Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402671.roa
File: AS402671.roa (raw, json)
Hash identifier: nKvR4m5gGFwQaB9zKbJhxWdrddBgKCpE2oOBsawY6ac=
Subject key identifier: 12:08:8F:0E:48:56:C6:C9:A8:A2:C7:DD:3F:4D:DF:46:44:35:84:87
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 07CCAC9A633E873E7A084493E669856155254C7C
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402671.roa
Signing time: Fri 30 Oct 2026 09:27:05 +0000
ROA not before: Fri 30 Oct 2026 09:22:05 +0000
ROA not after: Fri 29 Oct 2027 09:27:05 +0000
asID: 402671
IP address blocks: 94.118.137.0/24 maxlen: 24
94.118.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:cc:ac:9a:63:3e:87:3e:7a:08:44:93:e6:69:85:61:55:25:4c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 30 09:22:05 2026 GMT
Not After : Oct 29 09:27:05 2027 GMT
Subject: CN=12088F0E4856C6C9A8A2C7DD3F4DDF4644358487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:a1:e6:7c:b1:3f:db:0e:a0:bb:5a:21:61:
22:14:c6:0f:50:84:a4:20:f7:07:cb:8d:49:bf:51:
29:5f:96:93:6b:51:dc:c8:6b:a2:42:2f:8e:ef:08:
b8:e7:26:8f:96:70:8d:93:0f:83:1f:5e:68:fc:10:
05:df:91:30:43:ed:28:8f:30:78:e2:ed:b8:54:39:
cd:7a:0b:68:79:98:d3:53:ee:95:fc:1c:ba:24:7a:
b0:97:04:a9:3d:1f:ac:ab:9a:60:46:10:3f:96:01:
87:e7:9f:dc:9b:c6:b7:b3:5d:f8:55:b8:72:a2:2d:
b6:20:51:d9:a4:4a:32:23:f8:10:20:4e:57:0a:45:
12:31:53:a7:ab:36:0b:3c:42:ff:af:56:68:db:d6:
48:25:09:d3:44:f4:b7:eb:70:68:b2:d4:cf:d4:ca:
6b:9a:74:bf:d7:26:c2:13:26:3c:29:fd:ce:ef:f9:
0c:8b:1d:3a:0c:80:38:67:0e:41:ef:84:3e:d4:f2:
24:10:ee:28:96:41:a1:1a:a4:2e:69:15:99:80:41:
e9:cd:56:53:e5:c2:2b:8a:a0:db:a8:42:cd:0e:c3:
c2:45:c1:6d:11:e9:c2:6b:24:a5:9a:79:eb:4e:3b:
4e:64:5d:f0:39:1d:59:90:b7:bf:8a:23:a5:31:1c:
b1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:08:8F:0E:48:56:C6:C9:A8:A2:C7:DD:3F:4D:DF:46:44:35:84:87
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402671.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.137.0/24
94.118.204.0/24
Signature Algorithm: sha256WithRSAEncryption
50:91:80:4a:b3:44:3b:4a:f8:12:8c:e0:df:32:ba:15:47:65:
64:4a:cf:d3:08:36:ea:7f:f3:31:de:0e:26:07:db:ad:2a:05:
ab:dd:b2:74:77:62:36:fa:67:d2:61:4d:3c:66:e3:97:1a:9c:
bc:a5:5a:cf:7e:a7:a3:d5:5c:3b:8b:11:19:b4:2e:3e:d8:fa:
0a:f3:13:22:83:47:dd:d1:29:1b:e9:06:20:06:ef:50:de:26:
86:11:41:50:bf:ab:68:3e:81:a2:78:d7:c9:d7:a5:5a:71:17:
a9:cc:e4:fe:04:2b:db:ef:93:82:71:b8:2f:34:ea:c1:30:7b:
52:8a:c2:b3:ac:25:d4:a0:60:2b:66:e3:e8:f7:2f:1a:cc:f2:
2d:a1:5f:27:bc:22:09:d5:8e:07:a4:c3:94:da:03:fe:d5:8b:
f3:71:42:ea:fe:aa:d7:d0:5e:6d:93:f8:ce:e6:5e:a7:04:78:
31:49:f3:e1:de:ac:72:6c:f4:28:3b:98:ef:4e:e1:34:85:cb:
6c:90:3e:b2:a5:62:fa:ce:42:c5:b2:ae:42:bd:fa:11:bb:a0:
1b:f0:64:20:14:62:d1:bb:a7:a0:35:da:fc:72:86:ce:91:5c:
7d:51:15:95:09:d3:23:1b:d0:19:56:ae:f0:95:a3:f8:51:a7:
90:2c:1a:c9
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUB8ysmmM+hz56CEST5mmFYVUlTHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjEwMzAwOTIyMDVaFw0yNzEwMjkwOTI3MDVaMDMxMTAvBgNV
BAMTKDEyMDg4RjBFNDg1NkM2QzlBOEEyQzdERDNGNERERjQ2NDQzNTg0ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0QKHmfLE/2w6gu1ohYSIUxg9Q
hKQg9wfLjUm/USlflpNrUdzIa6JCL47vCLjnJo+WcI2TD4MfXmj8EAXfkTBD7SiP
MHji7bhUOc16C2h5mNNT7pX8HLokerCXBKk9H6yrmmBGED+WAYfnn9ybxrezXfhV
uHKiLbYgUdmkSjIj+BAgTlcKRRIxU6erNgs8Qv+vVmjb1kglCdNE9LfrcGiy1M/U
ymuadL/XJsITJjwp/c7v+QyLHToMgDhnDkHvhD7U8iQQ7iiWQaEapC5pFZmAQenN
VlPlwiuKoNuoQs0Ow8JFwW0R6cJrJKWaeetOO05kXfA5HVmQt7+KI6UxHLEjAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUEgiPDkhWxsmoosfdP03fRkQ1hIcwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTNDAyNjcxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXnaJ
AwQAXnbMMA0GCSqGSIb3DQEBCwUAA4IBAQBQkYBKs0Q7SvgSjODfMroVR2VkSs/T
CDbqf/Mx3g4mB9utKgWr3bJ0d2I2+mfSYU08ZuOXGpy8pVrPfqej1Vw7ixEZtC4+
2PoK8xMig0fd0Skb6QYgBu9Q3iaGEUFQv6toPoGieNfJ16VacRepzOT+BCvb75OC
cbgvNOrBMHtSisKzrCXUoGArZuPo9y8azPItoV8nvCIJ1Y4HpMOU2gP+1YvzcULq
/qrX0F5tk/jO5l6nBHgxSfPh3qxybPQoO5jvTuE0hctskD6ypWL6zkLFsq5CvfoR
u6Ab8GQgFGLRu6egNdr8cobOkVx9URWVCdMjG9AZVq7wlaP4UaeQLBrJ
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:55:02 2026 by rpki-client