Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS402671.roa
File: AS402671.roa (raw, json)
Hash identifier: lGVchOqPN3wwpBkR/wV0gpIsBZzS7z5ZebJ/D0rJ9TI=
Subject key identifier: F9:84:FE:DD:5F:B7:B9:C2:8C:E6:A8:E8:60:31:60:22:08:BE:F5:DC
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 1DA06E2B855EEA68396CC5C87451A8693C0382A8
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS402671.roa
Signing time: Tue 15 Sep 2026 12:57:22 +0000
ROA not before: Tue 15 Sep 2026 12:52:22 +0000
ROA not after: Tue 14 Sep 2027 12:57:22 +0000
asID: 402671
IP address blocks: 2a04:7a80::/29 maxlen: 29
2a05:c580::/29 maxlen: 29
2a09:1c0::/29 maxlen: 29
2a0a:5700::/29 maxlen: 29
2a10:ee80::/29 maxlen: 29
2a10:f280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 00:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:a0:6e:2b:85:5e:ea:68:39:6c:c5:c8:74:51:a8:69:3c:03:82:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Sep 15 12:52:22 2026 GMT
Not After : Sep 14 12:57:22 2027 GMT
Subject: CN=F984FEDD5FB7B9C28CE6A8E86031602208BEF5DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4d:a5:8c:38:1a:49:80:0d:51:a7:c4:c9:db:
8e:4d:6c:aa:52:1a:f7:e3:07:7a:ba:c0:1e:b5:2e:
91:3c:4f:66:7f:68:91:ff:35:42:75:95:f4:1f:94:
5b:74:1f:31:29:3d:6f:d4:87:02:1c:3c:47:ba:ba:
97:67:c9:e4:87:a7:78:05:61:72:54:27:b8:b2:68:
5e:f5:24:c6:2f:ae:28:15:c2:d3:6b:79:ea:6a:91:
d4:93:34:fa:d2:f1:fa:aa:bd:b6:74:9d:69:bd:1e:
ca:39:4a:83:69:6c:12:12:8e:9f:51:79:98:0d:b8:
b5:c4:d5:5f:27:0c:e7:5d:43:5b:bf:65:31:e7:7e:
45:fc:a3:62:c3:fa:dd:f0:aa:31:d2:ad:af:82:9f:
b5:63:7a:74:5b:51:cc:6a:c4:10:fc:15:c2:22:85:
45:e7:b2:e8:4e:c0:0f:52:be:0f:5f:6e:4f:7a:1d:
27:1d:84:6c:4c:2a:23:50:c4:3f:c2:b3:68:64:1b:
8a:de:88:73:fc:e3:3e:52:2a:d9:ff:9c:12:c7:93:
39:8a:62:f1:18:bd:ad:17:c9:c3:33:45:1c:54:c8:
19:3d:cf:12:b6:d5:5e:69:81:82:a8:33:30:d9:3b:
88:c4:ad:1b:a0:86:8a:5e:9b:45:16:c2:19:ab:e4:
cf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:84:FE:DD:5F:B7:B9:C2:8C:E6:A8:E8:60:31:60:22:08:BE:F5:DC
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS402671.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:7a80::/29
2a05:c580::/29
2a09:1c0::/29
2a0a:5700::/29
2a10:ee80::/29
2a10:f280::/29
Signature Algorithm: sha256WithRSAEncryption
8c:45:86:79:f4:29:f3:a8:6d:70:3a:4b:2f:2f:5c:0c:7a:0f:
45:6a:8b:f6:03:8b:9d:12:7d:66:ea:20:f8:5c:84:96:a4:9c:
35:84:93:e3:8c:cf:dc:bf:5d:eb:3c:94:a6:3f:b8:be:b6:1c:
d5:0f:94:8a:9a:9b:d0:00:cd:69:ac:6c:5a:e8:6a:22:2b:ac:
4f:22:1a:13:75:12:db:bb:09:41:9e:31:1d:f8:84:2e:85:5f:
af:9f:0a:47:c7:e0:49:62:ee:43:7e:e0:f8:ef:32:90:e2:0a:
f1:d2:80:8e:58:92:06:44:40:de:21:f6:52:20:24:b0:fd:4d:
3d:bd:9d:7c:9c:7c:a8:22:85:ee:29:88:0c:ca:1f:b8:d6:57:
d0:3e:1d:ef:e0:df:70:af:0f:6a:f1:22:bb:87:57:38:2b:77:
1c:66:59:d9:07:05:d4:60:86:c3:29:34:3b:de:49:9a:fd:3c:
b8:e1:2c:ce:a5:34:fa:b1:52:fa:c6:e2:a5:a3:f2:48:f8:e4:
f4:15:89:05:1b:73:41:b7:b5:fe:ce:5e:90:9b:e3:38:a3:80:
ff:be:a3:8b:ae:f5:5d:a0:89:b6:55:fa:5f:83:16:48:0d:6f:
5b:2e:bd:dd:1a:45:66:6e:cb:22:09:2e:be:77:15:5d:a3:b7:
00:29:d7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:25:33 2026 by rpki-client