Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS402310.roa
File: AS402310.roa (raw, json)
Hash identifier: bBtvXdosnRlClwA7Nxamb2Ct/b7vzpb0MjtYWQ7sb04=
Subject key identifier: 15:F5:69:0F:27:F8:33:BD:CA:9D:72:41:FA:D7:C0:7A:B5:BB:8B:6E
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 7D63AC3AD8932608DA215E3E87405BA8F78D559A
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS402310.roa
Signing time: Tue 20 Oct 2026 07:02:16 +0000
ROA not before: Tue 20 Oct 2026 06:57:16 +0000
ROA not after: Tue 19 Oct 2027 07:02:16 +0000
asID: 402310
IP address blocks: 90.96.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 06:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:63:ac:3a:d8:93:26:08:da:21:5e:3e:87:40:5b:a8:f7:8d:55:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 20 06:57:16 2026 GMT
Not After : Oct 19 07:02:16 2027 GMT
Subject: CN=15F5690F27F833BDCA9D7241FAD7C07AB5BB8B6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:72:12:71:f8:01:75:0e:c3:12:c7:ec:cb:
4e:96:25:e3:24:7a:b8:ad:44:9c:6d:b5:5e:51:de:
34:44:cd:e2:8f:5d:b0:d2:4d:e2:93:67:37:81:49:
16:e4:8b:27:65:38:b6:9b:9a:64:8d:fd:06:ce:fb:
08:33:ed:10:c2:51:1d:50:8e:71:1a:0c:c1:da:bc:
7b:0b:4a:f5:d3:a9:56:2d:7d:8d:0c:dd:45:04:d0:
98:4d:87:63:6f:b3:63:13:10:46:01:3c:d0:1b:6a:
98:08:10:bf:54:f4:d2:d2:21:da:db:e6:05:61:ff:
36:d0:21:ae:ff:61:33:68:46:5d:56:6e:28:9f:90:
71:3d:93:8e:25:30:ec:c8:04:1f:e3:6d:77:b7:6b:
d7:0f:63:36:9d:d6:a6:d3:85:88:8e:85:c1:28:cb:
68:db:f7:d1:ff:98:04:22:75:44:50:61:b3:94:e6:
aa:1a:c5:4d:0d:52:85:7f:18:e6:a5:12:cb:39:7e:
9b:4e:ac:c8:90:8c:63:48:19:8f:7b:61:3f:93:6b:
99:e6:c4:d7:06:5d:3b:08:43:93:3e:30:e6:82:f8:
ad:8a:9a:ee:e1:a9:f9:e1:c8:6a:af:44:ba:1f:a0:
96:ab:fb:64:6f:ff:a8:71:63:29:82:f6:f8:ef:84:
36:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F5:69:0F:27:F8:33:BD:CA:9D:72:41:FA:D7:C0:7A:B5:BB:8B:6E
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS402310.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.96.81.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a5:a9:1b:63:92:ee:0a:50:e2:7b:df:1b:59:48:b5:e6:4c:
49:f4:18:fb:b4:cc:9f:50:3c:e1:0e:c3:d2:64:84:b6:8d:8d:
57:1b:b7:4d:86:88:72:15:37:4b:59:fd:8a:d2:27:9c:68:13:
ee:b4:7c:7f:b9:67:9a:2e:2a:a9:35:33:e7:80:66:0e:ef:0e:
d1:9e:48:1c:39:56:a3:f3:3f:c6:bb:33:c7:be:65:a7:8f:12:
2b:7c:0a:66:e8:94:82:06:ba:1c:31:ad:6e:70:55:7c:5d:f0:
09:db:59:41:f4:e8:2f:0a:81:4b:8d:57:08:54:12:2c:bd:87:
33:50:ec:d4:a9:c8:43:8a:af:08:8b:eb:c4:f2:2a:99:4e:e8:
01:d5:b7:24:6d:7a:f6:2c:ee:46:cd:3b:f0:34:a4:7b:8c:61:
f2:93:65:89:f9:f1:ee:4e:35:da:e4:2d:23:54:65:ea:83:c4:
70:c1:d0:d8:8d:2a:41:54:fa:55:97:29:2c:81:85:5b:1c:78:
52:f2:fc:7c:18:40:56:f0:3a:90:31:8d:d2:5c:3e:4d:6f:e2:
73:2f:bd:50:85:ab:56:63:4c:d3:7e:c4:34:76:aa:93:02:78:
7f:8d:c4:07:b8:f7:c4:cb:bf:90:be:ec:16:c6:c5:4f:52:b4:
ff:05:a3:d3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUfWOsOtiTJgjaIV4+h0BbqPeNVZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjEwMjAwNjU3MTZaFw0yNzEwMTkwNzAyMTZaMDMxMTAvBgNV
BAMTKDE1RjU2OTBGMjdGODMzQkRDQTlENzI0MUZBRDdDMDdBQjVCQjhCNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8TXIScfgBdQ7DEsfsy06WJeMk
eritRJxttV5R3jREzeKPXbDSTeKTZzeBSRbkiydlOLabmmSN/QbO+wgz7RDCUR1Q
jnEaDMHavHsLSvXTqVYtfY0M3UUE0JhNh2Nvs2MTEEYBPNAbapgIEL9U9NLSIdrb
5gVh/zbQIa7/YTNoRl1WbiifkHE9k44lMOzIBB/jbXe3a9cPYzad1qbThYiOhcEo
y2jb99H/mAQidURQYbOU5qoaxU0NUoV/GOalEss5fptOrMiQjGNIGY97YT+Ta5nm
xNcGXTsIQ5M+MOaC+K2Kmu7hqfnhyGqvRLofoJar+2Rv/6hxYymC9vjvhDY1AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUFfVpDyf4M73KnXJB+tfAerW7i24wHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTNDAyMzEwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWmBR
MA0GCSqGSIb3DQEBCwUAA4IBAQBPpakbY5LuClDie98bWUi15kxJ9Bj7tMyfUDzh
DsPSZIS2jY1XG7dNhohyFTdLWf2K0iecaBPutHx/uWeaLiqpNTPngGYO7w7Rnkgc
OVaj8z/GuzPHvmWnjxIrfApm6JSCBrocMa1ucFV8XfAJ21lB9OgvCoFLjVcIVBIs
vYczUOzUqchDiq8Ii+vE8iqZTugB1bckbXr2LO5GzTvwNKR7jGHyk2WJ+fHuTjXa
5C0jVGXqg8RwwdDYjSpBVPpVlyksgYVbHHhS8vx8GEBW8DqQMY3SXD5Nb+JzL71Q
hatWY0zTfsQ0dqqTAnh/jcQHuPfEy7+QvuwWxsVPUrT/BaPT
-----END CERTIFICATE-----
Generated at Wed Oct 21 17:09:52 2026 by rpki-client