD201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:02:6f:6e:99:ec:5e:99:36:79:81:b9:75:36:
67:27:f5:b9:6c:99:55:d4:17:96:9d:69:e7:63:b5:
f7:54:50:2f:ba:a5:ed:90:97:14:71:10:64:63:7f:
3e:c5:15:62:e3:18:58:79:08:c5:f0:29:9b:7f:22:
bd:7f:32:0b:d5:5f:e4:bc:e0:14:d2:92:a8:8c:c2:
08:e0:cb:0a:63:55:3a:f3:b9:31:29:08:09:74:e7:
2f:4e:c2:02:01:96:13:34:bb:58:db:44:7c:46:bf:
ac:f4:99:66:df:a3:12:37:31:84:c4:71:e3:8c:4d:
bf:ea:45:00:32:cc:04:d6:9c:c1:e9:c7:e4:90:eb:
2e:47:10:e5:77:3e:17:6d:c4:a1:6f:47:56:4d:9f:
a0:62:22:86:bf:43:1e:f7:0d:a7:4f:34:7e:26:3f:
74:c5:6f:1f:ac:5e:54:a3:04:e1:86:aa:1c:a6:07:
be:25:b2:34:98:c7:84:3d:13:d8:ab:2b:7a:0f:cf:
a3:6f:17:77:ae:06:01:22:a5:0e:13:68:75:85:34:
12:d7:8c:57:0c:19:52:17:d7:d6:4d:41:01:19:e2:
76:78:54:5a:93:19:3a:d9:af:01:6e:fa:70:9f:c0:
88:33:d9:75:46:5f:2f:dd:fa:25:6e:da:bf:51:50:
bd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A4:BF:54:0A:E0:E8:E6:BB:C4:40:11:30:0B:95:36:69:6D:D2:01
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402857.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.107.0/24
188.220.8.0/24
188.220.58.0/23
188.220.78.0/24
188.220.86.0/24
188.220.95.0/24
188.221.143.0/24
188.221.205.0/24
Signature Algorithm: sha256WithRSAEncryption
28:8f:02:1e:bc:94:b5:d6:4e:10:e3:80:23:a2:74:50:b6:7e:
65:92:f8:c7:80:d0:21:fd:27:02:c5:1b:e0:dd:d5:f7:eb:8e:
91:8a:8f:4f:cf:49:b1:e4:70:93:c3:9f:d9:80:71:f6:3b:ad:
4b:f2:68:b7:0c:7f:99:78:6d:e2:f4:3f:1c:1d:8e:31:42:f9:
2e:5d:77:42:93:87:d2:00:8f:41:76:80:de:71:08:5e:83:6d:
1e:87:df:5f:ff:02:e6:20:85:3f:12:bb:55:56:bb:1f:47:2d:
4a:b0:d7:10:a8:36:04:40:ee:02:c0:71:ce:5e:73:c0:17:ba:
a5:71:e3:7c:97:70:db:ae:48:56:eb:72:fb:8d:1b:09:1a:c3:
06:01:1c:df:36:02:aa:3d:2b:b5:a2:a9:70:d5:29:71:2a:b9:
d7:0e:21:cf:3e:c3:d0:88:43:e4:85:8f:61:b6:64:54:5b:b8:
e5:10:7c:04:a1:19:fd:b6:dd:70:9f:b3:28:36:f8:45:5f:f2:
0b:e9:72:ef:40:6b:5b:d9:04:2a:3e:65:c1:cf:79:86:52:b8:
f8:78:03:f5:f8:55:f1:a3:a7:de:5c:89:7b:25:e6:cd:3a:be:
33:fc:dd:e8:e9:22:7b:04:e9:99:cc:c5:bb:90:93:03:c8:b4:
23:6e:bf:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:10 2026 by rpki-client