Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS270824.roa
File: AS270824.roa (raw, json)
Hash identifier: Rz4x5WLJCuY9++DwVEqHQdAomedqEZGtoDZS0t2GLjM=
Subject key identifier: 79:06:19:0A:0A:6D:90:56:05:D9:83:F6:A0:F0:6D:52:DC:D3:CB:EF
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6EE08BD097CD96922BA6D6CBB0138583DAAE5CEE
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS270824.roa
Signing time: Wed 15 Jul 2026 14:57:35 +0000
ROA not before: Wed 15 Jul 2026 14:52:35 +0000
ROA not after: Wed 14 Jul 2027 14:57:35 +0000
asID: 270824
IP address blocks: 188.220.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:e0:8b:d0:97:cd:96:92:2b:a6:d6:cb:b0:13:85:83:da:ae:5c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 15 14:52:35 2026 GMT
Not After : Jul 14 14:57:35 2027 GMT
Subject: CN=7906190A0A6D905605D983F6A0F06D52DCD3CBEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6c:7f:31:8b:8a:83:87:81:26:75:b3:28:7c:
f1:41:62:f1:5e:b9:66:97:1d:95:e9:dd:d8:7d:4b:
f9:01:6a:8e:94:5c:38:a2:62:73:6a:56:62:ca:7c:
a0:dc:16:ea:43:14:db:6e:58:cf:02:ca:f0:de:9a:
49:45:1a:8d:1d:c4:33:10:1f:54:3c:d8:fe:13:06:
3b:9d:16:44:44:0e:1d:43:ef:1b:08:fa:79:e1:83:
8e:67:72:e5:90:3b:67:e9:9f:aa:62:21:05:49:32:
86:70:81:fd:20:58:0e:58:e9:b6:8b:aa:e1:de:ac:
03:49:fd:7a:12:7a:42:fc:b9:3e:89:4b:0d:91:91:
a1:62:09:82:00:17:19:b4:e8:f7:05:77:17:64:12:
b0:b3:e4:5d:a9:73:14:48:52:a8:17:46:24:d0:fc:
a4:db:f5:12:88:89:ce:75:a9:95:79:ba:d1:63:7f:
da:cf:d6:86:21:49:5e:76:1f:19:7f:26:32:d8:4b:
70:5e:40:5f:ba:56:ef:1e:0c:0e:7c:31:1b:10:33:
a5:0b:1f:89:c9:b5:2b:f5:a6:f5:aa:03:7b:41:08:
90:b8:f9:fc:88:fb:fe:3c:41:63:d8:dd:4f:e4:d3:
53:49:fb:b7:2b:b7:6f:b7:87:da:8d:b3:83:2f:4d:
dd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:06:19:0A:0A:6D:90:56:05:D9:83:F6:A0:F0:6D:52:DC:D3:CB:EF
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS270824.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.168.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:78:dd:22:6a:a7:c9:b7:8f:6c:09:e2:a0:16:b7:dd:30:27:
e4:21:30:c1:42:b8:0c:b6:ae:04:76:13:55:f0:8d:d8:1c:37:
74:8c:89:19:03:4f:85:cf:17:47:dc:6b:4b:54:37:33:60:5f:
8c:08:89:d1:35:62:f7:c1:1c:0f:ab:ff:56:42:61:a8:30:35:
e9:0d:fa:ce:40:72:90:24:1e:e3:c3:49:e8:12:ed:db:83:4f:
b5:24:4e:6b:90:48:a8:03:54:56:77:1f:60:6b:83:c2:28:e2:
d2:28:1d:9d:7c:3f:e1:87:fc:7d:e1:37:39:47:4f:b5:d7:4c:
0b:67:0b:c7:83:a9:0f:9f:46:05:0f:6a:76:0f:1c:55:33:65:
06:92:01:f3:16:fa:b7:24:59:2e:57:a8:bc:d4:f7:77:29:1f:
aa:67:2d:67:dc:fd:25:48:71:73:39:6b:dc:d5:32:c7:8f:0d:
77:ca:7c:a9:c7:9e:37:16:06:2e:58:97:d4:c5:28:4c:8b:f3:
79:dc:f0:f1:f6:b6:8f:a8:f2:e1:d4:92:9c:39:08:95:93:3e:
9c:df:98:02:1c:22:c4:dd:12:d3:80:93:e6:9f:bc:d1:7c:d7:
af:19:fd:f3:c9:b4:ca:26:91:b1:4c:81:7c:87:99:fe:51:37:
cb:6c:b8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:43:31 2026 by rpki-client