Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: azfAJqHW298U7Qg9rul9F+2NOZTKIzyzgJwD9zyPMbU=
Subject key identifier: 7B:A6:62:73:F4:6A:37:EA:22:1C:61:55:29:ED:A3:E7:B5:D2:DA:BA
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7808EC3C80FB411889B08587F047E17D92CA4224
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402265.roa
Signing time: Wed 05 Aug 2026 03:57:35 +0000
ROA not before: Wed 05 Aug 2026 03:52:35 +0000
ROA not after: Wed 04 Aug 2027 03:57:35 +0000
asID: 402265
IP address blocks: 91.124.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:08:ec:3c:80:fb:41:18:89:b0:85:87:f0:47:e1:7d:92:ca:42:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 5 03:52:35 2026 GMT
Not After : Aug 4 03:57:35 2027 GMT
Subject: CN=7BA66273F46A37EA221C615529EDA3E7B5D2DABA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e9:2e:a2:14:05:86:4d:66:3b:09:17:df:97:
2a:f3:7a:6a:a7:d8:b2:64:5f:ca:67:34:3d:0d:37:
f6:89:d3:79:2a:69:8c:b9:56:80:53:c6:11:a2:48:
fc:2e:2b:2e:2f:7b:8f:37:4d:7b:24:c0:df:1b:73:
ea:08:57:58:6d:b0:5c:ac:20:17:28:70:5d:04:a4:
81:15:e6:02:39:f2:e1:15:23:84:1f:2d:b6:75:90:
b9:72:25:56:46:09:db:f0:08:51:d7:5e:78:7f:d4:
fa:b2:0d:6b:c0:51:ee:56:a7:4e:85:c2:c3:4a:89:
53:fc:e6:88:f2:3b:2d:0a:5c:d4:e7:6b:36:aa:fa:
12:de:88:90:67:1d:77:d1:74:65:c6:3f:e8:ee:e6:
99:65:38:03:de:64:33:1c:80:cb:d8:59:16:fe:79:
64:95:d1:11:54:da:5a:27:96:fe:27:67:db:5d:34:
b9:70:b5:45:b6:8b:81:0a:55:1e:86:a2:9d:db:72:
12:da:54:af:10:42:3b:e1:61:43:db:72:7e:af:0f:
22:b2:54:22:82:55:34:8a:7e:d1:a3:b8:c1:39:33:
cc:50:7b:a7:5f:02:5f:ff:4f:ea:56:06:7b:8c:89:
92:34:7d:db:40:7f:07:8a:2a:c7:27:73:e8:02:7e:
8a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A6:62:73:F4:6A:37:EA:22:1C:61:55:29:ED:A3:E7:B5:D2:DA:BA
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.35.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:09:f6:66:b5:1a:a6:a6:f0:d9:ff:5c:09:0a:5a:bb:69:b8:
b4:4f:a9:91:37:e9:e1:1d:d8:f1:fc:8d:4e:00:e7:5f:53:68:
18:de:9d:67:43:73:d3:b1:0f:f7:56:34:f5:e1:5a:d8:0b:50:
fd:32:bc:ed:3f:b8:94:21:22:15:a8:85:a0:75:81:27:da:1f:
28:5c:a1:a7:a6:79:23:19:88:0a:51:4b:60:20:0a:5e:3c:5f:
5d:b4:94:ed:6d:43:e8:0f:70:ac:cb:f4:ef:c6:2d:da:7b:40:
92:59:dc:0a:b9:1e:af:f3:24:8f:9a:4a:86:e8:01:3a:1d:79:
d9:22:ac:0f:f5:bc:ab:64:4c:4e:6f:7f:cf:7e:f3:09:c5:47:
c7:9e:f3:5b:c8:b9:b2:af:61:20:ac:c3:8f:52:02:48:ba:d2:
a5:6f:2e:cf:90:ba:fc:9e:2a:c7:59:c8:dd:bb:5f:48:65:d1:
49:09:82:9a:3f:7b:92:b6:79:a6:80:c8:ec:59:4c:e1:3c:51:
a2:89:be:16:0e:01:b1:b0:e3:db:6c:5d:f4:da:8c:e7:f1:65:
12:45:64:ee:fb:7e:be:64:b8:d9:77:ec:f2:2d:b6:db:d6:13:
ee:01:e2:fb:ca:d6:84:86:9d:ef:92:81:d0:5e:70:c0:10:b7:
41:77:04:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 07:52:08 2026 by rpki-client