Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402976.roa
File: AS402976.roa (raw, json)
Hash identifier: eo5Jh69EXE8GWDf3aLYEUbYzP448a4a7kGAKQv8qY1M=
Subject key identifier: D0:15:0E:8D:1C:F0:F7:F5:FF:9D:3D:92:E4:8F:3B:71:CF:91:9B:C3
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1CE83E36D9410166862111ED005FA7B06BED8D9C
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402976.roa
Signing time: Sat 17 Oct 2026 12:10:17 +0000
ROA not before: Sat 17 Oct 2026 12:05:17 +0000
ROA not after: Sat 16 Oct 2027 12:10:17 +0000
asID: 402976
IP address blocks: 51.146.244.0/24 maxlen: 24
94.118.20.0/24 maxlen: 24
188.220.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:e8:3e:36:d9:41:01:66:86:21:11:ed:00:5f:a7:b0:6b:ed:8d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 17 12:05:17 2026 GMT
Not After : Oct 16 12:10:17 2027 GMT
Subject: CN=D0150E8D1CF0F7F5FF9D3D92E48F3B71CF919BC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:21:f4:66:a0:0b:51:e9:2f:ab:eb:bb:e5:e3:
d0:05:f5:9c:3f:88:66:5e:e8:2f:35:77:1f:a7:4e:
f3:3d:cc:24:6a:5a:c0:97:78:69:36:04:1b:c4:69:
c3:57:96:77:cb:ab:86:81:6c:ef:b8:7c:8c:fb:c0:
e6:fc:2f:4d:f3:d7:b9:a4:bc:8d:36:5a:65:d4:70:
a5:95:5d:a1:94:00:a2:a9:3d:47:b7:a4:fa:f0:75:
f7:a3:9c:7c:c4:9c:6c:c2:09:51:58:a1:5b:c9:ea:
6c:55:bf:6e:b8:d7:26:3e:38:71:52:04:e4:d3:50:
17:de:88:bf:e0:f6:4d:81:f9:f8:97:ee:c0:24:46:
ec:13:22:39:e8:04:19:12:2f:95:07:9b:00:7b:f7:
d3:de:87:d7:08:e9:2e:76:12:3f:f8:64:9a:c8:b5:
9c:b1:de:b1:9a:d2:e5:ee:b9:fb:14:2b:53:a8:8f:
77:45:27:a2:6e:5f:94:fd:c2:c8:70:e1:3e:f3:b8:
e8:d3:88:5c:b0:d7:43:fd:77:55:c0:7b:6a:5e:e1:
30:f7:52:2b:5a:aa:66:f1:31:68:91:86:56:56:aa:
24:4e:7e:cf:0c:02:4f:da:dc:33:6a:22:5a:8f:f3:
cf:19:c5:f1:50:7d:ed:5f:15:80:a6:49:d8:e3:f0:
92:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:15:0E:8D:1C:F0:F7:F5:FF:9D:3D:92:E4:8F:3B:71:CF:91:9B:C3
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402976.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.244.0/24
94.118.20.0/24
188.220.215.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:52:df:6b:44:30:28:16:4f:64:9b:63:83:3c:aa:35:9e:2b:
50:83:df:44:e0:9f:ff:d0:67:c7:1f:be:47:1d:a1:13:19:e0:
03:a3:54:11:9c:82:42:9e:5c:78:af:cf:13:18:68:cf:92:72:
f5:e4:c2:78:bf:0c:98:01:18:ad:d1:db:25:bd:f8:80:92:65:
40:e9:fa:ba:52:52:6b:46:8b:af:67:d6:58:fb:67:7f:91:cc:
dc:20:b8:6c:d7:ad:13:40:cb:0a:de:e3:73:2c:be:15:e7:26:
74:1a:01:13:0b:17:bc:a8:2b:26:be:9b:3a:42:63:39:4f:6d:
a8:d3:2f:a5:5c:03:44:0b:8f:61:db:1a:42:e4:68:8f:60:53:
94:37:77:d6:a6:cd:df:a6:d1:ed:cf:cb:cc:54:d0:57:15:6c:
d7:48:b7:80:98:67:ef:7b:23:7d:48:48:78:34:16:20:78:b9:
75:8c:91:d7:65:04:ae:ec:1c:c7:be:05:88:b8:6c:f5:e7:c8:
f6:aa:f0:20:c6:78:62:58:52:18:0d:54:74:62:46:1b:bd:95:
18:6a:05:0d:de:db:a4:04:c8:d9:62:c5:bd:9b:1d:e5:e5:87:
36:25:6c:cf:78:86:4b:19:25:9c:96:cd:81:1c:6e:ed:48:48:
f5:50:38:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 18:54:52 2026 by rpki-client