Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402221.roa
File: AS402221.roa (raw, json)
Hash identifier: TRvuZnFN2BbruNTabjWc/CH9uf0GhGDMQzGVf+D5e/s=
Subject key identifier: 63:88:E2:02:50:24:C9:56:58:E8:D9:95:5E:B7:62:2E:81:B3:5E:9B
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4E52DE2E0ECB37C28AF6CDC9E83073F05A92A1C9
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402221.roa
Signing time: Sat 04 Jul 2026 11:32:40 +0000
ROA not before: Sat 04 Jul 2026 11:27:40 +0000
ROA not after: Sat 03 Jul 2027 11:32:40 +0000
asID: 402221
IP address blocks: 188.221.31.0/24 maxlen: 24
188.221.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:52:de:2e:0e:cb:37:c2:8a:f6:cd:c9:e8:30:73:f0:5a:92:a1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 4 11:27:40 2026 GMT
Not After : Jul 3 11:32:40 2027 GMT
Subject: CN=6388E2025024C95658E8D9955EB7622E81B35E9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:d9:cd:8d:4f:ec:4a:61:df:95:f5:59:bb:
96:bd:61:79:88:38:00:b7:bd:57:99:19:12:0f:86:
db:9a:15:84:60:be:75:d6:29:3d:98:88:ab:11:41:
0b:5a:fc:0c:aa:28:4f:7f:29:74:b2:89:5f:fd:6e:
58:cf:1b:64:b2:e2:ef:a2:3c:ff:fa:68:f2:2c:cb:
87:74:81:16:9a:81:14:ce:b5:e9:92:c8:de:ff:3a:
62:83:b3:e9:46:be:9d:04:ce:59:b7:67:18:d3:81:
39:1f:be:4c:d7:55:e1:3c:8c:fe:5a:6c:e4:73:3b:
25:d9:e4:5f:a0:52:69:6e:9a:3c:5c:e6:cb:f4:7d:
9a:54:59:7f:df:86:e5:6e:60:0b:5b:13:50:bf:74:
1c:a2:5f:3b:65:16:e6:a8:f3:35:c0:eb:75:54:a1:
c6:98:b0:87:06:f2:54:8b:fd:17:6c:be:0b:a7:62:
0a:a7:c4:ef:c7:af:aa:78:3a:54:f8:d7:27:05:e4:
13:d8:55:93:4f:3d:3c:72:b1:a4:7d:fe:49:64:99:
2f:5c:39:ec:fd:39:17:6f:cf:10:07:82:e4:b9:19:
cc:6d:d9:6f:eb:dc:95:46:e8:27:20:bb:17:65:2e:
58:3f:b6:ae:22:88:62:42:ca:c5:71:d9:e9:17:cb:
87:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:88:E2:02:50:24:C9:56:58:E8:D9:95:5E:B7:62:2E:81:B3:5E:9B
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402221.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.221.31.0/24
188.221.37.0/24
Signature Algorithm: sha256WithRSAEncryption
30:aa:07:ce:cd:7e:75:53:c6:2d:1c:5d:b1:f1:1d:89:8f:c0:
6f:3e:76:1d:02:82:3d:f7:0e:e7:b2:2b:05:60:da:f1:00:5c:
26:7b:48:8c:36:74:51:33:b2:c7:d2:ac:ef:e4:3b:30:75:92:
d2:21:c3:6f:39:03:02:9b:63:51:63:f7:d1:20:9c:d3:26:23:
0a:27:8d:d5:33:1d:da:c8:07:e5:c4:b5:d0:0f:d8:b4:b3:c8:
0c:d8:e7:16:f1:b8:6c:26:83:33:d7:31:95:1b:15:98:92:dd:
69:65:86:00:88:44:0e:f7:93:34:50:fa:c0:1c:bc:19:ae:ba:
7f:5a:4d:89:5a:17:44:76:c0:bc:f6:e1:6a:cc:64:e5:fa:b7:
51:cf:f1:26:61:cb:18:bf:c9:2d:9c:4f:28:cb:90:e0:43:9b:
f0:15:93:fa:e4:7c:ee:ec:2d:b7:c7:d1:16:14:ba:c5:1d:fa:
4a:1a:00:cf:5d:e3:39:b8:c7:70:bd:6b:13:ef:ab:22:92:cf:
94:c6:a4:68:4b:2f:01:28:12:30:15:cf:69:3f:82:28:5e:0c:
c1:ff:cf:0f:82:35:d3:35:a7:03:6f:44:ec:e8:dd:7b:3a:3f:
84:df:db:0b:a3:7b:8e:57:39:ed:42:5a:c7:04:fa:56:b9:46:
a2:ba:3e:7c
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUTlLeLg7LN8KK9s3J6DBz8FqSockwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA3MDQxMTI3NDBaFw0yNzA3MDMxMTMyNDBaMDMxMTAvBgNV
BAMTKDYzODhFMjAyNTAyNEM5NTY1OEU4RDk5NTVFQjc2MjJFODFCMzVFOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrZNnNjU/sSmHflfVZu5a9YXmI
OAC3vVeZGRIPhtuaFYRgvnXWKT2YiKsRQQta/AyqKE9/KXSyiV/9bljPG2Sy4u+i
PP/6aPIsy4d0gRaagRTOtemSyN7/OmKDs+lGvp0Ezlm3ZxjTgTkfvkzXVeE8jP5a
bORzOyXZ5F+gUmlumjxc5sv0fZpUWX/fhuVuYAtbE1C/dByiXztlFuao8zXA63VU
ocaYsIcG8lSL/RdsvgunYgqnxO/Hr6p4OlT41ycF5BPYVZNPPTxysaR9/klkmS9c
Oez9ORdvzxAHguS5Gcxt2W/r3JVG6CcguxdlLlg/tq4iiGJCysVx2ekXy4fHAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUY4jiAlAkyVZY6NmVXrdiLoGzXpswHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTNDAyMjIxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvN0f
AwQAvN0lMA0GCSqGSIb3DQEBCwUAA4IBAQAwqgfOzX51U8YtHF2x8R2Jj8BvPnYd
AoI99w7nsisFYNrxAFwme0iMNnRRM7LH0qzv5DswdZLSIcNvOQMCm2NRY/fRIJzT
JiMKJ43VMx3ayAflxLXQD9i0s8gM2OcW8bhsJoMz1zGVGxWYkt1pZYYAiEQO95M0
UPrAHLwZrrp/Wk2JWhdEdsC89uFqzGTl+rdRz/EmYcsYv8ktnE8oy5DgQ5vwFZP6
5Hzu7C23x9EWFLrFHfpKGgDPXeM5uMdwvWsT76siks+UxqRoSy8BKBIwFc9pP4Io
XgzB/88PgjXTNacDb0Ts6N17Oj+E39sLo3uOVzntQlrHBPpWuUaiuj58
-----END CERTIFICATE-----
Generated at Mon Jul 6 22:11:58 2026 by rpki-client