Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS402866.roa
File: AS402866.roa (raw, json)
Hash identifier: ID25UVR/G2cFfypX1E46z5udcU4h2H4GKx7+BhZZq4Q=
Subject key identifier: CD:AF:31:D2:E0:73:AC:7C:E3:C8:AD:54:35:52:7F:84:C6:8E:8B:58
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 177FCDAE37402C9C0D47D3D4FD208EFBF1C380CA
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS402866.roa
Signing time: Wed 16 Sep 2026 22:51:45 +0000
ROA not before: Wed 16 Sep 2026 22:46:45 +0000
ROA not after: Wed 15 Sep 2027 22:51:45 +0000
asID: 402866
IP address blocks: 46.236.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:59:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:7f:cd:ae:37:40:2c:9c:0d:47:d3:d4:fd:20:8e:fb:f1:c3:80:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 16 22:46:45 2026 GMT
Not After : Sep 15 22:51:45 2027 GMT
Subject: CN=CDAF31D2E073AC7CE3C8AD5435527F84C68E8B58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:19:41:89:68:f8:08:08:a8:3e:c9:9e:68:3b:
d0:a0:e6:3c:7f:e4:5a:06:a5:94:d7:16:02:cd:a1:
59:38:fa:5b:fa:c4:74:aa:5b:80:4b:91:07:a8:59:
1a:21:5e:89:9b:9e:13:80:b3:fd:71:b9:48:f0:d8:
b8:93:2b:10:3b:cb:66:25:22:8e:fa:eb:37:f9:45:
4c:24:5d:f6:60:01:6f:12:22:bc:73:0a:4e:d7:ad:
fc:14:7a:cb:1d:6e:de:c6:7e:34:69:76:5c:df:08:
a5:0f:f6:6c:e7:04:98:f8:10:a3:24:48:f0:d4:5f:
52:36:bd:4d:0a:35:5f:23:79:44:2e:c3:f3:8a:5e:
20:d5:5b:01:55:52:9c:bb:0c:2e:97:eb:55:e8:fe:
02:6b:43:1d:0d:40:08:4a:04:2e:89:1c:e1:20:eb:
e2:72:85:69:90:bf:29:1d:f1:76:7a:1a:48:89:b8:
62:db:a7:f0:26:7d:95:67:6f:33:ec:e1:11:56:58:
66:65:cb:1f:96:88:97:63:8a:c4:8a:20:f7:68:42:
5c:17:d5:eb:76:d5:cb:c6:a9:74:10:89:f3:73:ab:
a6:ac:b8:b5:a9:83:4a:f3:41:5d:a7:69:32:89:26:
d4:0b:25:23:e0:ea:79:81:33:68:27:c0:26:68:14:
e9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AF:31:D2:E0:73:AC:7C:E3:C8:AD:54:35:52:7F:84:C6:8E:8B:58
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS402866.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.252.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:12:f0:2f:31:55:d2:fb:62:09:94:8c:bf:4d:8e:dc:03:54:
02:ed:cc:9b:14:4e:2d:97:f4:99:32:0a:24:55:00:aa:35:6a:
9b:f6:17:06:2f:5e:f2:1f:63:30:31:a1:02:75:2e:82:9a:f0:
2d:4f:ac:1f:65:2d:83:d1:19:f5:84:a3:a9:a8:97:7d:51:6d:
35:38:de:55:c0:92:05:13:b7:c8:ee:96:32:e2:40:72:e6:78:
a3:c5:5d:44:6f:2a:f7:4b:d6:d0:89:65:84:fa:06:3d:3d:b7:
2d:3f:4c:98:76:83:9d:79:28:f9:f7:83:4c:5c:f6:73:d6:69:
fd:c7:58:c4:6a:b6:47:e3:2e:47:bd:e6:c2:84:c6:79:88:b9:
b1:15:ba:97:3f:57:28:bd:39:d3:38:05:6f:49:09:88:94:b8:
c4:4a:78:82:0e:39:c7:d1:7c:b6:48:73:7e:81:30:da:99:54:
7d:57:e0:3f:8c:ee:8b:b1:9b:b4:b4:a7:fc:c7:cd:91:ac:f7:
78:5b:d3:a5:98:d2:58:53:5a:33:b7:8b:f2:fa:15:a2:af:c2:
ba:3e:92:98:df:7e:e3:ac:ba:c8:78:6e:08:50:b8:b9:2d:a6:
f2:86:3e:4a:26:0f:07:e2:0a:6e:1b:f9:7b:39:89:52:dc:82:
bd:78:13:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:13:59 2026 by rpki-client