Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402604.roa
File: AS402604.roa (raw, json)
Hash identifier: pY0FIlAoDpW+tLafjiKJ3yn9QWS/Iiq/OACzT1jnCzQ=
Subject key identifier: A7:6B:E2:18:C6:4C:8A:74:34:91:78:8C:5F:5C:B2:1B:08:E5:7A:F3
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 18DFD4B4122DA95F06C2D04839EBED757994ADC6
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402604.roa
Signing time: Thu 17 Sep 2026 04:34:49 +0000
ROA not before: Thu 17 Sep 2026 04:29:49 +0000
ROA not after: Thu 16 Sep 2027 04:34:49 +0000
asID: 402604
IP address blocks: 51.146.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:df:d4:b4:12:2d:a9:5f:06:c2:d0:48:39:eb:ed:75:79:94:ad:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 17 04:29:49 2026 GMT
Not After : Sep 16 04:34:49 2027 GMT
Subject: CN=A76BE218C64C8A743491788C5F5CB21B08E57AF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d8:af:55:92:15:9c:1d:b1:0f:5a:b9:3f:d7:
5d:e0:8e:e7:54:b8:fd:a3:f6:cd:ca:67:4e:6f:e0:
23:17:bb:b0:f5:a3:02:f9:da:4b:b0:77:33:89:39:
62:8d:c3:91:5d:3a:e7:ac:e0:5a:b2:d4:d8:55:fc:
ae:13:a1:4c:b7:fe:57:51:0d:da:3d:e1:f0:98:ed:
fc:06:25:87:5c:b0:35:a0:c8:8b:28:b5:e0:4e:c3:
57:d0:8c:9e:42:a0:8f:7b:da:3a:7c:46:bf:8e:d6:
82:85:c0:64:a9:4d:1c:d3:5a:85:9f:97:ba:2a:d6:
ea:a5:3e:04:9f:15:e2:fb:91:3e:4e:25:00:87:57:
1e:06:b9:3e:4d:93:e8:27:2d:1a:33:40:6e:7e:a3:
f1:33:b6:4c:69:f1:3d:29:8a:ec:f4:d8:0d:7f:58:
59:6d:f1:84:0b:b8:2e:fb:0f:ee:50:e5:9a:56:fd:
8e:0d:09:46:ff:42:aa:13:91:12:0f:05:c0:25:cf:
a7:c6:6a:84:c1:1d:6c:cf:7b:b4:c6:f0:e3:41:80:
30:d7:08:12:c5:13:cf:f9:a5:7c:ba:f3:1f:51:53:
e5:d1:b2:c5:8c:29:75:bc:11:05:ef:9e:de:08:62:
7b:5f:fb:da:34:1b:4d:28:39:36:e4:3a:5c:17:fb:
1d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6B:E2:18:C6:4C:8A:74:34:91:78:8C:5F:5C:B2:1B:08:E5:7A:F3
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402604.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.104.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:89:d8:a1:49:f0:04:6e:7a:68:06:af:d3:b0:f6:85:48:0d:
b5:32:3d:ab:a3:95:cb:f6:56:29:03:36:91:1f:dd:4e:b8:d6:
04:99:67:48:e7:7e:15:78:26:bb:49:53:5f:c6:0c:8b:5b:42:
70:a6:a2:f7:33:44:3c:d7:f3:b5:36:53:8e:4d:23:d3:08:ed:
86:90:ab:78:a2:33:d8:c9:18:53:f2:88:50:f8:37:3f:48:02:
6a:28:b0:b7:96:a4:46:2b:68:c5:3a:7a:65:98:56:1a:d6:2b:
1c:1b:6c:15:f3:40:2b:7f:a2:59:bd:40:03:ca:8b:55:6a:f2:
d7:93:d2:e3:98:52:71:02:ce:73:82:60:a2:aa:84:8d:3e:4e:
b1:ca:eb:1d:a9:a3:c7:4a:f8:2d:e1:2f:21:b5:91:79:1d:76:
8d:41:8c:91:03:9c:ba:ae:85:69:ed:10:a6:4a:56:b2:84:78:
fa:95:a9:c2:d5:99:d6:be:c4:54:dd:74:97:ab:b3:db:c8:7f:
2a:dc:7d:0c:71:56:06:4e:15:9c:4f:48:10:be:81:47:39:10:
2f:f5:70:f9:2c:fe:6d:da:40:dc:01:00:1e:4d:dd:7e:8f:84:
0d:d3:da:e9:8c:12:c3:c3:f2:5a:c9:d0:7c:ab:0e:40:f2:e7:
40:e4:eb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:09:17 2026 by rpki-client