Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS393855.roa
File: AS393855.roa (raw, json)
Hash identifier: mv3DqFmVxYGjzn65rk0HblKtuVa6MXMVPUhP0xDeVls=
Subject key identifier: 33:1F:8F:4B:EA:3F:82:89:34:84:D5:65:E5:2C:62:60:44:53:34:D9
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 23AD097988E720AFF86028A53153878ECA05E6EE
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS393855.roa
Signing time: Mon 24 Aug 2026 09:15:32 +0000
ROA not before: Mon 24 Aug 2026 09:10:32 +0000
ROA not after: Mon 23 Aug 2027 09:15:32 +0000
asID: 393855
IP address blocks: 188.220.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 11:56:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ad:09:79:88:e7:20:af:f8:60:28:a5:31:53:87:8e:ca:05:e6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 24 09:10:32 2026 GMT
Not After : Aug 23 09:15:32 2027 GMT
Subject: CN=331F8F4BEA3F82893484D565E52C6260445334D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e9:0c:9b:62:70:59:df:da:2c:4b:dc:c0:85:
c3:5a:68:31:51:59:02:53:6c:04:a8:1e:85:f0:a4:
9c:ba:91:b1:0e:ac:ea:3e:6a:a7:03:88:a4:ee:e5:
e5:dc:c2:8c:67:b6:1b:df:3c:18:f1:41:03:39:e2:
3d:3c:6f:45:97:5a:7d:5d:c9:da:71:3b:fc:f3:24:
84:ac:a0:9a:df:6e:7c:82:ce:6e:ae:65:75:d9:a9:
63:d1:83:02:9d:f9:26:6b:63:65:bb:32:f3:ba:98:
16:dd:a0:36:c3:a4:e1:98:d9:00:66:81:ef:e4:35:
bd:23:b4:fa:f1:5d:1c:4a:3b:30:bc:d0:8d:ea:da:
15:3a:8d:67:b3:48:33:6f:cd:63:bb:25:90:09:2f:
d3:24:16:5c:34:76:cc:8f:c4:49:e1:ec:aa:af:8e:
9f:f0:62:ea:98:61:a2:a8:95:e8:f2:08:e0:24:fd:
eb:61:35:c0:e4:9f:d2:84:00:f2:f7:8f:24:36:a5:
c4:95:e7:a9:e8:b0:0b:7b:56:8d:5b:66:cf:6e:fd:
34:76:1f:3b:ea:7a:41:71:44:cb:a6:3b:a8:66:82:
c3:59:7b:ba:b3:f0:7f:6c:3b:eb:29:84:c3:be:6d:
50:73:a5:3b:a5:10:c3:bb:3d:56:ac:fd:ee:bb:6e:
17:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1F:8F:4B:EA:3F:82:89:34:84:D5:65:E5:2C:62:60:44:53:34:D9
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS393855.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.57.0/24
Signature Algorithm: sha256WithRSAEncryption
10:67:80:87:00:ca:53:a8:37:0e:5e:27:97:fe:04:81:15:9e:
05:6b:d1:37:cd:02:4c:bc:71:1e:e5:23:24:98:6e:fe:2c:a8:
ef:f9:38:63:2c:4b:e6:d9:3f:3c:9a:fa:77:12:4a:33:74:5d:
cb:de:c6:98:63:25:fd:c4:21:58:dd:5e:c3:a4:56:de:90:24:
c3:95:75:7f:e9:3c:a7:03:4c:df:e5:70:e7:b8:06:cf:f6:92:
ff:cd:ee:16:86:d2:aa:bb:c1:a8:81:fe:f5:f0:68:8e:40:64:
9e:a5:c2:0b:44:aa:2b:80:9d:58:93:14:87:e8:69:c7:ed:86:
83:74:a2:33:5f:1d:d3:7f:94:21:3a:aa:d5:76:d4:0f:c1:b0:
08:0f:ff:cb:37:fb:4a:90:f2:1a:20:55:40:b4:97:17:a8:38:
a6:9a:34:d4:93:7b:1a:fa:06:8d:d4:41:75:d7:36:fb:1b:f1:
c4:dd:a7:0c:45:1d:b6:16:52:a7:1a:21:63:5e:ed:2d:a7:54:
80:25:ff:29:01:2f:65:65:3e:0e:37:0c:e2:84:86:b9:31:a9:
d6:a2:87:5b:b3:fe:94:5a:85:2a:40:cf:9a:be:76:07:c3:14:
0d:26:59:bf:06:a8:17:e7:25:32:ad:8e:4a:6c:30:53:05:9f:
7f:9f:fc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:04:05 2026 by rpki-client