Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS402857.roa
File: AS402857.roa (raw, json)
Hash identifier: wmbP2/zQFPbOn7gHRcAjD0yoFgNi6Nxn5thOVy40K4Q=
Subject key identifier: AF:78:C3:C7:60:7F:7A:12:99:42:9C:60:3F:C4:16:D2:32:71:8C:2B
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 76107BDD7C86822AF9C736B2581B47A842B934DB
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS402857.roa
Signing time: Wed 16 Sep 2026 07:25:22 +0000
ROA not before: Wed 16 Sep 2026 07:20:22 +0000
ROA not after: Wed 15 Sep 2027 07:25:22 +0000
asID: 402857
IP address blocks: 5.199.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:10:7b:dd:7c:86:82:2a:f9:c7:36:b2:58:1b:47:a8:42:b9:34:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:22 2026 GMT
Not After : Sep 15 07:25:22 2027 GMT
Subject: CN=AF78C3C7607F7A1299429C603FC416D232718C2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:00:dc:41:b9:a1:a3:29:ea:d9:f7:69:96:3d:
04:b9:e1:91:55:9b:a8:59:9d:7c:8e:eb:3a:f3:f9:
8d:9d:ac:59:f4:ed:c6:d3:ac:41:c7:32:c3:28:ab:
fd:19:3b:82:33:07:f1:6d:d4:ab:75:9e:91:b8:d7:
c4:fd:be:f7:6c:87:f9:b5:19:d3:94:e8:b2:90:7e:
f2:02:5e:dc:a8:a5:17:23:ed:86:2b:75:24:db:af:
7d:24:17:b9:9b:fd:e0:92:70:06:7a:8c:63:54:76:
e0:23:36:b9:dd:1a:6f:76:9d:d4:23:e5:75:37:c9:
e5:5f:a6:ee:5d:8a:9f:1e:52:82:72:f0:85:bc:0f:
bd:f6:0c:0c:2b:da:8a:f0:68:ef:5a:e8:bf:c9:d8:
5f:39:38:60:56:76:e2:d2:76:c3:8f:cd:17:98:82:
4f:3d:3d:85:bc:a6:e6:89:01:3c:cd:2a:6b:eb:d3:
13:6d:ec:73:4f:8c:c9:e0:92:cc:72:14:f0:5a:c3:
4e:b7:11:ce:8f:90:b2:b2:a1:9b:df:65:bc:8d:ba:
df:91:20:86:93:16:68:7a:4e:30:b7:f5:3f:0a:7c:
21:bf:59:fa:ff:b5:22:4f:77:ec:db:49:38:11:d7:
ca:19:3a:f9:60:77:0c:86:85:8c:52:e2:85:46:33:
a7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:78:C3:C7:60:7F:7A:12:99:42:9C:60:3F:C4:16:D2:32:71:8C:2B
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS402857.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.42.0/24
Signature Algorithm: sha256WithRSAEncryption
17:c0:ea:d7:5a:09:66:e7:5a:91:d6:5a:88:48:c3:1c:54:c6:
63:55:cc:a9:fa:33:68:73:f9:02:d2:68:4a:01:cf:c9:5d:7c:
83:ff:df:db:fc:2b:ba:09:a3:36:22:26:da:d1:91:d3:13:23:
76:c8:e0:93:80:47:e3:3b:d6:0d:e5:8d:34:06:2e:48:91:76:
97:24:df:29:2a:f1:a6:ac:a7:f4:3b:3b:04:c0:19:91:78:52:
f3:5e:7d:81:e3:a5:ce:bd:30:3b:63:a3:41:26:34:06:77:85:
1c:7a:8f:ff:7d:75:19:2c:e5:c2:cb:f3:2e:41:32:21:a0:d6:
20:26:17:b8:b1:61:9d:7b:dd:86:42:44:48:79:a0:d7:a9:b1:
7e:59:2b:e0:41:31:01:1c:1b:ab:92:cf:02:13:84:7d:b2:b5:
31:fa:24:8d:9b:8b:d3:63:ab:67:79:18:07:0d:89:b0:55:84:
cd:7c:f9:0d:3b:36:13:e9:46:1a:55:9a:50:a8:be:c8:8b:94:
09:90:b8:ee:23:17:3e:96:f9:60:d7:72:fa:2c:35:e5:ae:e5:
cb:d9:1b:ef:33:cb:5e:2d:4a:3f:90:8c:17:c9:92:77:dd:b0:
22:31:ae:71:8c:03:f4:2c:fb:4c:22:33:6c:0a:b5:55:5b:a6:
71:46:a2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:10:28 2026 by rpki-client