Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS402215.roa
File: AS402215.roa (raw, json)
Hash identifier: oeCfo07Wp1bFDNPoV8X9/Y6yuwwdLItJV3ytf4SSOZ8=
Subject key identifier: 17:3D:04:5A:22:AC:7A:F4:AD:A7:0D:24:2A:64:0C:B7:7C:48:EE:9C
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 7C4215E182F4ED72730921E673FE7A24974CA73C
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS402215.roa
Signing time: Thu 16 Apr 2026 06:53:53 +0000
ROA not before: Thu 16 Apr 2026 06:48:53 +0000
ROA not after: Thu 15 Apr 2027 06:53:53 +0000
asID: 402215
IP address blocks: 193.187.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:42:15:e1:82:f4:ed:72:73:09:21:e6:73:fe:7a:24:97:4c:a7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Apr 16 06:48:53 2026 GMT
Not After : Apr 15 06:53:53 2027 GMT
Subject: CN=173D045A22AC7AF4ADA70D242A640CB77C48EE9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:e1:8e:9a:aa:de:52:55:89:d4:0d:46:8d:
c3:e1:04:d4:82:e0:1e:89:9f:86:89:7f:a7:93:5d:
2c:f0:b3:1c:0c:2c:8a:99:c6:78:b4:b2:88:ec:2d:
d2:a2:74:2f:c8:98:4e:a4:26:65:ce:fd:49:90:6e:
29:e4:01:39:ad:6a:60:f6:ce:d2:9c:a1:d0:ab:9f:
03:25:23:57:5c:8c:ee:28:21:c0:da:0d:c0:11:ec:
3e:3a:63:f7:e2:97:ad:80:a1:18:9d:26:ce:6c:15:
58:4b:a0:05:c4:e8:71:2b:a8:07:26:1c:16:2e:80:
2a:ca:c7:db:55:49:fa:fc:9d:a2:b6:c7:d7:48:74:
f5:8b:67:8f:ee:b2:bf:90:a8:b0:ec:7a:7e:df:db:
e4:6f:1d:03:b6:2e:6f:45:51:bb:81:dc:6c:cf:a7:
63:88:54:e8:7e:9c:46:df:55:b2:dd:26:e8:5f:71:
d3:e6:5f:30:da:24:61:e9:52:13:75:28:b9:6c:cd:
e7:a6:6c:c8:b7:2a:12:ad:cf:2a:4d:00:c5:81:28:
f6:19:09:a8:a4:e4:bc:8f:6a:d0:1d:09:ec:a2:12:
48:cc:39:31:01:78:65:c4:89:24:fa:f4:70:9c:7f:
2d:dc:3c:e7:e3:93:0e:de:a3:e6:12:9e:ad:c6:0a:
46:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3D:04:5A:22:AC:7A:F4:AD:A7:0D:24:2A:64:0C:B7:7C:48:EE:9C
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS402215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.111.0/24
Signature Algorithm: sha256WithRSAEncryption
58:57:30:f0:f5:a0:61:d9:f2:8a:7f:3c:cc:ad:df:88:98:cf:
43:e6:11:23:2f:c3:66:36:27:7a:df:a0:78:56:7e:e9:89:8e:
f5:80:d1:a7:ad:ca:77:af:7c:47:f1:28:52:cd:5d:2b:e1:8e:
e2:52:f8:d2:8c:31:81:d7:9f:af:cf:d0:fd:01:10:67:a9:3e:
14:34:cc:ea:4c:0b:a3:c9:5e:6e:e4:21:b5:68:ee:55:cc:19:
2a:35:a9:0c:e3:66:5f:9f:25:24:68:e7:d6:6c:39:23:c8:c1:
77:6f:65:e9:6c:4d:54:33:5c:52:5d:f5:3e:cb:9e:eb:90:5f:
02:21:a3:5d:a7:30:90:b7:01:45:e6:50:3b:9f:2b:3f:31:93:
8c:e9:c4:49:6d:d1:e9:62:4b:bf:90:40:b3:b9:77:6f:b8:f1:
40:05:5d:fd:32:59:48:9e:05:e2:1e:60:c0:5f:db:9f:d5:ac:
74:35:91:a9:38:c9:ad:5c:6a:88:b7:f7:91:d5:ce:8f:8c:0a:
2d:ad:63:0b:8c:ae:f3:47:72:fb:4e:5f:28:35:f4:26:1a:2f:
c7:24:bf:32:a0:2e:07:1c:3c:0a:b8:8b:91:e2:0e:e7:37:40:
80:a2:8f:ec:19:f9:24:21:77:4c:90:93:ef:a6:33:cd:39:71:
6b:a8:11:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:13 2026 by rpki-client