Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402866.roa
File: AS402866.roa (raw, json)
Hash identifier: 7fZTKd/1OZIq/5B6H3vNVg5cAnuD4qRshlYiFh5osec=
Subject key identifier: 8C:5B:31:FA:50:BB:D7:63:DC:5C:86:46:92:78:A0:97:9F:CE:CA:8D
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3D07088AA66D67CA6A12ACAA785810282F952666
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402866.roa
Signing time: Fri 18 Sep 2026 13:10:55 +0000
ROA not before: Fri 18 Sep 2026 13:05:55 +0000
ROA not after: Fri 17 Sep 2027 13:10:55 +0000
asID: 402866
IP address blocks: 51.194.159.0/24 maxlen: 24
94.118.3.0/24 maxlen: 24
94.118.6.0/24 maxlen: 24
94.118.8.0/24 maxlen: 24
94.118.11.0/24 maxlen: 24
94.118.13.0/24 maxlen: 24
94.118.15.0/24 maxlen: 24
94.118.17.0/24 maxlen: 24
94.118.29.0/24 maxlen: 24
94.118.66.0/24 maxlen: 24
94.118.106.0/24 maxlen: 24
94.118.178.0/24 maxlen: 24
94.118.226.0/24 maxlen: 24
94.118.238.0/24 maxlen: 24
94.118.240.0/24 maxlen: 24
94.118.252.0/24 maxlen: 24
94.118.254.0/24 maxlen: 24
188.220.21.0/24 maxlen: 24
188.220.216.0/24 maxlen: 24
188.220.225.0/24 maxlen: 24
188.220.231.0/24 maxlen: 24
188.220.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:07:08:8a:a6:6d:67:ca:6a:12:ac:aa:78:58:10:28:2f:95:26:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 18 13:05:55 2026 GMT
Not After : Sep 17 13:10:55 2027 GMT
Subject: CN=8C5B31FA50BBD763DC5C86469278A0979FCECA8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b9:6f:1b:cb:d1:c2:af:a4:8e:11:10:e2:19:
1f:23:91:77:1d:64:da:de:0f:d5:f5:c2:52:c9:dd:
3c:b1:6e:cb:aa:4f:2e:30:8d:0b:b1:b3:e0:e7:7d:
e6:3c:47:c3:2c:84:a4:4a:2a:e0:d2:b2:ef:6e:1c:
ec:85:36:f9:40:a8:65:1c:db:a1:a2:3d:f0:ed:16:
40:39:17:b0:04:e6:29:c9:2d:11:cd:10:54:5c:55:
6e:ea:18:e1:11:65:db:5c:4d:b3:55:15:0b:4a:a3:
43:2d:59:99:93:1f:65:67:d6:68:67:e1:48:cf:8a:
97:fc:0d:90:a3:8f:fb:f6:55:83:41:31:bf:1b:95:
8a:03:04:98:c0:45:4b:d6:2c:8d:a7:a6:b5:23:ff:
cf:a5:63:8b:2b:9d:17:34:cb:e9:b3:44:9f:42:13:
09:d8:db:a5:dd:7e:39:b4:bd:5f:72:52:6f:59:2f:
d6:7e:91:fd:5f:5d:f1:6a:c1:68:6c:a4:d4:3f:f8:
05:69:c9:8f:8d:4a:9f:bb:d4:df:0b:c7:a2:ae:b1:
0b:35:08:d6:81:c4:6e:18:2d:b4:48:61:77:1d:fa:
23:17:aa:09:50:b0:df:b0:c0:04:86:43:27:fb:53:
15:ca:50:ae:47:f9:7f:7f:75:fd:40:89:c2:ae:07:
5a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5B:31:FA:50:BB:D7:63:DC:5C:86:46:92:78:A0:97:9F:CE:CA:8D
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402866.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.159.0/24
94.118.3.0/24
94.118.6.0/24
94.118.8.0/24
94.118.11.0/24
94.118.13.0/24
94.118.15.0/24
94.118.17.0/24
94.118.29.0/24
94.118.66.0/24
94.118.106.0/24
94.118.178.0/24
94.118.226.0/24
94.118.238.0/24
94.118.240.0/24
94.118.252.0/24
94.118.254.0/24
188.220.21.0/24
188.220.216.0/24
188.220.225.0/24
188.220.231.0/24
188.220.248.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:69:dd:ef:83:38:dc:f1:07:9e:7b:91:c2:43:45:52:52:db:
95:c2:ef:4d:27:be:73:f9:32:b4:67:82:91:21:41:69:7f:63:
ee:fd:0a:51:66:91:52:31:99:f3:24:1c:21:c1:e0:03:09:a3:
0d:f0:91:0c:23:23:84:8b:b6:21:96:9d:7c:3a:0a:5e:92:55:
36:c8:5c:c9:f4:50:99:b2:cf:bf:24:22:cc:5b:28:cb:ec:2d:
45:00:3f:8c:42:99:5c:3f:b7:27:ad:bd:21:24:95:a0:33:4e:
a3:88:f9:fe:c1:5a:dd:a5:39:f9:f4:7b:1a:c3:24:b0:29:b0:
df:47:c6:3c:4c:47:de:ff:fe:49:b8:bb:23:17:b2:e9:49:42:
bb:a2:19:d3:ab:85:75:30:ac:2e:56:b4:f3:98:15:eb:59:8c:
22:68:b1:32:f3:1d:c1:e4:2f:ed:04:19:ad:ac:a3:d2:f4:ad:
b4:9f:47:af:55:d9:e6:89:d4:d3:c0:76:2a:97:29:c6:af:38:
f2:8b:65:39:af:fa:4d:22:ba:de:75:68:b2:61:a3:fe:51:af:
99:e4:3a:b2:2e:4f:d9:ed:7e:85:f2:70:2b:29:ed:fc:2a:4b:
80:16:1b:6d:d4:f1:b5:24:42:eb:73:2e:00:ea:1d:e6:be:37:
2d:cd:d2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:08:26 2026 by rpki-client