Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS401362.roa
File: AS401362.roa (raw, json)
Hash identifier: 761bCkCXCPEJWDNle6tp1nxpL3zeVIQV+OV1bbhrRgc=
Subject key identifier: 74:10:11:7C:7A:BB:29:DA:9E:85:DA:EB:E8:54:52:B6:11:62:E9:E6
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1E76B6FFFF762F6983FD97D76AB699896C5E18F4
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS401362.roa
Signing time: Mon 21 Sep 2026 08:19:25 +0000
ROA not before: Mon 21 Sep 2026 08:14:25 +0000
ROA not after: Mon 20 Sep 2027 08:19:25 +0000
asID: 401362
IP address blocks: 51.194.188.0/24 maxlen: 24
51.241.99.0/24 maxlen: 24
78.105.220.0/24 maxlen: 24
188.220.3.0/24 maxlen: 24
188.221.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:76:b6:ff:ff:76:2f:69:83:fd:97:d7:6a:b6:99:89:6c:5e:18:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 21 08:14:25 2026 GMT
Not After : Sep 20 08:19:25 2027 GMT
Subject: CN=7410117C7ABB29DA9E85DAEBE85452B61162E9E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:65:3d:3e:6f:83:87:d0:6d:95:0f:e1:e6:b4:
60:66:e1:ab:63:c4:27:86:fb:e4:09:60:37:2a:5b:
f7:83:a4:ff:0f:29:18:55:0b:80:c5:ba:f6:ed:be:
03:50:5d:2b:10:aa:c8:c9:1a:66:dc:a7:6f:51:0d:
a9:6d:e6:04:84:3d:0d:92:6b:54:9e:34:15:34:d6:
5e:b6:bd:96:59:46:ab:cd:d1:aa:f2:08:41:88:e1:
93:46:6b:bb:1e:24:4f:b9:8b:36:a0:03:44:c3:a0:
ea:1b:99:2a:59:92:35:92:83:11:ad:58:84:56:26:
f2:e2:3d:00:44:5a:73:d3:52:0f:92:69:da:30:76:
fa:c3:5c:ff:0f:61:f2:c9:29:2b:1e:b3:99:46:4f:
2b:d8:d4:3b:59:1b:49:30:d3:d8:90:bd:61:b9:82:
c8:4e:f2:5c:7f:d7:5c:dd:17:77:48:54:08:69:01:
08:55:f9:b4:64:a2:79:29:83:b9:be:7e:6a:8b:49:
2d:e6:3e:c9:db:3c:a8:9f:fd:56:49:07:65:22:57:
49:62:2f:44:d1:1d:d9:13:14:db:cf:60:0e:82:09:
17:e0:0e:02:da:ee:b1:34:7d:8f:21:1e:41:4b:a4:
ef:d6:aa:a3:45:7c:0c:3c:7c:6c:9a:fb:0a:88:93:
77:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:10:11:7C:7A:BB:29:DA:9E:85:DA:EB:E8:54:52:B6:11:62:E9:E6
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS401362.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.188.0/24
51.241.99.0/24
78.105.220.0/24
188.220.3.0/24
188.221.34.0/24
Signature Algorithm: sha256WithRSAEncryption
29:2e:ae:8f:95:65:2d:a8:69:fb:d3:fa:19:f6:11:d3:3d:51:
02:84:b9:19:e8:b2:04:ac:df:ed:aa:30:66:33:40:89:17:d4:
7b:ab:49:5d:6f:ab:64:f6:15:c7:f7:ef:0c:db:cd:10:9b:a2:
3b:7a:5b:5d:24:dc:96:14:01:25:92:95:7e:a9:4c:0f:cf:5d:
36:ca:f1:4e:2c:fd:df:e6:09:02:da:7d:22:76:93:06:e5:08:
f1:dc:f2:2d:ff:f8:38:8d:2b:55:89:a4:40:f5:6f:5a:cc:35:
e7:12:45:d1:64:c9:e1:d3:ad:42:c7:46:11:fa:14:a5:28:38:
ff:d5:b8:57:b2:88:ca:2c:e0:b0:90:2e:e5:6f:d9:22:66:53:
1e:a9:35:f7:ad:83:22:7d:81:9a:d5:82:a6:42:32:64:b7:96:
99:93:82:69:3f:3e:ca:c2:46:7d:06:8b:00:9f:b5:c6:62:60:
42:86:c2:62:14:38:ee:66:af:33:f1:e1:09:50:55:de:a5:74:
c6:36:2a:a8:f8:45:f4:45:f4:b6:dd:63:24:86:50:e9:be:4b:
16:db:e9:98:e4:45:26:82:f0:07:d2:1e:f7:ce:a1:0b:23:00:
22:87:ad:3e:e7:c0:87:55:3d:3e:e2:f9:f6:38:1e:42:09:3e:
5b:f3:33:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:13:41 2026 by rpki-client