Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS204535.roa
File: AS204535.roa (raw, json)
Hash identifier: 2njBG62LXnuSNWoFXj9VMuvLNK7c2MnJbpohgFVKD00=
Subject key identifier: 76:CE:B9:58:9E:11:6C:8A:71:5A:B8:8C:3C:79:C7:2B:3A:2E:57:D6
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2C90762280708AC966F73E469EE6B11DA17ADF36
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS204535.roa
Signing time: Mon 24 Aug 2026 07:49:07 +0000
ROA not before: Mon 24 Aug 2026 07:44:07 +0000
ROA not after: Mon 23 Aug 2027 07:49:07 +0000
asID: 204535
IP address blocks: 188.220.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:90:76:22:80:70:8a:c9:66:f7:3e:46:9e:e6:b1:1d:a1:7a:df:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 24 07:44:07 2026 GMT
Not After : Aug 23 07:49:07 2027 GMT
Subject: CN=76CEB9589E116C8A715AB88C3C79C72B3A2E57D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:e9:74:d6:9f:41:c2:16:ea:72:81:0b:0d:
93:65:1d:3f:cd:b3:49:56:e7:39:66:de:3f:86:93:
65:3a:a0:59:10:df:98:67:90:37:8e:d6:63:b8:28:
79:b6:0c:1e:0b:0f:89:92:97:2b:de:1d:78:cc:04:
93:05:eb:bf:0c:f7:d5:fa:0a:cc:18:69:ac:3b:0c:
df:e1:5a:9d:52:40:0a:98:98:5b:7a:f3:3f:7d:60:
c0:69:be:28:12:b7:57:37:5e:7e:3a:c1:85:7c:58:
eb:36:20:bc:9b:73:44:31:4c:4e:bf:80:6a:5b:1c:
fb:de:d3:62:c7:c9:74:e9:21:1a:3d:0a:d4:e7:2e:
8d:0b:9e:67:b0:69:5a:18:fb:dc:92:d3:e3:8b:2e:
6b:e8:71:20:ff:44:33:80:88:64:76:9c:cb:8f:91:
34:d1:4f:4a:70:5e:a1:cf:82:6a:5a:2e:7b:78:65:
59:d1:cb:ec:ed:a8:2e:d0:0f:f3:e9:e3:81:9e:23:
72:72:51:18:17:f8:fe:65:02:3b:b6:de:9c:7d:a6:
e9:16:92:d3:45:2d:fe:df:64:50:b2:57:a6:92:ac:
c8:d4:57:56:f1:3d:b6:f9:91:1b:a6:23:d0:81:af:
80:6e:8d:ee:97:1e:13:6b:c8:2c:93:2f:f5:73:77:
d3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CE:B9:58:9E:11:6C:8A:71:5A:B8:8C:3C:79:C7:2B:3A:2E:57:D6
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS204535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.34.0/24
Signature Algorithm: sha256WithRSAEncryption
49:5d:2a:41:6d:05:72:d6:31:31:f6:a6:fa:5a:ca:4e:aa:9d:
ae:23:28:c7:92:de:dc:9b:44:e9:06:6d:89:b6:d6:62:32:94:
da:96:16:52:f3:43:67:fd:36:0f:76:14:d8:5b:0a:6b:d0:32:
37:6a:f5:53:28:9c:c1:20:d2:eb:6b:70:e0:54:69:c4:fb:e6:
85:42:5e:e5:71:49:85:6d:1c:8b:f8:24:95:cd:40:4f:16:96:
8f:cb:0a:8a:12:71:56:77:f8:3b:42:7b:e1:03:50:bd:66:0c:
27:51:27:93:cc:13:9a:e2:c3:15:d4:de:ce:f1:5a:16:29:d7:
d3:b5:04:3a:48:4f:94:82:9f:33:7b:ba:c7:8c:77:3b:6a:d2:
59:87:cf:42:43:36:19:a1:fc:ff:ae:bf:9e:66:41:28:a5:dd:
da:ee:6c:78:71:f1:4f:5b:dd:bc:3e:bb:54:57:30:42:5c:df:
d9:2f:07:e1:9a:ec:3b:86:d3:08:41:97:29:8b:2d:63:18:a8:
12:29:dc:66:29:8b:62:9e:e0:51:8b:63:89:b4:f5:c7:95:fd:
57:34:32:76:34:46:e5:ad:c2:f5:2b:5b:24:97:b5:3f:01:f5:
be:04:a1:44:ce:63:07:a7:84:06:b1:63:dc:31:cc:e6:40:06:
e9:0d:01:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:28 2026 by rpki-client