Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: Cu6H8nCzUT6lpfK4QQTKhY3OJ5yKqhYTBPxwa5NcjbM=
Subject key identifier: 84:9C:FB:F3:6A:1C:E4:7D:B0:CC:45:C9:31:CB:12:3A:30:E7:36:B5
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 17C47BCAAB897B56BCDAE9AF80FE3A7A7E6469C2
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402265.roa
Signing time: Sun 04 Oct 2026 17:55:33 +0000
ROA not before: Sun 04 Oct 2026 17:50:33 +0000
ROA not after: Sun 03 Oct 2027 17:55:33 +0000
asID: 402265
IP address blocks: 188.220.0.0/24 maxlen: 24
188.220.1.0/24 maxlen: 24
188.220.5.0/24 maxlen: 24
188.220.27.0/24 maxlen: 24
188.220.140.0/24 maxlen: 24
188.220.141.0/24 maxlen: 24
188.220.143.0/24 maxlen: 24
188.220.146.0/24 maxlen: 24
188.221.54.0/24 maxlen: 24
188.221.62.0/24 maxlen: 24
188.221.63.0/24 maxlen: 24
188.221.80.0/24 maxlen: 24
188.221.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:c4:7b:ca:ab:89:7b:56:bc:da:e9:af:80:fe:3a:7a:7e:64:69:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 4 17:50:33 2026 GMT
Not After : Oct 3 17:55:33 2027 GMT
Subject: CN=849CFBF36A1CE47DB0CC45C931CB123A30E736B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0e:bc:ec:c2:62:49:73:a4:ac:da:13:fc:2c:
27:2e:49:74:30:f7:e4:06:d1:8c:17:eb:51:73:15:
e7:21:05:c2:d5:e6:85:7e:1e:95:55:5f:5a:c4:04:
58:ed:69:78:a5:41:2b:ee:3a:a5:03:85:fd:99:73:
06:65:77:49:cb:f3:0b:12:39:90:05:88:30:7f:9d:
17:e7:ac:d9:16:a6:f3:e4:7a:6b:7e:c6:70:41:c6:
61:06:84:b1:7f:33:4f:f8:c4:a1:d9:36:9a:b3:41:
9a:91:b7:6c:11:ad:01:9d:71:41:95:a6:05:cc:11:
d4:dd:4b:c1:b4:d4:1a:6a:9d:e2:21:c2:d4:83:97:
9b:ed:5d:99:5a:24:cf:38:7d:83:24:b6:55:97:61:
d0:4c:89:83:d9:9f:1f:2b:5f:b1:40:05:06:da:05:
4d:a7:d8:87:6e:ea:c1:09:5b:2a:b3:f5:c8:c4:75:
99:75:a1:89:c4:93:1b:e4:2e:6e:8b:93:da:ef:e1:
aa:f8:2d:e4:c8:06:9d:03:d6:92:c3:45:08:0b:ba:
8a:37:6c:19:21:1a:fd:ea:44:30:1c:8f:df:ef:f4:
ae:bd:5c:14:1f:e3:ef:1e:e0:ea:eb:49:88:7e:62:
8b:af:52:63:04:47:0d:39:76:da:d7:4f:ca:2c:85:
6f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9C:FB:F3:6A:1C:E4:7D:B0:CC:45:C9:31:CB:12:3A:30:E7:36:B5
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.0.0/23
188.220.5.0/24
188.220.27.0/24
188.220.140.0/23
188.220.143.0/24
188.220.146.0/24
188.221.54.0/24
188.221.62.0/23
