Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS399359.roa
File: AS399359.roa (raw, json)
Hash identifier: jOlxAGxNruSsqCFL3mc3jx2grvOfZb2Gc+tn5uMkH6g=
Subject key identifier: 92:BF:A0:59:32:23:0D:B1:39:C0:61:91:B5:12:3B:40:C8:5D:08:6D
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2D1DAE41C00F0AE04D93EC51407DA6094642D29C
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS399359.roa
Signing time: Tue 07 Jul 2026 00:21:48 +0000
ROA not before: Tue 07 Jul 2026 00:16:48 +0000
ROA not after: Tue 06 Jul 2027 00:21:48 +0000
asID: 399359
IP address blocks: 188.220.25.0/24 maxlen: 24
188.220.26.0/24 maxlen: 24
188.220.27.0/24 maxlen: 24
188.220.33.0/24 maxlen: 24
188.220.152.0/24 maxlen: 24
188.220.161.0/24 maxlen: 24
188.220.176.0/24 maxlen: 24
188.220.177.0/24 maxlen: 24
188.220.178.0/24 maxlen: 24
188.220.180.0/24 maxlen: 24
188.220.183.0/24 maxlen: 24
188.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:1d:ae:41:c0:0f:0a:e0:4d:93:ec:51:40:7d:a6:09:46:42:d2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 7 00:16:48 2026 GMT
Not After : Jul 6 00:21:48 2027 GMT
Subject: CN=92BFA05932230DB139C06191B5123B40C85D086D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:de:95:e8:07:57:51:df:40:a8:ad:0e:16:04:
e9:de:6d:14:ea:df:5d:0d:ba:91:cc:20:d7:73:44:
8d:d6:d1:98:a1:f1:84:a3:0e:8e:da:46:d7:11:3e:
6c:13:52:1c:2b:58:bc:ea:6d:8a:de:d9:d2:86:d2:
94:8a:8c:7a:3a:d2:df:58:0d:5e:a4:34:f5:6a:d7:
d9:4b:dc:24:6d:8d:e1:f4:d3:b5:87:44:7f:b0:d3:
9d:62:82:d1:86:91:ea:df:88:65:24:19:b6:8a:51:
da:30:34:89:b8:f3:e4:66:d5:59:2b:33:fc:ef:02:
81:1a:5a:32:07:65:d2:77:93:cb:2e:9c:72:1c:19:
46:03:ef:b1:11:3b:31:c6:f7:b9:88:7b:a1:cb:98:
f4:20:5e:53:aa:59:cd:62:f8:9a:c9:4a:2b:bc:9e:
0d:6f:f9:7e:79:7a:d9:66:bc:ef:9d:73:ea:ce:cb:
86:a4:2c:9b:b8:b8:db:84:c0:8c:08:39:fb:3e:d5:
55:8d:a6:ed:d7:8e:ef:13:07:9e:15:d7:ed:c8:8e:
cc:36:5c:cb:5d:f7:f4:21:ed:17:45:94:5c:c0:db:
94:0e:a6:ce:51:6e:25:05:ec:3a:9b:56:77:2b:fb:
0d:51:98:b1:58:59:d3:13:da:ce:40:bd:71:f9:74:
58:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BF:A0:59:32:23:0D:B1:39:C0:61:91:B5:12:3B:40:C8:5D:08:6D
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS399359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.25.0-188.220.27.255
188.220.33.0/24
188.220.152.0/24
188.220.161.0/24
188.220.176.0-188.220.178.255
188.220.180.0/24
188.220.183.0/24
188.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
72:e5:a3:b3:3a:32:6a:c6:bc:e3:5d:41:87:9d:51:cc:4c:95:
37:a1:2c:c2:1e:7d:93:e7:89:86:b0:75:75:79:8d:49:1f:76:
81:32:c2:8a:1e:18:7d:e7:f8:d6:fc:cc:28:16:e6:5f:16:38:
bd:cc:f8:ea:96:c5:3c:dc:63:3a:1e:51:0b:68:30:9a:6d:f6:
ff:eb:2f:35:ba:a2:fb:46:ba:21:a6:76:b6:37:ca:27:2f:d5:
97:87:02:4a:49:c3:1c:53:19:09:62:31:e9:43:7e:71:2a:45:
ec:16:68:0f:4a:4a:40:0f:c5:ff:92:10:84:a2:39:d9:c7:3d:
e2:35:71:a4:8f:2a:95:92:28:21:1b:32:83:29:60:8b:62:b5:
cc:0d:d6:fa:75:0c:52:62:bd:9f:47:00:43:d0:aa:ef:7f:6b:
1b:83:ff:e0:6f:22:25:be:ac:67:bf:5d:72:15:94:b4:d6:ef:
a3:00:85:2d:a3:f0:18:2c:bd:16:b1:65:57:bd:3e:18:db:83:
4e:c3:dd:fd:52:64:fd:d0:2d:45:4a:e0:7f:e1:24:36:37:c0:
5a:73:3d:39:51:2a:4a:e2:6a:d7:ed:5b:b0:30:30:c5:95:83:
86:fc:a3:e7:6f:11:8f:e0:f6:da:a4:58:81:42:1d:69:00:68:
15:68:69:bd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jul 19 18:43:35 2026 by rpki-client