Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS7459.roa
File: AS7459.roa (raw, json)
Hash identifier: Z95UUieoKJtf1xGo3iKuMbdOJ8jANzPjiCtMysqMre8=
Subject key identifier: 40:48:89:2A:4E:C5:AA:8B:0E:49:79:F6:FF:8D:AE:F0:AC:96:D7:93
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 7E6CAFAC4EF9501B3C6C4022DD1246524EDE2B59
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS7459.roa
Signing time: Sun 20 Sep 2026 07:14:47 +0000
ROA not before: Sun 20 Sep 2026 07:09:47 +0000
ROA not after: Sun 19 Sep 2027 07:14:47 +0000
asID: 7459
IP address blocks: 86.226.128.0/22 maxlen: 24
86.226.132.0/22 maxlen: 24
86.226.136.0/22 maxlen: 24
86.226.140.0/22 maxlen: 24
86.226.144.0/22 maxlen: 24
86.226.148.0/22 maxlen: 24
86.226.152.0/22 maxlen: 24
86.226.156.0/22 maxlen: 24
86.226.160.0/22 maxlen: 24
86.226.164.0/22 maxlen: 24
86.226.168.0/22 maxlen: 24
86.226.172.0/22 maxlen: 24
86.226.176.0/22 maxlen: 24
86.226.180.0/22 maxlen: 24
86.226.184.0/22 maxlen: 24
86.226.188.0/22 maxlen: 24
86.226.192.0/22 maxlen: 24
86.226.196.0/22 maxlen: 24
86.226.200.0/22 maxlen: 24
86.226.204.0/22 maxlen: 24
86.226.208.0/22 maxlen: 24
86.226.212.0/22 maxlen: 24
86.226.216.0/22 maxlen: 24
86.226.220.0/22 maxlen: 24
86.226.224.0/22 maxlen: 24
86.226.228.0/22 maxlen: 24
86.226.232.0/22 maxlen: 24
86.226.236.0/22 maxlen: 24
86.226.240.0/22 maxlen: 24
86.226.244.0/22 maxlen: 24
86.226.248.0/22 maxlen: 24
86.226.252.0/22 maxlen: 24
90.96.4.0/22 maxlen: 24
90.96.20.0/22 maxlen: 24
90.96.28.0/22 maxlen: 24
90.96.44.0/22 maxlen: 24
90.96.48.0/22 maxlen: 24
90.96.52.0/22 maxlen: 24
90.96.56.0/22 maxlen: 24
90.96.60.0/22 maxlen: 24
90.96.64.0/22 maxlen: 24
90.96.132.0/22 maxlen: 24
90.96.148.0/22 maxlen: 24
90.96.160.0/22 maxlen: 24
90.96.172.0/22 maxlen: 24
90.96.236.0/22 maxlen: 24
90.96.240.0/22 maxlen: 24
90.96.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 19:08:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:6c:af:ac:4e:f9:50:1b:3c:6c:40:22:dd:12:46:52:4e:de:2b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 20 07:09:47 2026 GMT
Not After : Sep 19 07:14:47 2027 GMT
Subject: CN=4048892A4EC5AA8B0E4979F6FF8DAEF0AC96D793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:6b:2a:9f:75:39:21:d4:aa:e6:6b:c3:b1:
b7:17:96:57:d9:e9:6f:52:35:c9:7b:21:dc:4e:e8:
e9:d4:90:65:1a:7d:92:fc:c6:39:f2:11:c0:49:2e:
96:37:97:73:4c:cf:fc:6c:e0:14:cd:fb:89:8b:52:
1f:b9:9a:8a:b0:f3:33:9c:7f:6f:14:b2:47:1c:ea:
d7:fa:68:c7:66:2e:ff:88:25:f2:a3:f5:95:d8:8c:
eb:a3:26:71:49:39:21:2e:7c:3a:c3:f1:15:03:58:
09:be:a4:53:d6:f5:a8:cd:4a:27:bd:fa:8f:ab:ee:
1c:1e:9f:9d:51:b3:9d:90:9f:69:40:b0:89:d3:1b:
8b:1f:e5:fd:5c:d8:9c:56:e4:17:92:47:29:54:36:
4c:8a:f3:4a:e1:7a:8b:14:23:25:46:46:0f:44:80:
d6:68:5d:cb:a5:a4:47:d2:1e:72:66:8d:8e:0c:53:
6d:cd:0d:2a:9b:d3:95:5f:32:43:e3:fb:2f:60:99:
