Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402604.roa
File: AS402604.roa (raw, json)
Hash identifier: CS6qZU2JrUelJDWaqkWhsT6G6hcEwGR/cNbrJ0UsNKY=
Subject key identifier: 6A:48:88:E1:32:D1:F1:59:FA:A2:AC:DE:AC:8F:98:C2:45:42:A8:0B
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0D42188DB0C4B54B884BBEA1A9337123717CFDAE
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402604.roa
Signing time: Mon 26 Oct 2026 11:04:35 +0000
ROA not before: Mon 26 Oct 2026 10:59:35 +0000
ROA not after: Mon 25 Oct 2027 11:04:35 +0000
asID: 402604
IP address blocks: 51.146.104.0/24 maxlen: 24
94.118.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:42:18:8d:b0:c4:b5:4b:88:4b:be:a1:a9:33:71:23:71:7c:fd:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 26 10:59:35 2026 GMT
Not After : Oct 25 11:04:35 2027 GMT
Subject: CN=6A4888E132D1F159FAA2ACDEAC8F98C24542A80B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:74:82:2e:b1:18:f8:56:0d:9b:3b:10:19:83:
51:33:59:f7:68:9b:78:78:a3:d2:56:74:55:41:b6:
cc:b2:c8:90:16:4a:1f:fc:f5:b4:5c:e5:b6:b2:82:
cd:8a:6e:30:fe:1a:06:5b:49:87:4e:e4:8f:e0:a9:
d5:e7:75:80:00:7c:5d:72:39:31:1d:e9:85:6f:a7:
0f:0a:42:54:38:0a:72:da:0d:d8:99:af:98:09:a4:
fc:24:04:f9:1f:d1:fe:24:c8:f7:1b:2c:4e:e8:9e:
c8:bc:35:73:9f:82:5e:ab:6c:64:77:4b:c1:a7:16:
b3:0e:c0:ad:da:7a:29:30:6b:cf:eb:18:9a:fb:f8:
4a:af:67:e2:cf:cd:52:4f:71:7f:be:b2:87:9a:67:
01:76:ef:e1:82:d2:71:14:9a:29:10:73:ca:b0:9e:
fc:12:df:db:b5:01:7d:50:46:7f:00:25:db:95:d4:
68:d2:35:95:44:a3:ec:a2:74:ce:8a:83:2e:11:f8:
dd:eb:1b:87:0c:f3:1c:8a:23:6f:a8:35:b9:fc:ce:
ed:14:24:f8:d6:51:7d:0f:c3:b1:e7:4d:57:6a:6c:
5b:3a:0b:85:33:71:d9:2d:2f:c5:2d:58:ac:bb:f9:
17:22:35:5e:b6:1c:ca:ba:75:39:81:9e:c0:f9:fc:
5c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:48:88:E1:32:D1:F1:59:FA:A2:AC:DE:AC:8F:98:C2:45:42:A8:0B
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402604.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.104.0/24
94.118.38.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:2f:10:1d:70:7b:f2:78:04:ee:73:49:88:fe:12:43:43:82:
a2:62:dd:3a:04:f5:06:67:da:74:a6:be:c0:ad:6d:82:7a:bd:
03:48:9f:d7:67:ed:21:74:0e:cd:81:78:d3:6a:6d:b1:65:72:
c9:de:20:f0:b6:fd:de:37:42:57:dc:58:62:26:dc:f2:79:39:
93:d8:5a:16:37:f2:6e:fa:6e:76:28:a4:7c:52:e3:8e:bc:02:
c8:0d:16:b1:fe:73:e5:a9:9e:7e:e9:d2:15:ce:24:ad:7d:9c:
a3:e1:5a:a6:44:8b:48:4c:49:81:28:e5:bd:bd:23:ab:ba:d3:
51:5a:54:62:6c:16:83:17:34:72:64:d7:6e:3d:0c:f0:3a:c6:
0b:1a:c5:10:9c:4e:3d:bd:9b:43:82:4a:44:45:21:1e:d7:4d:
4d:85:7e:c2:b0:35:9e:11:3d:5f:af:fb:cc:e9:64:d5:b4:2e:
8a:4b:bf:da:21:4a:18:0f:3c:67:fd:80:69:51:a9:41:09:73:
ea:97:af:b2:ce:13:3e:f3:33:f0:dc:bb:5e:b2:3b:6d:29:07:
2a:d3:77:5e:6d:d6:f8:c3:8d:c2:21:00:b3:d8:08:88:ad:f2:
6d:50:0d:99:ea:2c:a3:bf:9d:49:b4:5e:7d:dd:d9:27:85:d8:
71:3f:6d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:51:35 2026 by rpki-client