Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402252.roa
File: AS402252.roa (raw, json)
Hash identifier: Vl7YBDpTc4wxyQ7wr/JlGXt9BkrgF/xLXHT/3sPFjno=
Subject key identifier: 82:7A:78:6E:EA:FD:AF:3B:B7:B1:4A:EB:A4:D8:66:16:E0:6D:B7:82
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 510231FC146FB5E3CFCF5022302C14428549B5AA
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402252.roa
Signing time: Sat 06 Jun 2026 07:46:17 +0000
ROA not before: Sat 06 Jun 2026 07:41:17 +0000
ROA not after: Sat 05 Jun 2027 07:46:17 +0000
asID: 402252
IP address blocks: 51.146.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:02:31:fc:14:6f:b5:e3:cf:cf:50:22:30:2c:14:42:85:49:b5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 6 07:41:17 2026 GMT
Not After : Jun 5 07:46:17 2027 GMT
Subject: CN=827A786EEAFDAF3BB7B14AEBA4D86616E06DB782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ad:05:d4:70:36:99:99:b6:27:73:7e:13:e1:
92:eb:17:c7:92:3c:9c:05:18:09:18:e8:ac:65:40:
ec:ec:56:c2:72:e3:81:40:33:58:2e:f7:fc:e1:23:
50:ee:eb:fc:bf:78:ef:3c:07:98:b7:84:63:33:b3:
26:76:07:b2:1e:c8:58:a9:6f:54:7f:86:37:86:0c:
87:f2:3b:11:b6:3b:6d:1c:52:b3:16:37:da:4e:03:
94:29:c3:bd:0f:55:fa:51:36:f3:c9:c4:29:33:b0:
a7:cc:02:27:a3:43:38:db:e2:bb:9a:78:0c:cc:55:
c1:b7:86:fe:18:a9:18:5d:29:e4:8f:e2:c9:bc:70:
ac:2c:fd:2e:11:dc:83:d1:fc:75:81:7f:94:30:d4:
15:b2:74:3f:ca:1c:bd:17:c0:4e:ca:d5:9c:60:e1:
24:4b:ef:48:7d:88:1f:1f:3f:67:c4:06:75:bf:f4:
5c:60:b6:6e:25:63:ef:7b:79:79:7f:48:fc:17:08:
bf:51:ab:52:ee:ae:f4:61:01:11:b0:66:b0:10:59:
62:fa:c9:6c:18:f7:fc:b8:ac:55:2d:df:f6:d1:0b:
52:b0:8e:1d:a6:93:a1:76:ca:5c:8e:19:24:07:96:
f4:5c:b6:cb:99:8c:13:bc:6d:25:20:74:6e:b5:11:
09:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7A:78:6E:EA:FD:AF:3B:B7:B1:4A:EB:A4:D8:66:16:E0:6D:B7:82
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.23.0/24
Signature Algorithm: sha256WithRSAEncryption
95:b0:a0:dd:03:61:65:4a:4a:82:bd:f9:bf:23:fb:5d:27:99:
29:c4:f7:ac:64:d7:96:b2:8d:c6:4b:3b:cf:22:ae:ad:33:2b:
b4:ad:b4:c1:6d:1f:ea:80:ff:fe:d7:5f:0b:f5:96:8b:bb:80:
31:4d:fc:6c:6c:bf:8e:e4:95:de:ee:b5:22:b3:c7:a4:59:46:
36:d7:4f:30:0f:4d:e6:77:fa:df:33:dc:a9:3f:05:3b:22:f8:
7b:ac:84:ff:f8:db:10:87:d9:a5:0f:4b:ad:b7:76:d0:11:97:
c6:ab:09:a5:a9:c3:81:ac:23:72:45:4c:30:d4:84:ef:fd:a3:
70:bd:32:92:59:3b:5f:20:ee:e4:0f:da:76:50:66:13:e3:fb:
95:18:6b:f7:c1:e5:c1:bc:e1:e8:48:78:d8:1b:60:f6:3f:d0:
7b:0b:fd:12:e4:c7:b0:bb:c3:6b:79:bc:9d:76:21:8a:46:d7:
08:30:5b:9f:4e:e4:3f:56:23:f8:6b:f1:1c:0d:3f:e6:c4:62:
12:58:85:aa:a8:26:a8:95:eb:5f:a3:e2:36:18:82:19:61:f4:
8a:1b:6a:ec:4f:bd:2e:30:40:31:c1:f1:31:e0:ef:60:b9:6f:
62:ee:82:72:5c:ca:4e:e1:5a:5f:08:09:01:7b:cf:5f:3c:ec:
c3:39:31:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:52:49 2026 by rpki-client