Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402507.roa
File: AS402507.roa (raw, json)
Hash identifier: goVODgyJsZ6AceO8TGKbI3Tnf9C8fi2HUcR2HBF6NFg=
Subject key identifier: C5:6C:20:5D:81:17:A8:24:E0:4E:AF:E1:59:21:40:EA:06:6F:E2:D5
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7A1314475EF74D5A3615792052A9E100B065BA95
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402507.roa
Signing time: Fri 05 Jun 2026 13:10:31 +0000
ROA not before: Fri 05 Jun 2026 13:05:31 +0000
ROA not after: Fri 04 Jun 2027 13:10:31 +0000
asID: 402507
IP address blocks: 51.194.64.0/24 maxlen: 24
78.105.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:13:14:47:5e:f7:4d:5a:36:15:79:20:52:a9:e1:00:b0:65:ba:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 5 13:05:31 2026 GMT
Not After : Jun 4 13:10:31 2027 GMT
Subject: CN=C56C205D8117A824E04EAFE1592140EA066FE2D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e8:2e:78:4a:7c:57:af:57:98:9b:b7:d7:73:
14:10:51:26:84:42:ee:12:cb:8c:0e:56:20:ee:c9:
67:fd:11:86:94:a0:15:d2:49:ba:96:3e:b9:0d:2c:
67:17:13:64:69:17:fd:5b:bf:9d:2b:69:a2:7d:f2:
43:ae:c0:28:3e:6d:1b:45:17:99:d7:0c:93:b9:2c:
3d:d9:5a:39:d4:c6:45:d8:61:8d:af:36:c2:4c:48:
b0:f4:5b:c4:0c:e3:c5:92:8f:a4:48:04:29:2f:d1:
92:a2:37:4c:20:ea:d6:40:63:6b:f8:07:aa:a3:37:
85:60:ce:f3:11:cd:90:05:26:23:29:23:39:d1:59:
ce:f0:b3:09:75:e1:2c:0e:6b:5b:44:66:09:69:5a:
99:c8:12:eb:e0:0b:fa:57:87:34:e8:86:85:9d:f0:
3a:2d:a6:cd:bd:e7:df:8f:80:23:9f:c0:5b:56:97:
bb:14:89:b7:a7:8a:73:bc:10:11:a5:db:74:66:31:
c4:66:e2:48:1a:75:46:2e:27:ac:be:d9:5c:62:d3:
32:70:d2:9b:e7:67:cd:7e:cc:9b:8e:00:97:78:5d:
e9:70:4d:ee:ac:80:fe:58:de:55:eb:2d:0f:45:1c:
83:48:55:2c:26:54:ba:d9:46:44:b4:c3:2c:74:b4:
cd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6C:20:5D:81:17:A8:24:E0:4E:AF:E1:59:21:40:EA:06:6F:E2:D5
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402507.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.64.0/24
78.105.114.0/24
Signature Algorithm: sha256WithRSAEncryption
12:72:7c:53:17:19:d9:ca:62:99:56:9f:70:89:5c:2a:19:31:
d6:0e:f2:e2:32:70:d6:0e:66:60:ea:31:ac:68:ca:6d:91:78:
65:d3:e7:7a:05:86:30:b9:39:21:02:af:38:ce:05:ad:1a:62:
90:f8:d7:1f:9d:f3:3e:60:e7:b1:91:68:5d:90:76:07:ae:74:
d5:65:e4:11:b9:66:fb:dd:a6:b4:57:03:de:5b:0b:78:1c:c1:
24:73:a7:2f:31:45:35:0c:b2:40:fd:df:d9:b1:69:c0:49:6b:
af:ea:67:d2:2c:26:6d:0c:37:c1:7c:b4:6f:de:21:e2:45:66:
ac:6e:52:0b:34:0f:59:9c:e2:de:c0:7b:96:9d:00:e0:37:0e:
7e:33:a8:48:21:cb:cd:2b:65:70:0f:67:36:29:9e:1d:4a:c7:
34:62:c2:42:77:03:82:66:c7:97:1a:f5:37:e3:e6:52:a4:f2:
3a:c0:c2:a2:1c:9a:f6:25:35:6d:b2:fa:8a:d8:73:4e:af:ea:
22:1f:30:f2:6f:b5:20:5e:48:de:d6:60:ff:f0:de:e7:a9:cf:
48:b8:1b:4d:03:ce:42:01:db:5d:aa:d4:8a:01:a8:8b:d4:01:
55:6b:0e:52:6f:a7:f7:2f:2e:34:55:a2:35:66:b7:b9:72:24:
ba:4b:0d:e0
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUehMUR173TVo2FXkgUqnhALBlupUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA2MDUxMzA1MzFaFw0yNzA2MDQxMzEwMzFaMDMxMTAvBgNV
BAMTKEM1NkMyMDVEODExN0E4MjRFMDRFQUZFMTU5MjE0MEVBMDY2RkUyRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6C54SnxXr1eYm7fXcxQQUSaE
Qu4Sy4wOViDuyWf9EYaUoBXSSbqWPrkNLGcXE2RpF/1bv50raaJ98kOuwCg+bRtF
F5nXDJO5LD3ZWjnUxkXYYY2vNsJMSLD0W8QM48WSj6RIBCkv0ZKiN0wg6tZAY2v4
B6qjN4VgzvMRzZAFJiMpIznRWc7wswl14SwOa1tEZglpWpnIEuvgC/pXhzTohoWd
8Dotps2959+PgCOfwFtWl7sUibeninO8EBGl23RmMcRm4kgadUYuJ6y+2Vxi0zJw
0pvnZ81+zJuOAJd4XelwTe6sgP5Y3lXrLQ9FHINIVSwmVLrZRkS0wyx0tM21AgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUxWwgXYEXqCTgTq/hWSFA6gZv4tUwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTNDAyNTA3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAM8JA
AwQATmlyMA0GCSqGSIb3DQEBCwUAA4IBAQAScnxTFxnZymKZVp9wiVwqGTHWDvLi
MnDWDmZg6jGsaMptkXhl0+d6BYYwuTkhAq84zgWtGmKQ+NcfnfM+YOexkWhdkHYH
rnTVZeQRuWb73aa0VwPeWwt4HMEkc6cvMUU1DLJA/d/ZsWnASWuv6mfSLCZtDDfB
fLRv3iHiRWasblILNA9ZnOLewHuWnQDgNw5+M6hIIcvNK2VwD2c2KZ4dSsc0YsJC
dwOCZseXGvU34+ZSpPI6wMKiHJr2JTVtsvqK2HNOr+oiHzDyb7UgXkje1mD/8N7n
qc9IuBtNA85CAdtdqtSKAaiL1AFVaw5Sb6f3Ly40VaI1Zre5ciS6Sw3g
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:53:56 2026 by rpki-client