Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402857.roa
File: AS402857.roa (raw, json)
Hash identifier: FpnwYiETLjz/6toDtxPlVKx8Wy8XGt3Hd5ynfL+izHA=
Subject key identifier: 67:64:3D:2B:F4:43:11:B4:B5:60:39:4E:26:FA:72:97:7C:74:CC:FA
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1E8BA2DE8AF5570AE914DF883274671199DC1F03
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402857.roa
Signing time: Sat 19 Sep 2026 16:14:52 +0000
ROA not before: Sat 19 Sep 2026 16:09:52 +0000
ROA not after: Sat 18 Sep 2027 16:14:52 +0000
asID: 402857
IP address blocks: 78.105.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:8b:a2:de:8a:f5:57:0a:e9:14:df:88:32:74:67:11:99:dc:1f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 19 16:09:52 2026 GMT
Not After : Sep 18 16:14:52 2027 GMT
Subject: CN=67643D2BF44311B4B560394E26FA72977C74CCFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d1:d1:57:4f:2d:93:0e:88:d9:e3:c2:2d:9a:
ee:c1:a7:75:e4:6c:38:e8:59:a2:55:94:09:e9:02:
54:3e:cf:d7:25:2d:63:99:42:01:46:87:c5:91:6a:
d3:38:1e:38:72:65:8f:93:f6:3b:24:b2:30:40:51:
b8:04:48:79:a6:73:2f:a1:1e:7e:43:b0:d4:f8:4e:
c6:82:1f:19:70:6d:75:f4:33:74:a9:d5:4d:18:f1:
0a:c5:7f:58:ce:16:ec:3b:e1:22:a4:a8:b1:fe:82:
67:91:2c:a7:92:6a:d0:5a:a5:a3:ac:cb:6d:da:7f:
17:d4:ad:37:00:5e:e5:01:f9:6e:41:22:f4:5d:64:
54:4d:c1:0f:0d:52:04:26:ff:ec:67:7a:58:c2:60:
6d:4d:6e:8b:68:51:1a:78:2a:6b:eb:56:58:af:67:
7a:35:e5:0a:b5:89:e0:ee:13:fb:f3:47:cc:bf:a1:
67:55:cf:56:53:19:c0:7b:95:13:e5:7a:53:bc:d5:
41:6c:dc:c0:3f:98:69:37:8e:f3:16:1f:c7:13:5c:
dc:d8:7b:05:96:af:90:96:47:b5:01:3b:11:17:82:
22:32:a7:a7:4a:3a:b2:91:89:14:61:ad:65:ad:1b:
fe:b0:49:e7:71:29:3b:3a:85:35:c6:cc:7d:ab:e8:
c5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:64:3D:2B:F4:43:11:B4:B5:60:39:4E:26:FA:72:97:7C:74:CC:FA
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402857.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.144.0/24
Signature Algorithm: sha256WithRSAEncryption
15:7b:33:90:1b:70:01:77:42:a2:a0:8f:37:28:37:1d:4a:66:
65:ad:30:0e:25:6a:98:85:31:7a:a0:e2:73:78:01:c6:16:20:
1d:21:82:7f:b3:d2:7a:b5:03:45:3d:d5:58:63:ee:dc:fe:7d:
8f:94:1c:73:a3:f1:26:96:4d:05:01:2b:03:10:55:fc:9a:13:
c7:cc:6d:c4:63:6c:01:74:9b:79:da:84:67:e2:ab:d5:2d:f1:
1b:8b:75:7a:13:b5:bd:80:b1:a8:16:a1:ea:b5:99:1b:a4:3b:
15:fa:58:fc:3a:f4:17:34:fb:d8:ce:fa:c1:20:6e:c4:f5:a4:
7b:73:18:61:58:dd:57:4f:85:cb:c1:98:98:01:eb:13:9a:8e:
3b:7b:3b:8e:8a:81:0a:58:4d:30:b8:7f:83:f2:e6:f7:6c:3f:
2e:fa:b1:89:86:47:5e:76:10:83:13:48:15:85:92:34:4d:df:
7a:41:4d:cc:91:3d:78:6c:d2:c5:80:77:9f:41:62:b7:d8:ea:
86:fc:bb:da:84:e0:63:e8:42:86:1e:c1:07:9c:5e:22:52:32:
96:10:81:7a:9f:cf:34:83:77:6c:0e:f6:c7:6e:2c:d2:d3:71:
79:a0:19:b1:ec:ad:12:d7:ca:fc:73:c3:33:39:28:f4:ce:9b:
66:b4:a3:2f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUHoui3or1VwrpFN+IMnRnEZncHwMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA5MTkxNjA5NTJaFw0yNzA5MTgxNjE0NTJaMDMxMTAvBgNV
BAMTKDY3NjQzRDJCRjQ0MzExQjRCNTYwMzk0RTI2RkE3Mjk3N0M3NENDRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC20dFXTy2TDojZ48Itmu7Bp3Xk
bDjoWaJVlAnpAlQ+z9clLWOZQgFGh8WRatM4HjhyZY+T9jsksjBAUbgESHmmcy+h
Hn5DsNT4TsaCHxlwbXX0M3Sp1U0Y8QrFf1jOFuw74SKkqLH+gmeRLKeSatBapaOs
y23afxfUrTcAXuUB+W5BIvRdZFRNwQ8NUgQm/+xneljCYG1NbotoURp4KmvrVliv
Z3o15Qq1ieDuE/vzR8y/oWdVz1ZTGcB7lRPlelO81UFs3MA/mGk3jvMWH8cTXNzY
ewWWr5CWR7UBOxEXgiIyp6dKOrKRiRRhrWWtG/6wSedxKTs6hTXGzH2r6MUrAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUZ2Q9K/RDEbS1YDlOJvpyl3x0zPowHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTNDAyODU3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATmmQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAVezOQG3ABd0KioI83KDcdSmZlrTAOJWqYhTF6
oOJzeAHGFiAdIYJ/s9J6tQNFPdVYY+7c/n2PlBxzo/Emlk0FASsDEFX8mhPHzG3E
Y2wBdJt52oRn4qvVLfEbi3V6E7W9gLGoFqHqtZkbpDsV+lj8OvQXNPvYzvrBIG7E
9aR7cxhhWN1XT4XLwZiYAesTmo47ezuOioEKWE0wuH+D8ub3bD8u+rGJhkdedhCD
E0gVhZI0Td96QU3MkT14bNLFgHefQWK32OqG/LvahOBj6EKGHsEHnF4iUjKWEIF6
n880g3dsDvbHbizS03F5oBmx7K0S18r8c8MzOSj0zptmtKMv
-----END CERTIFICATE-----
Generated at Mon Sep 21 05:39:22 2026 by rpki-client