Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS402214.roa
File: AS402214.roa (raw, json)
Hash identifier: DO3CMYrqBEHJKAZMqofqf/CrucyAHMRvNt5/oyHW2C8=
Subject key identifier: 20:BA:4B:9E:CB:0B:F6:BF:44:CB:D9:FD:6B:A7:DC:62:2B:54:87:66
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 435FAF9FE176D9FE505A5E39480B26148B3FEEA1
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS402214.roa
Signing time: Wed 16 Sep 2026 07:25:20 +0000
ROA not before: Wed 16 Sep 2026 07:20:20 +0000
ROA not after: Wed 15 Sep 2027 07:25:20 +0000
asID: 402214
IP address blocks: 5.199.17.0/24 maxlen: 24
5.199.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:5f:af:9f:e1:76:d9:fe:50:5a:5e:39:48:0b:26:14:8b:3f:ee:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:20 2026 GMT
Not After : Sep 15 07:25:20 2027 GMT
Subject: CN=20BA4B9ECB0BF6BF44CBD9FD6BA7DC622B548766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:41:b9:ec:b9:4e:db:a7:87:4f:62:5a:56:
06:c3:48:fb:3c:48:6a:2d:41:b2:7a:52:c9:b1:c2:
1a:c7:4d:e2:87:74:1a:fa:08:d5:86:2d:bf:80:f1:
84:d2:4d:29:61:c8:b3:30:c6:9c:ca:49:c9:18:5f:
24:34:33:a9:64:91:44:2d:df:9c:50:cb:43:ee:90:
90:3c:1e:b7:ce:0c:14:e2:04:50:9e:fc:a8:85:4e:
50:86:eb:b7:38:44:12:ae:2a:7b:88:c4:b9:43:ee:
6f:33:ae:3e:fa:1c:41:27:af:8b:ac:e3:a0:54:17:
4a:9c:78:95:73:97:d8:99:ba:a7:14:20:a2:e3:31:
d4:54:fb:1a:dd:bb:bf:ff:78:e7:e0:03:4c:d4:1e:
58:4f:21:dc:ac:80:09:28:c5:61:d0:42:68:c1:9d:
ac:5e:ce:45:63:77:58:d9:c0:64:01:67:bf:ce:ae:
dd:53:f6:df:2a:11:48:9d:6c:cd:13:d4:57:41:c3:
b2:87:47:11:c2:d4:8f:89:a5:34:2b:e7:46:b6:3d:
ac:ba:34:0a:27:7f:ac:2a:b6:63:c4:fc:d1:4a:b8:
c7:f1:ad:53:3a:d7:5c:09:35:d7:56:82:5d:b4:f3:
a8:c6:d8:54:18:8e:f3:c5:32:8d:f3:5c:88:d7:be:
d3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BA:4B:9E:CB:0B:F6:BF:44:CB:D9:FD:6B:A7:DC:62:2B:54:87:66
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS402214.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.17.0/24
5.199.20.0/24
Signature Algorithm: sha256WithRSAEncryption
04:94:72:9a:35:77:04:fd:41:c2:f6:aa:5c:44:a5:be:9b:8f:
80:1c:b5:69:dc:bc:56:33:59:b7:13:3e:08:bc:a1:c2:3f:75:
7a:91:60:06:17:cb:6c:eb:39:d8:3f:cd:c9:06:6f:52:07:d2:
4b:2c:be:4b:31:bd:87:de:f9:df:13:4d:d8:cc:94:99:1b:ea:
55:fe:4c:19:13:b0:5b:01:3a:89:c6:fb:a4:3e:3d:1f:18:96:
b0:41:40:6d:1b:12:e7:78:c8:d3:2a:84:4c:50:5d:c2:0e:f3:
8f:27:70:17:e8:c3:df:14:02:f0:0f:13:29:98:ff:b7:ae:83:
85:ac:fa:10:de:10:8c:87:b0:18:9d:ce:ad:82:67:ad:f0:08:
99:82:63:57:cc:b0:57:3a:38:70:c8:e4:b0:88:8a:27:26:21:
74:c7:b7:da:a6:a4:11:15:90:2d:10:4f:f2:16:23:af:0c:8a:
63:83:3f:96:16:48:71:9a:b1:af:f0:e0:fe:09:ab:18:1d:06:
c0:ae:aa:b2:0b:cf:a7:d1:ef:e8:d1:87:8e:4e:05:2b:da:1e:
ea:ce:5a:8b:24:0c:92:f5:4c:50:db:be:ac:2c:37:6d:9c:f6:
8a:59:c5:e6:13:1b:20:54:00:98:10:db:41:7e:5a:5c:60:96:
54:f0:31:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:13:32 2026 by rpki-client