Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS202335.roa
File: AS202335.roa (raw, json)
Hash identifier: meBh91Ossi90SqNYzoL+H/gKHlhn6DXsCDmDHFg61Bo=
Subject key identifier: D2:8E:8F:2B:4D:C7:60:11:A1:47:FD:E0:C6:02:CA:C4:33:17:C7:9C
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7868B724F2376727BF5BD0F10DCDE97037DD5E6F
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS202335.roa
Signing time: Mon 24 Aug 2026 09:06:07 +0000
ROA not before: Mon 24 Aug 2026 09:01:07 +0000
ROA not after: Mon 23 Aug 2027 09:06:07 +0000
asID: 202335
IP address blocks: 188.220.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:68:b7:24:f2:37:67:27:bf:5b:d0:f1:0d:cd:e9:70:37:dd:5e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 24 09:01:07 2026 GMT
Not After : Aug 23 09:06:07 2027 GMT
Subject: CN=D28E8F2B4DC76011A147FDE0C602CAC43317C79C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cd:d2:26:d9:83:d2:a2:3e:d3:5e:b7:10:8c:
50:25:48:e1:c8:14:39:8b:76:89:65:e1:0f:42:e7:
5c:46:00:69:4a:e9:72:7d:11:8d:3b:3d:9a:60:c4:
ca:0e:8d:90:22:17:c7:dd:23:f7:31:4a:ef:f5:6b:
21:58:9b:8d:ba:7a:8b:f9:e2:be:30:d6:0b:83:51:
a9:de:ec:4b:6e:e8:7d:e0:a3:74:cc:5b:0b:fe:c9:
77:e4:a1:97:8c:5b:ec:ca:40:f1:86:44:78:5f:d9:
f0:37:ca:40:45:4d:bd:2c:4a:4d:86:15:20:37:5b:
16:8b:ac:6c:5d:ac:4d:0a:30:04:c8:07:f7:7f:54:
cf:42:ea:50:c2:98:25:dc:cf:92:2c:f6:b9:68:c3:
5f:e4:8f:e8:e7:f1:dc:6b:18:05:0b:93:16:2b:bb:
33:f4:8b:3e:5f:bc:c9:c1:6f:ca:29:35:16:6e:ec:
d5:99:d6:46:58:64:a3:a4:25:31:dc:79:c8:5c:45:
59:be:b0:f8:3f:eb:b8:c0:5a:78:af:e6:5c:b4:eb:
28:0a:83:7b:c8:6a:1c:55:53:37:8c:9e:2a:5e:4d:
d9:88:0c:2c:bc:b5:04:bf:50:d7:c4:2b:e6:1b:70:
8c:be:22:32:46:d5:b2:7e:d1:e8:19:54:09:f9:52:
bc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8E:8F:2B:4D:C7:60:11:A1:47:FD:E0:C6:02:CA:C4:33:17:C7:9C
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS202335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.46.0/24
Signature Algorithm: sha256WithRSAEncryption
32:99:44:41:56:45:67:a2:1d:7e:bf:51:71:66:1a:49:62:e1:
d4:2c:41:2e:c7:19:2c:65:bf:ee:48:d4:0b:48:14:c1:22:48:
9b:93:29:f6:85:62:d3:89:58:51:6b:8d:11:b7:39:04:ce:fb:
61:2e:56:e8:9f:4a:48:2f:3e:67:f5:0c:63:be:ce:41:3f:7b:
3a:1d:c0:4e:72:0b:62:19:75:d0:2e:44:21:b9:a0:2f:db:97:
d0:c6:d9:d8:28:a7:b1:e3:e4:c9:20:40:d8:f7:ce:2a:80:1b:
27:23:65:45:2d:5a:4d:2b:6d:a0:6b:aa:b7:aa:ef:f4:b1:19:
d9:58:6c:a4:43:ad:4b:ce:fb:75:24:1e:79:f3:1b:f9:e3:48:
db:c4:36:14:81:67:c5:6a:79:ea:bb:78:87:f5:f8:50:c0:e2:
ca:0d:3c:61:8f:27:4d:09:9e:9e:0c:e8:0c:f4:23:35:c8:83:
a6:06:b5:26:db:ae:e2:42:c4:c4:5e:25:0e:d2:b9:ff:6f:28:
33:45:95:49:b0:5a:c2:92:31:56:c5:24:d9:7a:81:8d:9b:2b:
65:15:bc:2f:2e:3b:ae:ae:f0:81:5b:b0:f3:2f:72:87:70:3d:
a6:4d:d7:b4:25:e1:19:91:be:ae:5f:35:37:cb:b0:7a:29:76:
2e:77:f1:23
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUeGi3JPI3Zye/W9DxDc3pcDfdXm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA4MjQwOTAxMDdaFw0yNzA4MjMwOTA2MDdaMDMxMTAvBgNV
BAMTKEQyOEU4RjJCNERDNzYwMTFBMTQ3RkRFMEM2MDJDQUM0MzMxN0M3OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNzdIm2YPSoj7TXrcQjFAlSOHI
FDmLdoll4Q9C51xGAGlK6XJ9EY07PZpgxMoOjZAiF8fdI/cxSu/1ayFYm426eov5
4r4w1guDUane7Etu6H3go3TMWwv+yXfkoZeMW+zKQPGGRHhf2fA3ykBFTb0sSk2G
FSA3WxaLrGxdrE0KMATIB/d/VM9C6lDCmCXcz5Is9rlow1/kj+jn8dxrGAULkxYr
uzP0iz5fvMnBb8opNRZu7NWZ1kZYZKOkJTHcechcRVm+sPg/67jAWniv5ly06ygK
g3vIahxVUzeMnipeTdmIDCy8tQS/UNfEK+YbcIy+IjJG1bJ+0egZVAn5UrwpAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU0o6PK03HYBGhR/3gxgLKxDMXx5wwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjAyMzM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNwu
MA0GCSqGSIb3DQEBCwUAA4IBAQAymURBVkVnoh1+v1FxZhpJYuHULEEuxxksZb/u
SNQLSBTBIkibkyn2hWLTiVhRa40RtzkEzvthLlbon0pILz5n9Qxjvs5BP3s6HcBO
cgtiGXXQLkQhuaAv25fQxtnYKKex4+TJIEDY984qgBsnI2VFLVpNK22ga6q3qu/0
sRnZWGykQ61Lzvt1JB558xv540jbxDYUgWfFannqu3iH9fhQwOLKDTxhjydNCZ6e
DOgM9CM1yIOmBrUm267iQsTEXiUO0rn/bygzRZVJsFrCkjFWxSTZeoGNmytlFbwv
LjuurvCBW7DzL3KHcD2mTde0JeEZkb6uXzU3y7B6KXYud/Ej
-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:46 2026 by rpki-client