Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: CjEjrTstmEAz+etoRoKPvff3NJgrGl/iB57NVj3M1vw=
Subject key identifier: 06:18:36:15:C3:91:0B:6B:0B:40:6D:EC:D9:67:84:E3:20:ED:4F:41
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 56EEB3282258B754212D2786E86C91A269AD25DC
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402265.roa
Signing time: Fri 18 Sep 2026 10:39:03 +0000
ROA not before: Fri 18 Sep 2026 10:34:03 +0000
ROA not after: Fri 17 Sep 2027 10:39:03 +0000
asID: 402265
IP address blocks: 51.194.189.0/24 maxlen: 24
51.194.238.0/24 maxlen: 24
51.194.239.0/24 maxlen: 24
51.241.105.0/24 maxlen: 24
51.241.114.0/24 maxlen: 24
51.241.166.0/24 maxlen: 24
51.241.211.0/24 maxlen: 24
51.241.244.0/24 maxlen: 24
78.105.150.0/24 maxlen: 24
78.105.160.0/24 maxlen: 24
78.105.184.0/24 maxlen: 24
78.105.185.0/24 maxlen: 24
78.105.197.0/24 maxlen: 24
78.105.206.0/24 maxlen: 24
188.220.0.0/24 maxlen: 24
188.220.1.0/24 maxlen: 24
188.220.5.0/24 maxlen: 24
188.220.104.0/24 maxlen: 24
188.220.105.0/24 maxlen: 24
188.220.107.0/24 maxlen: 24
188.220.127.0/24 maxlen: 24
188.220.140.0/24 maxlen: 24
188.220.141.0/24 maxlen: 24
188.220.143.0/24 maxlen: 24
188.221.30.0/24 maxlen: 24
188.221.54.0/24 maxlen: 24
188.221.62.0/24 maxlen: 24
188.221.63.0/24 maxlen: 24
188.221.80.0/24 maxlen: 24
188.221.85.0/24 maxlen: 24
188.221.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ee:b3:28:22:58:b7:54:21:2d:27:86:e8:6c:91:a2:69:ad:25:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 18 10:34:03 2026 GMT
Not After : Sep 17 10:39:03 2027 GMT
Subject: CN=06183615C3910B6B0B406DECD96784E320ED4F41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0c:fc:70:7a:66:a7:58:1c:66:c8:1f:9a:31:
4a:ba:03:4f:51:03:09:c4:10:c4:a0:a3:ea:05:2e:
17:e3:07:59:55:55:36:16:6b:5e:c6:f6:3a:a9:48:
47:20:0d:d0:a4:18:13:4d:8f:84:3a:d3:09:79:d2:
93:1c:f4:47:69:d2:b6:ef:7b:fa:d7:40:57:45:c7:
b4:9a:a3:40:02:c6:83:6a:52:ee:87:48:13:61:3a:
fc:f5:ac:45:8f:fb:b9:1c:a6:81:cb:be:1a:d5:65:
e4:e1:18:87:8f:f5:a3:73:e8:e3:4b:f1:84:d8:5b:
9c:0e:6a:6e:eb:f0:79:ac:88:a8:c3:2f:0b:1a:b2:
ad:32:f8:5d:a3:e3:07:d3:1f:a7:8d:71:3c:55:8b:
26:d2:f0:da:06:f9:c7:1c:b4:2b:3a:65:c7:dd:b7:
20:27:fe:d8:b9:34:9a:dc:55:59:49:67:1d:60:29:
15:54:e5:92:82:99:c1:db:31:ed:68:c9:c4:25:9b:
0c:0d:4d:5f:d3:57:95:f7:0f:6b:96:2f:6f:23:69:
b9:92:54:30:e1:28:e3:28:b1:2a:65:6b:97:c2:1f:
f9:61:4a:17:d4:5a:b4:1d:61:46:4d:20:fb:2e:95:
77:d6:38:ff:a7:f9:bf:cc:13:d3:49:59:38:ed:0e:
64:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:18:36:15:C3:91:0B:6B:0B:40:6D:EC:D9:67:84:E3:20:ED:4F:41
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.189.0/24
51.194.238.0/23
51.241.105.0/24
51.241.114.0/24
51.241.166.0/24
51.241.211.0/24
51.241.244.0/24
78.105.150.0/24
78.105.160.0/24
78.105.184.0/23
78.105.197.0/24
78.105.206.0/24
188.220.0.0/23
188.220.5.0/24
188.220.104.0/23
188.220.107.0/24
188.220.127.0/24
188.220.140.0/23
188.220.143.0/24
188.221.30.0/24
188.221.54.0/24
188.221.62.0/23
188.221.80.0/24
188.221.85.0/24
188.221.213.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ff:26:71:e9:c3:c7:c6:9e:a0:9e:ef:49:19:3d:cd:63:dc:
47:09:02:3f:20:e1:72:47:c9:ca:29:ea:e0:9f:db:40:0d:e6:
1b:3e:92:6d:1f:b7:d7:65:93:1b:56:03:f7:24:1d:a6:6c:fb:
31:d2:8f:6f:76:57:27:f1:63:23:d5:da:ee:41:3c:70:61:06:
69:29:24:d5:08:7a:bd:62:ae:c9:f6:9b:45:70:03:44:c3:d5:
bd:61:fd:a1:0f:1b:e5:54:35:93:39:f2:a0:e1:bc:04:14:51:
d9:b7:2e:f1:e2:2a:07:a9:0c:0a:e1:5a:08:d6:99:df:41:cd:
15:f8:32:12:13:0e:95:bd:d4:31:f6:98:48:01:40:5c:61:db:
1c:98:c7:b1:79:e5:07:90:1e:d6:51:e5:04:d8:f6:d1:29:7e:
4e:27:54:45:01:33:b1:76:cb:c0:1c:f6:2f:30:dd:39:10:cc:
f1:74:d3:b2:3b:65:22:1c:07:03:52:26:68:11:7c:ae:cc:f1:
ec:ce:85:4b:f3:05:b5:ed:d2:e3:d1:cb:ab:e5:26:ba:cf:21:
62:90:6a:ee:71:17:45:24:d8:8c:43:86:a9:95:67:bd:3b:b2:
fc:73:15:8c:1c:00:53:d5:dc:12:df:da:81:0a:95:08:a1:8f:
7f:d7:e1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:59:33 2026 by rpki-client