Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS401776.roa
File: AS401776.roa (raw, json)
Hash identifier: W5npfFi7enk7+m8yI7T+CgtRQkPjwJ9Jj22b8tawHt8=
Subject key identifier: 8D:9D:AB:20:4C:A2:E3:84:38:E3:76:A1:90:BF:0A:64:DB:DD:CA:95
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 36EC1F649FA8874E74A114AF337AFE8A06FC52E6
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS401776.roa
Signing time: Mon 24 Aug 2026 02:59:40 +0000
ROA not before: Mon 24 Aug 2026 02:54:40 +0000
ROA not after: Mon 23 Aug 2027 02:59:40 +0000
asID: 401776
IP address blocks: 188.220.67.0/24 maxlen: 24
188.220.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:ec:1f:64:9f:a8:87:4e:74:a1:14:af:33:7a:fe:8a:06:fc:52:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 24 02:54:40 2026 GMT
Not After : Aug 23 02:59:40 2027 GMT
Subject: CN=8D9DAB204CA2E38438E376A190BF0A64DBDDCA95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:58:6b:ca:fc:7c:ee:da:a9:1c:ba:cd:09:1a:
29:9b:1a:73:b7:7d:db:09:56:67:b0:9f:3c:9b:e1:
97:04:0a:6f:a2:ea:ac:ae:ac:8a:e9:8c:c0:86:e3:
24:3d:fe:d4:5c:37:54:f3:c3:77:76:68:84:f4:15:
3a:12:f4:0c:ef:40:42:f4:75:09:85:b4:55:e7:c2:
c5:82:e0:2c:78:74:52:14:1f:4a:25:3c:d4:eb:73:
38:4a:e2:11:86:3e:ba:a6:6e:95:de:18:c5:8c:28:
a3:38:55:77:42:c5:8f:f4:77:85:9d:d3:02:16:04:
cd:52:34:51:44:4c:0b:28:16:10:7f:c2:e2:38:c1:
67:7c:f9:2c:d1:07:55:a7:d2:70:53:87:23:0b:8f:
a8:01:84:d4:2e:2a:d3:f7:be:ef:68:34:4c:0d:43:
12:33:00:6c:43:2f:90:a2:a2:ac:90:49:23:f5:59:
8d:9a:28:67:c5:d5:44:33:e5:5b:da:74:12:de:41:
9f:fc:64:81:b5:ed:50:80:d6:5c:e3:77:4e:b6:5b:
eb:cf:a7:2f:50:8a:75:10:d0:c8:e1:01:69:84:9f:
ad:2b:de:d6:c4:25:5d:07:81:5b:66:7c:1b:67:b2:
c3:fb:65:c3:40:f3:8f:7c:45:21:b6:27:06:9f:22:
64:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9D:AB:20:4C:A2:E3:84:38:E3:76:A1:90:BF:0A:64:DB:DD:CA:95
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS401776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.67.0/24
188.220.223.0/24
Signature Algorithm: sha256WithRSAEncryption
19:95:d7:38:fc:f1:de:21:36:97:04:b6:58:fe:e5:97:16:75:
28:f6:8b:c0:33:ab:8c:8c:ee:f2:e3:f2:ad:f8:30:15:22:ee:
52:02:dc:6b:86:e3:e2:c4:f1:2a:c2:6f:15:cb:27:27:04:2f:
90:7e:81:a3:71:90:a3:bc:c2:36:83:66:5a:92:b5:00:af:6d:
7f:40:6e:93:20:95:6d:4f:11:ac:a9:80:32:2a:05:fb:fe:06:
05:94:d5:8c:90:c8:2c:22:dc:4c:f5:29:95:68:8c:55:69:3a:
49:ee:72:a6:c3:84:f7:93:82:c8:54:96:02:ab:7d:bc:9e:9c:
15:6f:65:42:c1:19:2d:61:e3:63:42:9f:1e:e1:0b:1d:f6:27:
f9:fe:fe:20:77:39:01:e5:6a:b1:9c:c1:c8:00:4b:70:75:27:
03:6b:58:b9:91:51:3a:d5:6e:b2:cb:3b:cf:c6:36:d9:d8:e7:
e0:44:ca:a0:63:f5:e6:2e:d6:91:19:36:4f:2f:10:30:c9:ca:
01:e9:30:65:25:4a:e8:fd:55:1b:28:65:fb:08:4f:1c:71:63:
85:77:47:c7:3f:c0:b5:97:92:42:0b:ff:0a:7a:30:2a:ba:be:
6a:6c:41:fc:40:60:0d:33:e7:a6:62:50:04:40:e0:24:61:38:
34:19:f4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:47 2026 by rpki-client