Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: ZvIuLLE2sOOk8RHJ21epFiUKYEI0r8Efgmc3PMiNzew=
Subject key identifier: 04:EA:3B:47:3C:44:77:2F:6A:F1:58:86:9E:03:65:D0:A7:11:24:39
Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Certificate serial: 3B958BD0865CAC7FD2738BC59CF9748C102BFADD
Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402265.roa
Signing time: Thu 24 Sep 2026 06:38:09 +0000
ROA not before: Thu 24 Sep 2026 06:33:09 +0000
ROA not after: Thu 23 Sep 2027 06:38:09 +0000
asID: 402265
IP address blocks: 152.234.128.0/24 maxlen: 24
152.234.129.0/24 maxlen: 24
152.234.131.0/24 maxlen: 24
152.234.132.0/24 maxlen: 24
152.234.138.0/24 maxlen: 24
179.253.32.0/24 maxlen: 24
179.253.33.0/24 maxlen: 24
179.253.34.0/24 maxlen: 24
179.253.35.0/24 maxlen: 24
179.253.36.0/24 maxlen: 24
179.253.37.0/24 maxlen: 24
179.253.38.0/24 maxlen: 24
179.253.39.0/24 maxlen: 24
179.253.40.0/24 maxlen: 24
179.253.42.0/24 maxlen: 24
179.253.62.0/24 maxlen: 24
179.253.63.0/24 maxlen: 24
179.254.192.0/24 maxlen: 24
187.14.128.0/24 maxlen: 24
187.14.129.0/24 maxlen: 24
187.55.0.0/24 maxlen: 24
187.55.1.0/24 maxlen: 24
187.55.2.0/24 maxlen: 24
187.55.3.0/24 maxlen: 24
187.55.4.0/24 maxlen: 24
187.55.5.0/24 maxlen: 24
187.55.6.0/24 maxlen: 24
187.55.14.0/24 maxlen: 24
187.55.15.0/24 maxlen: 24
187.55.16.0/24 maxlen: 24
189.31.0.0/24 maxlen: 24
189.31.1.0/24 maxlen: 24
189.73.32.0/24 maxlen: 24
189.73.33.0/24 maxlen: 24
189.73.34.0/24 maxlen: 24
189.73.35.0/24 maxlen: 24
189.73.36.0/24 maxlen: 24
189.73.37.0/24 maxlen: 24
189.73.38.0/24 maxlen: 24
189.73.39.0/24 maxlen: 24
189.73.40.0/24 maxlen: 24
189.73.41.0/24 maxlen: 24
189.73.42.0/24 maxlen: 24
191.0.80.0/24 maxlen: 24
191.0.94.0/24 maxlen: 24
191.0.95.0/24 maxlen: 24
191.45.33.0/24 maxlen: 24
191.45.35.0/24 maxlen: 24
200.141.48.0/24 maxlen: 24
200.141.49.0/24 maxlen: 24
200.141.50.0/24 maxlen: 24
200.141.51.0/24 maxlen: 24
200.149.188.0/24 maxlen: 24
200.149.191.0/24 maxlen: 24
200.180.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:95:8b:d0:86:5c:ac:7f:d2:73:8b:c5:9c:f9:74:8c:10:2b:fa:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Validity
Not Before: Sep 24 06:33:09 2026 GMT
Not After : Sep 23 06:38:09 2027 GMT
Subject: CN=04EA3B473C44772F6AF158869E0365D0A7112439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8d:ad:ac:aa:fd:f7:50:40:f4:3f:0e:ee:5b:
b4:56:ef:fe:4f:d3:db:8e:f0:30:48:8e:80:51:7b:
9a:68:50:87:a8:3b:e7:4b:05:57:91:fb:0c:cb:ae:
c3:fa:ab:3f:8a:bc:b3:32:be:e6:86:f3:a3:9e:bb:
e1:dd:38:96:9e:3f:b3:03:79:78:4e:3b:8b:d0:50:
c9:2e:c2:64:15:14:f9:0e:80:b3:8d:51:80:83:23:
84:31:fc:cc:17:a8:cd:cf:ae:7e:a6:b8:86:7f:e1:
c2:d0:33:9c:56:6b:f0:98:d1:8e:4c:bd:2f:fe:44:
83:c7:ed:62:11:2c:c9:a4:7c:5d:c1:a6:1b:37:39:
67:86:e1:c8:32:f2:5e:6c:f6:60:86:2a:f2:84:a3:
01:63:72:f7:08:9d:a5:34:b2:86:4b:16:ce:9a:1b:
d2:f4:f4:15:8c:43:23:3a:7a:8f:bc:87:c6:e4:8a:
61:44:af:e7:6d:2b:2f:5f:be:9e:4a:fa:55:5a:28:
06:a6:cc:b8:88:e6:5a:e2:52:5d:49:51:7c:99:38:
83:51:69:2a:73:34:51:cf:75:6e:e0:08:f1:00:65:
fc:3a:cc:7a:c2:7d:23:2b:0c:df:96:9e:b2:f6:57:
cf:f1:8a:cd:a6:6e:67:87:3a:30:b2:00:95:9f:2c:
de:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EA:3B:47:3C:44:77:2F:6A:F1:58:86:9E:03:65:D0:A7:11:24:39
X509v3 Authority Key Identifier:
keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.234.128.0/23
152.234.131.0-152.234.132.255
152.234.138.0/24
179.253.32.0-179.253.40.255
179.253.42.0/24
179.253.62.0/23
179.254.192.0/24
187.14.128.0/23
187.55.0.0-187.55.6.255
187.55.14.0-187.55.16.255
189.31.0.0/23
189.73.32.0-189.73.42.255
191.0.80.0/24
191.0.94.0/23
191.45.33.0/24
191.45.35.0/24
200.141.48.0/22
200.149.188.0/24
200.149.191.0/24
200.180.184.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:3e:1d:51:af:5e:08:5e:42:08:03:e3:30:84:fa:8c:63:55:
eb:1d:df:f8:61:88:6f:86:23:74:00:1b:39:06:fd:3d:c3:5a:
f5:b2:65:eb:dc:6e:16:30:fa:54:c4:d2:fd:55:9a:2a:f6:ee:
7f:39:09:81:69:70:27:b8:87:06:18:9a:ed:03:34:22:9d:75:
11:90:5d:a7:e8:07:7d:1d:9b:08:0e:e8:b9:41:34:8a:4c:9e:
c0:e0:33:4a:3f:e8:5b:0f:c5:e6:2e:e2:9e:32:c4:f1:84:9e:
f3:6a:ab:ed:0e:dd:33:91:9d:7c:9b:15:2d:7b:96:30:73:5f:
8e:aa:22:8c:1c:72:c7:61:5d:df:aa:5e:e0:65:0b:d9:d2:b2:
b5:b2:50:dc:16:a5:4f:22:fa:b3:dd:cf:a4:07:73:a0:47:34:
32:8d:62:95:af:ce:e5:02:44:ba:10:21:c4:6b:68:be:5c:6f:
cd:30:b9:60:27:a4:f6:fb:b1:35:ae:db:27:d4:bb:93:ca:17:
7b:60:b0:75:60:a0:64:d6:30:fd:ac:b6:81:b5:42:44:94:69:
4d:f8:60:90:2c:b0:7c:8c:c5:60:35:e0:1a:bb:c2:c4:19:3e:
ed:af:70:86:dd:c5:26:f0:57:f1:1a:8a:99:1c:19:a3:ee:24:
7b:6c:ee:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:02 2026 by rpki-client