188.221.80.0/24
188.221.213.0/24
Signature Algorithm: sha256WithRSAEncryption
16:0a:7a:17:2e:d9:4a:92:f9:7d:cc:1d:46:91:fb:34:5f:e5:
45:5c:ef:f5:ae:29:b3:94:09:1a:2e:e7:09:ea:0b:d2:ef:3e:
1c:80:1e:a7:c1:ab:58:78:11:06:f7:c7:e4:1c:08:98:75:82:
f8:a8:4c:a3:05:f4:0f:c2:29:30:fb:2a:f9:76:2b:12:50:0a:
f1:25:0a:00:06:51:0f:d6:b8:d9:e5:9e:bf:ce:06:c8:d5:99:
8e:de:3f:2c:08:f6:b5:50:0c:2a:ef:f0:3a:d0:51:94:27:8c:
d3:dc:2f:b4:77:e2:f9:ab:0f:da:09:d2:06:ba:a7:32:79:77:
ab:c6:67:29:55:2a:1f:a2:80:f6:a0:38:1f:db:16:4a:b0:75:
37:db:d8:cc:08:a0:4a:2e:50:2d:81:73:fc:da:22:2b:41:7e:
48:5b:d3:8b:81:ee:fa:d8:b6:59:ba:1c:c9:34:d3:5c:84:3a:
2f:e4:cd:07:41:1c:c1:4f:16:1e:07:ca:1a:90:1a:58:b7:60:
d5:62:2a:c6:83:12:2d:37:5c:64:08:00:14:3a:0b:07:d2:01:
8a:42:d9:00:ce:60:59:d4:d1:5c:1d:6a:7c:55:91:5c:3e:c6:
48:36:b1:c1:1e:c3:61:ad:5f:ef:fa:86:5a:03:56:a6:92:9f:
49:94:3a:fc
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUF8R7yquJe1a82umvgP46en5kacIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjEwMDQxNzUwMzNaFw0yNzEwMDMxNzU1MzNaMDMxMTAvBgNV
BAMTKDg0OUNGQkYzNkExQ0U0N0RCMENDNDVDOTMxQ0IxMjNBMzBFNzM2QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYDrzswmJJc6Ss2hP8LCcuSXQw
9+QG0YwX61FzFechBcLV5oV+HpVVX1rEBFjtaXilQSvuOqUDhf2ZcwZld0nL8wsS
OZAFiDB/nRfnrNkWpvPkemt+xnBBxmEGhLF/M0/4xKHZNpqzQZqRt2wRrQGdcUGV
pgXMEdTdS8G01BpqneIhwtSDl5vtXZlaJM84fYMktlWXYdBMiYPZnx8rX7FABQba
BU2n2Idu6sEJWyqz9cjEdZl1oYnEkxvkLm6Lk9rv4ar4LeTIBp0D1pLDRQgLuoo3
bBkhGv3qRDAcj9/v9K69XBQf4+8e4OrrSYh+YouvUmMERw05dtrXT8oshW/XAgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQUhJz782oc5H2wzEXJMcsSOjDnNrUwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTNDAyMjY1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQBvNwA
AwQAvNwFAwQAvNwbAwQBvNyMAwQAvNyPAwQAvNySAwQAvN02AwQBvN0+AwQAvN1Q
AwQAvN3VMA0GCSqGSIb3DQEBCwUAA4IBAQAWCnoXLtlKkvl9zB1Gkfs0X+VFXO/1
rimzlAkaLucJ6gvS7z4cgB6nwatYeBEG98fkHAiYdYL4qEyjBfQPwikw+yr5disS
UArxJQoABlEP1rjZ5Z6/zgbI1ZmO3j8sCPa1UAwq7/A60FGUJ4zT3C+0d+L5qw/a
CdIGuqcyeXerxmcpVSofooD2oDgf2xZKsHU329jMCKBKLlAtgXP82iIrQX5IW9OL
ge762LZZuhzJNNNchDov5M0HQRzBTxYeB8oakBpYt2DVYirGgxItN1xkCAAUOgsH
0gGKQtkAzmBZ1NFcHWp8VZFcPsZINrHBHsNhrV/v+oZaA1amkp9JlDr8
-----END CERTIFICATE-----
Generated at Tue Oct 20 03:34:42 2026 by rpki-client