Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS402866.roa
File: AS402866.roa (raw, json)
Hash identifier: TZxltknn7mIwvHwJzJ7NhRCio8aQ4CktddEh194Ub1c=
Subject key identifier: E2:DF:29:C7:E5:6B:81:FB:5F:82:E8:88:DC:D5:39:97:88:B3:8C:45
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 026F993894F540C79C7CF133A8EDD0CA227F544D
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS402866.roa
Signing time: Wed 16 Sep 2026 07:25:20 +0000
ROA not before: Wed 16 Sep 2026 07:20:20 +0000
ROA not after: Wed 15 Sep 2027 07:25:20 +0000
asID: 402866
IP address blocks: 212.74.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:6f:99:38:94:f5:40:c7:9c:7c:f1:33:a8:ed:d0:ca:22:7f:54:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:20 2026 GMT
Not After : Sep 15 07:25:20 2027 GMT
Subject: CN=E2DF29C7E56B81FB5F82E888DCD5399788B38C45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:81:ef:b0:9b:08:47:dc:21:d5:96:31:6c:
c8:85:a5:b7:87:19:6a:0b:b5:ab:cb:d9:e5:cb:de:
83:e6:76:67:9c:fd:9f:b1:df:de:90:1d:97:1d:36:
a4:5a:79:4a:34:13:5d:17:ac:1c:ff:bd:84:d9:a8:
72:5c:9f:7a:30:74:8a:ce:a0:b1:8b:8c:31:a1:9c:
a1:8b:33:70:a7:bb:e5:89:64:d0:5a:75:ec:e6:9e:
c2:d0:8e:2c:44:8f:44:a3:61:b4:a1:6c:ec:a8:2c:
b8:90:7e:02:a6:05:b6:95:ce:f3:ef:be:e7:9f:83:
63:47:e3:c2:e0:75:8f:fe:41:9a:99:fa:e7:d8:c9:
11:47:74:f2:7b:9c:f8:c3:7e:de:a5:d2:5d:ea:1c:
3c:fe:24:64:df:16:89:43:6d:d8:07:d0:5f:58:86:
1a:2f:65:cd:cd:d2:14:dc:73:e8:22:3b:9e:ad:70:
af:53:74:0a:4c:9c:f3:1b:09:10:d3:b9:10:93:fc:
a1:22:d9:24:ef:7c:1a:9b:6f:4b:61:19:f0:9a:47:
33:5f:5c:ee:a8:01:d0:b5:10:03:a2:dd:94:62:4a:
45:24:4e:87:e5:4c:12:75:a3:53:09:1c:86:39:68:
43:c0:3c:26:15:e0:7e:93:d0:3b:ed:67:1b:f2:81:
15:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DF:29:C7:E5:6B:81:FB:5F:82:E8:88:DC:D5:39:97:88:B3:8C:45
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS402866.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.42.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:3f:de:6b:8b:0a:2c:3e:4e:eb:c6:2d:be:d4:65:96:58:39:
42:a5:1f:db:4c:66:94:43:0e:03:a5:e9:1c:4d:ed:c2:92:ed:
59:e7:98:a3:31:56:7d:f2:ca:33:ec:9c:d9:ef:69:ce:27:16:
22:a1:33:09:58:59:a2:cf:d5:83:3e:1b:85:a6:28:1d:d8:85:
f6:b1:72:a5:d7:73:1e:9b:18:74:b9:e2:07:32:23:26:32:61:
ef:96:d7:9a:b5:79:ae:48:f1:6c:45:e1:d9:c8:56:b4:66:ad:
c6:5c:f5:00:4a:bb:69:df:2c:55:10:13:07:25:75:25:bc:87:
12:be:9c:98:a7:91:3f:85:28:dd:6a:4e:43:f0:3c:05:da:17:
b2:30:46:80:68:e0:17:c7:a8:7e:09:b5:84:af:35:d1:03:ce:
5a:4f:7f:68:f1:4d:e2:28:a4:46:fa:75:9d:de:7d:23:da:ec:
6b:73:ce:df:8c:0d:5b:83:25:fd:3b:45:11:f3:9d:b0:bf:51:
29:90:a6:a1:41:22:f3:2b:05:40:a4:25:44:b3:d5:8f:7b:ef:
c6:4a:15:1e:73:cc:ac:d2:f2:87:8c:49:7d:cd:f6:9e:b7:e9:
c4:67:1b:74:63:92:72:1a:f0:3d:6a:b4:4c:89:b8:e6:dc:ef:
80:28:66:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:10:28 2026 by rpki-client