Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS397630.roa
File: AS397630.roa (raw, json)
Hash identifier: eABQD1L2I2E9LywKREW4bfIMfYs6aCOM5A4zQByRo0k=
Subject key identifier: 0A:03:B9:C4:F4:4E:99:F6:52:20:2E:3D:5A:87:A9:1B:76:B4:52:CD
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 355E8730530641E538FDD9B3938B5CA5270E4BEF
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS397630.roa
Signing time: Wed 02 Sep 2026 13:53:57 +0000
ROA not before: Wed 02 Sep 2026 13:48:57 +0000
ROA not after: Wed 01 Sep 2027 13:53:57 +0000
asID: 397630
IP address blocks: 188.220.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:5e:87:30:53:06:41:e5:38:fd:d9:b3:93:8b:5c:a5:27:0e:4b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 2 13:48:57 2026 GMT
Not After : Sep 1 13:53:57 2027 GMT
Subject: CN=0A03B9C4F44E99F652202E3D5A87A91B76B452CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:ba:30:41:9c:fa:51:8e:99:5c:b9:4e:1a:
04:53:64:d7:59:97:26:7c:6e:9c:ab:9d:4f:0f:c5:
64:7d:f3:bd:ac:c9:50:a0:04:f4:94:0c:06:aa:d4:
03:46:46:0e:7b:ec:2a:e4:f0:42:42:69:7d:5c:da:
b3:e2:2d:40:09:a1:25:fc:64:d3:d3:b1:9a:d3:8b:
39:82:16:49:5f:b4:ae:a2:b9:8a:62:65:f5:4c:25:
d2:8c:36:44:89:f8:29:53:e1:ef:3a:31:6c:61:88:
b2:ed:93:9b:54:6e:00:8d:2e:e4:65:4a:56:e4:b3:
c0:7a:b7:86:a7:1f:a7:97:a0:90:8c:66:94:48:61:
2c:be:91:ea:b0:89:0e:d4:f1:ac:11:aa:e3:4b:30:
ed:d8:d7:de:32:58:13:c7:9f:34:2d:d0:04:be:04:
4c:d8:ff:ae:7f:2f:f8:2e:54:41:f2:9f:35:8e:1b:
7d:e9:90:73:bd:91:6c:af:aa:0b:1d:fd:74:e1:71:
96:96:e0:58:bb:57:20:9c:ea:10:2a:55:c5:34:33:
1b:f1:8c:2e:77:4f:7e:ac:83:79:3a:0b:03:7a:94:
ae:31:73:78:f3:77:e8:d5:13:35:74:90:41:1e:b0:
83:e0:2e:3c:6f:3c:bf:95:d6:7c:cc:85:36:f1:e1:
65:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:03:B9:C4:F4:4E:99:F6:52:20:2E:3D:5A:87:A9:1B:76:B4:52:CD
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS397630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.142.0/24
Signature Algorithm: sha256WithRSAEncryption
64:bf:4b:8e:bc:cf:58:bb:de:0b:46:19:63:2b:9d:b0:dd:22:
5c:e4:23:df:1d:7a:b0:3b:73:1c:b1:9f:32:61:a5:16:23:42:
8a:5d:c4:1f:fa:cc:40:e9:ce:9b:90:89:09:af:da:1a:4a:a9:
53:e2:42:f0:e1:20:6c:e7:9a:72:ef:c4:f4:fe:35:42:8b:fa:
be:eb:60:3c:e1:8f:b1:bf:68:7b:6d:9b:c0:8c:98:3b:68:b6:
ce:1b:b4:15:b8:8d:71:61:4b:8b:1a:15:c5:4e:57:ae:ae:04:
43:05:93:ce:82:ce:23:cc:a8:b2:06:94:d8:58:87:25:87:db:
ec:46:53:45:e3:be:b9:e7:91:56:23:f2:e3:1d:14:c8:42:00:
8c:da:29:ba:d7:16:5e:42:41:44:d9:fd:5e:0b:af:e7:72:8c:
ae:02:43:f0:d5:4f:df:94:41:0c:4b:73:7f:0a:8d:81:84:5e:
d6:08:65:2d:cc:e1:58:42:e7:0a:c1:fe:ed:99:e9:12:cd:53:
95:7b:2d:bd:a9:9a:40:c1:2d:70:f9:7f:62:e2:ff:42:15:45:
7b:39:a6:5b:47:9f:d4:ba:a5:49:af:c5:36:98:9b:2e:b4:b8:
47:88:2f:28:31:98:9e:15:96:2d:0d:b8:16:8a:f1:23:59:b4:
b0:42:e6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:41 2026 by rpki-client