Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS393427.roa
File: AS393427.roa (raw, json)
Hash identifier: NxCcl9MrOlwVEq7r5JZXpAUG+ESfbTdl+TLbqiNDra4=
Subject key identifier: A2:14:82:0A:D0:76:9F:FD:99:90:E5:FC:38:B3:93:2D:64:E3:41:42
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1CB2F52DC377ABB59F848AD35647EFE14EF71074
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS393427.roa
Signing time: Tue 16 Jun 2026 23:52:52 +0000
ROA not before: Tue 16 Jun 2026 23:47:52 +0000
ROA not after: Tue 15 Jun 2027 23:52:52 +0000
asID: 393427
IP address blocks: 94.192.48.0/22 maxlen: 24
94.192.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:b2:f5:2d:c3:77:ab:b5:9f:84:8a:d3:56:47:ef:e1:4e:f7:10:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 16 23:47:52 2026 GMT
Not After : Jun 15 23:52:52 2027 GMT
Subject: CN=A214820AD0769FFD9990E5FC38B3932D64E34142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:82:a4:02:df:7b:06:9e:35:ea:e5:9a:d2:3e:
21:6e:b9:07:65:d8:1e:4d:0c:a8:87:a7:5e:22:d1:
01:0e:0f:12:1d:57:81:54:57:8b:89:4a:60:00:42:
82:cd:d5:0d:13:bc:42:c9:31:73:6e:76:67:43:f9:
a3:1d:9c:ad:4e:fa:09:93:36:6e:6b:df:21:fa:8e:
b6:4c:6f:8d:8f:45:af:97:34:a0:a1:a1:6b:33:4a:
c5:ed:6a:a7:8b:b4:ef:f4:78:1b:3b:f7:4f:6d:11:
b6:8b:26:96:fc:1a:c6:bc:f1:f1:84:27:b6:99:32:
52:56:65:10:78:bc:94:86:f8:c4:5a:fa:77:4d:92:
3b:cf:45:c1:12:82:22:b1:56:71:51:69:bd:d0:99:
6e:23:13:a0:ad:28:8a:eb:66:e2:49:dc:72:42:14:
a6:46:b0:a1:95:ac:08:38:ea:90:09:65:97:66:2a:
e0:40:9e:dd:c2:42:ad:48:cb:53:81:1e:14:eb:b9:
a5:48:d6:e0:e3:6a:d0:d9:a2:f2:7e:a5:92:49:e6:
4b:39:3b:b4:17:ef:84:e5:41:c6:7d:76:59:04:f7:
17:f6:f7:e1:cf:2f:ac:db:ed:f6:63:47:13:81:28:
10:72:8e:b5:99:5e:b2:b0:14:36:25:b9:26:77:b7:
ed:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:14:82:0A:D0:76:9F:FD:99:90:E5:FC:38:B3:93:2D:64:E3:41:42
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS393427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.192.48.0/21
Signature Algorithm: sha256WithRSAEncryption
79:ee:67:85:5f:55:d0:e4:e4:84:48:ab:89:bb:15:95:b2:e6:
2a:62:b1:18:4f:33:37:f5:ca:b7:1e:52:be:a7:f0:e7:4e:9e:
ed:e3:55:95:c6:20:dd:99:d5:36:1a:87:4b:ba:40:0d:75:bb:
a5:d8:33:d7:37:af:c3:5b:3d:81:85:9f:5b:25:cf:19:e3:2e:
9d:42:84:19:d8:cf:5f:d5:37:74:f4:75:e5:f9:62:80:07:c0:
df:a3:85:63:ff:bd:58:c6:cb:21:9f:19:f3:1f:e1:db:67:37:
17:e0:b8:a4:65:6d:3c:44:85:ea:25:9f:d7:a9:9e:ba:a7:03:
b1:3d:a5:39:ac:d5:f6:f0:a0:20:03:fb:d0:2a:23:2a:0b:00:
42:a7:d1:a6:90:2f:fe:18:bd:46:cd:14:2e:18:63:f5:a2:e0:
76:91:06:f7:31:88:75:0d:1e:a5:3b:b1:32:37:a0:3b:38:cb:
18:78:00:b1:b0:a1:2c:61:c9:37:44:59:62:0c:65:39:4a:d2:
8f:6d:e5:1e:98:b6:f3:ba:20:3b:2f:a0:5b:a6:d6:ec:7e:1a:
3a:65:7a:8b:ef:e7:c6:70:71:88:a1:3a:0c:94:7a:55:b3:c7:
44:6a:4d:d6:62:5e:50:85:99:d1:a4:17:e2:6a:24:5f:2b:60:
a0:99:eb:ef
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUHLL1LcN3q7WfhIrTVkfv4U73EHQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA2MTYyMzQ3NTJaFw0yNzA2MTUyMzUyNTJaMDMxMTAvBgNV
BAMTKEEyMTQ4MjBBRDA3NjlGRkQ5OTkwRTVGQzM4QjM5MzJENjRFMzQxNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEgqQC33sGnjXq5ZrSPiFuuQdl
2B5NDKiHp14i0QEODxIdV4FUV4uJSmAAQoLN1Q0TvELJMXNudmdD+aMdnK1O+gmT
Nm5r3yH6jrZMb42PRa+XNKChoWszSsXtaqeLtO/0eBs7909tEbaLJpb8Gsa88fGE
J7aZMlJWZRB4vJSG+MRa+ndNkjvPRcESgiKxVnFRab3QmW4jE6CtKIrrZuJJ3HJC
FKZGsKGVrAg46pAJZZdmKuBAnt3CQq1Iy1OBHhTruaVI1uDjatDZovJ+pZJJ5ks5
O7QX74TlQcZ9dlkE9xf29+HPL6zb7fZjRxOBKBByjrWZXrKwFDYluSZ3t+2RAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUohSCCtB2n/2ZkOX8OLOTLWTjQUIwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMzkzNDI3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXsAw
MA0GCSqGSIb3DQEBCwUAA4IBAQB57meFX1XQ5OSESKuJuxWVsuYqYrEYTzM39cq3
HlK+p/DnTp7t41WVxiDdmdU2GodLukANdbul2DPXN6/DWz2BhZ9bJc8Z4y6dQoQZ
2M9f1Td09HXl+WKAB8Dfo4Vj/71YxsshnxnzH+HbZzcX4LikZW08RIXqJZ/XqZ66
pwOxPaU5rNX28KAgA/vQKiMqCwBCp9GmkC/+GL1GzRQuGGP1ouB2kQb3MYh1DR6l
O7EyN6A7OMsYeACxsKEsYck3RFliDGU5StKPbeUemLbzuiA7L6Bbptbsfho6ZXqL
7+fGcHGIoToMlHpVs8dEak3WYl5QhZnRpBfiaiRfK2Cgmevv
-----END CERTIFICATE-----
Generated at Mon Jun 22 07:23:47 2026 by rpki-client