Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS402899.roa
File: AS402899.roa (raw, json)
Hash identifier: hXTzOOIqjq3Zble20hug7A1ugwm73n9/6mvA6Ltb9ZM=
Subject key identifier: D2:F7:CC:00:3C:93:95:15:63:A0:04:11:C5:0C:33:CA:50:86:EB:32
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 2C5908553185214DC2661D8FCA1A5CEB4D814EF9
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS402899.roa
Signing time: Tue 15 Sep 2026 12:57:01 +0000
ROA not before: Tue 15 Sep 2026 12:52:01 +0000
ROA not after: Tue 14 Sep 2027 12:57:01 +0000
asID: 402899
IP address blocks: 2a03:f100::/29 maxlen: 29
2a05:b600::/29 maxlen: 29
2a09:c0::/29 maxlen: 29
2a09:fe80::/29 maxlen: 29
2a10:ed80::/29 maxlen: 29
2a10:f180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 00:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:59:08:55:31:85:21:4d:c2:66:1d:8f:ca:1a:5c:eb:4d:81:4e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Sep 15 12:52:01 2026 GMT
Not After : Sep 14 12:57:01 2027 GMT
Subject: CN=D2F7CC003C93951563A00411C50C33CA5086EB32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:05:ac:69:bb:bf:23:ad:b4:a8:74:4a:d7:49:
79:9f:6f:d0:1c:70:de:4b:82:2e:76:23:f8:f6:0c:
e7:59:6b:16:94:58:04:f3:39:75:59:aa:87:70:cb:
96:ab:e3:8a:ce:8e:56:9d:04:cc:04:96:32:76:eb:
5c:04:e8:f6:25:25:2c:a9:d9:33:a1:3c:3c:9e:03:
ba:51:e1:32:b4:28:29:3b:e9:d0:c3:1e:db:83:0c:
1a:3a:e1:cf:8a:69:e0:57:70:d0:a5:e5:0c:73:6a:
f4:aa:8f:4e:65:59:bc:e1:8f:8e:3e:1c:f0:1b:29:
c4:86:d6:f7:a9:f9:5e:59:47:91:0c:30:7e:7e:3d:
fe:5b:13:32:f8:75:e4:c9:1e:34:1b:f3:47:3b:98:
fe:20:dd:fd:00:c8:72:62:10:af:ee:56:77:a7:e4:
e6:22:21:10:e9:55:f1:89:ef:6f:4d:27:36:03:82:
e2:cd:f3:b3:a2:12:d0:89:59:89:ff:fc:ae:2b:58:
bd:ec:bf:76:06:0a:81:ad:e7:15:7c:a4:16:d0:b6:
4e:df:a8:c7:32:2e:e0:0d:99:fd:d4:db:d8:1c:02:
d4:7a:f7:32:8d:7f:09:26:bd:23:34:31:89:79:02:
7e:d4:1b:b1:43:4d:e5:c7:b0:a4:d7:98:62:14:49:
0a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F7:CC:00:3C:93:95:15:63:A0:04:11:C5:0C:33:CA:50:86:EB:32
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS402899.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:f100::/29
2a05:b600::/29
2a09:c0::/29
2a09:fe80::/29
2a10:ed80::/29
2a10:f180::/29
Signature Algorithm: sha256WithRSAEncryption
97:a7:b5:e0:a5:5b:cf:3e:91:2c:ec:71:8c:0c:8d:f9:0a:95:
1a:ae:f3:f6:b8:2d:36:03:f8:0e:db:7d:36:1d:78:a5:4a:a3:
11:a4:89:1b:a9:ed:a7:26:83:65:b7:ba:68:c2:f9:6f:9f:f0:
87:ef:75:9c:b7:23:a3:ee:58:f3:f7:c8:bf:c5:fe:c8:1e:2e:
2d:9d:b9:8d:04:cc:87:5a:6a:4f:1c:5a:e6:4b:8b:d2:e1:7b:
0b:39:20:9d:f3:16:1a:5d:dc:7f:3d:56:e9:42:8f:41:be:be:
c2:93:85:28:70:6c:20:7e:a2:51:58:ad:53:51:97:e7:80:60:
0b:31:84:0c:de:f6:8e:2d:59:bc:0a:52:28:8a:62:69:9e:ef:
a1:5b:f1:e7:cf:2c:59:40:1e:3c:e0:83:bb:66:a1:fb:48:de:
38:3f:42:f3:e0:2c:6e:3a:1d:6d:63:f2:78:c2:60:2f:d7:e0:
6d:0e:03:b6:e1:d8:b1:0a:13:1b:7f:e1:76:dc:d9:39:f5:cd:
57:b7:01:dd:ff:6f:13:d4:f9:d8:27:ef:bf:5e:41:bf:c5:42:
05:3a:6a:d7:fd:87:1c:b6:70:6f:01:34:71:c0:4e:89:58:be:
f4:52:ea:fb:e7:a9:5f:2c:b7:8d:ac:58:b4:0f:eb:85:a7:fe:
94:75:9d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:28:54 2026 by rpki-client