78:92:0f:b2:25:81:b7:78:4d:8b:b0:1e:bd:61:4a:
93:38:f4:14:df:0c:9e:48:ce:ba:f8:7a:8d:00:0f:
ba:dd:2a:00:7e:a9:44:56:43:72:7f:72:d1:4d:fc:
e7:cf:64:2e:f7:ef:37:41:a4:b3:d6:8f:d0:29:9d:
c5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:48:89:2A:4E:C5:AA:8B:0E:49:79:F6:FF:8D:AE:F0:AC:96:D7:93
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS7459.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.226.128.0/17
90.96.4.0/22
90.96.20.0/22
90.96.28.0/22
90.96.44.0-90.96.67.255
90.96.132.0/22
90.96.148.0/22
90.96.160.0/22
90.96.172.0/22
90.96.236.0-90.96.247.255
Signature Algorithm: sha256WithRSAEncryption
65:84:e6:45:79:a7:d4:a8:6b:f3:8b:bc:88:80:af:0f:c0:04:
d0:54:fc:7e:22:4d:18:88:86:28:c4:12:d3:3f:74:69:e2:65:
dd:7a:00:7d:fc:79:51:c0:3d:df:a9:ee:ae:bc:36:82:36:0f:
0a:2b:05:32:68:39:cf:39:aa:9c:b2:d6:15:09:e0:2b:42:a3:
07:47:32:61:99:bf:5d:83:a1:40:c4:4e:a0:10:45:8f:68:47:
d6:16:77:86:43:ca:0f:f7:da:3b:fb:74:89:f9:92:51:d6:56:
96:aa:34:7a:7a:52:2c:b5:77:41:2d:e3:a1:af:81:79:15:c5:
82:f8:99:d0:cb:15:fb:01:c6:0f:f9:ed:74:97:cd:09:1d:e2:
45:f5:34:8d:31:38:c0:c2:e1:51:af:fe:31:65:f8:6b:01:8a:
5f:df:e3:13:87:f6:ab:a9:1a:b3:bf:2e:e0:44:af:a8:f7:f5:
95:13:75:f9:69:3d:c5:59:de:68:73:66:c3:d7:9d:62:6d:93:
31:36:f4:44:48:c4:8e:02:1b:1c:31:ec:08:2b:d2:71:70:ae:
90:39:ae:46:12:01:f1:81:8e:b0:fb:49:f7:0b:46:77:bf:80:
c5:94:61:98:bf:f0:f0:26:5c:58:89:1f:e1:35:5f:52:12:27:
9f:79:ac:b8
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUfmyvrE75UBs8bEAi3RJGUk7eK1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA5MjAwNzA5NDdaFw0yNzA5MTkwNzE0NDdaMDMxMTAvBgNV
BAMTKDQwNDg4OTJBNEVDNUFBOEIwRTQ5NzlGNkZGOERBRUYwQUM5NkQ3OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAFGsqn3U5IdSq5mvDsbcXllfZ
6W9SNcl7IdxO6OnUkGUafZL8xjnyEcBJLpY3l3NMz/xs4BTN+4mLUh+5moqw8zOc
f28Uskcc6tf6aMdmLv+IJfKj9ZXYjOujJnFJOSEufDrD8RUDWAm+pFPW9ajNSie9
+o+r7hwen51Rs52Qn2lAsInTG4sf5f1c2JxW5BeSRylUNkyK80rheosUIyVGRg9E
gNZoXculpEfSHnJmjY4MU23NDSqb05VfMkPj+y9gmXiSD7Ilgbd4TYuwHr1hSpM4
9BTfDJ5Izrr4eo0AD7rdKgB+qURWQ3J/ctFN/OfPZC737zdBpLPWj9ApncUFAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUQEiJKk7FqosOSXn2/42u8KyW15MwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTNzQ1OS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBlBggrBgEFBQcBBwEB/wRWMFQwUgQCAAEwTAMEB1bigAME
AlpgBAMEAlpgFAMEAlpgHDAMAwQCWmAsAwQCWmBAAwQCWmCEAwQCWmCUAwQCWmCg
AwQCWmCsMAwDBAJaYOwDBANaYPAwDQYJKoZIhvcNAQELBQADggEBAGWE5kV5p9So
a/OLvIiArw/ABNBU/H4iTRiIhijEEtM/dGniZd16AH38eVHAPd+p7q68NoI2Dwor
BTJoOc85qpyy1hUJ4CtCowdHMmGZv12DoUDETqAQRY9oR9YWd4ZDyg/32jv7dIn5
klHWVpaqNHp6Uiy1d0Et46GvgXkVxYL4mdDLFfsBxg/57XSXzQkd4kX1NI0xOMDC
4VGv/jFl+GsBil/f4xOH9qupGrO/LuBEr6j39ZUTdflpPcVZ3mhzZsPXnWJtkzE2
9ERIxI4CGxwx7Agr0nFwrpA5rkYSAfGBjrD7SfcLRne/gMWUYZi/8PAmXFiJH+E1
X1ISJ595rLg=
-----END CERTIFICATE-----
Generated at Mon Sep 21 08:26:41 2026 by rpki-client