Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: T/oOLQidY0GiNH9rZmoaZO/3zbJXHtzkgqVh3Y3RNO8=
Subject key identifier: 07:5B:3A:C1:75:CF:F1:5D:A5:A1:10:54:C4:C3:3E:B4:8C:9B:08:29
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 353D6BB5001A843D16DA590A6B224790C6E3BBB9
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402265.roa
Signing time: Thu 09 Jul 2026 02:45:54 +0000
ROA not before: Thu 09 Jul 2026 02:40:54 +0000
ROA not after: Thu 08 Jul 2027 02:45:54 +0000
asID: 402265
IP address blocks: 188.220.0.0/24 maxlen: 24
188.220.1.0/24 maxlen: 24
188.220.140.0/24 maxlen: 24
188.220.141.0/24 maxlen: 24
188.220.142.0/24 maxlen: 24
188.220.143.0/24 maxlen: 24
188.221.38.0/24 maxlen: 24
188.221.54.0/24 maxlen: 24
188.221.55.0/24 maxlen: 24
188.221.62.0/24 maxlen: 24
188.221.63.0/24 maxlen: 24
188.221.80.0/24 maxlen: 24
188.221.82.0/24 maxlen: 24
188.221.86.0/24 maxlen: 24
188.221.97.0/24 maxlen: 24
188.221.130.0/24 maxlen: 24
188.221.134.0/24 maxlen: 24
188.221.137.0/24 maxlen: 24
188.221.140.0/24 maxlen: 24
188.221.150.0/24 maxlen: 24
188.221.151.0/24 maxlen: 24
188.221.161.0/24 maxlen: 24
188.221.167.0/24 maxlen: 24
188.221.176.0/24 maxlen: 24
188.221.179.0/24 maxlen: 24
188.221.187.0/24 maxlen: 24
188.221.213.0/24 maxlen: 24
188.221.224.0/24 maxlen: 24
188.221.226.0/24 maxlen: 24
188.221.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:3d:6b:b5:00:1a:84:3d:16:da:59:0a:6b:22:47:90:c6:e3:bb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 9 02:40:54 2026 GMT
Not After : Jul 8 02:45:54 2027 GMT
Subject: CN=075B3AC175CFF15DA5A11054C4C33EB48C9B0829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f3:48:fb:ee:74:08:a3:f6:e2:17:2b:40:79:
ff:20:d0:00:00:5d:b3:01:06:b8:f6:23:f3:a2:80:
41:4f:bd:b7:67:a1:ed:03:41:2d:36:63:06:97:58:
13:3f:61:c4:ce:30:87:96:fd:d1:b1:37:4b:1f:0b:
34:c3:dc:43:75:e7:f4:51:70:e9:1b:f6:cb:4e:4f:
88:fb:bf:f6:0e:ad:0a:52:c3:e8:e2:db:cc:87:80:
4a:28:db:99:ae:43:51:b2:34:76:62:2d:71:0f:47:
b2:a5:0e:ab:9a:ea:f6:f5:3d:e6:e2:ec:60:52:a6:
0f:c8:e2:99:56:9f:1e:e4:22:07:08:45:23:a9:cb:
c2:c0:c9:0e:ac:d4:8d:94:da:28:b6:ae:82:6d:c1:
c3:64:bc:93:ca:ef:ed:1c:68:77:9f:b6:f3:78:72:
36:cc:2b:40:2a:e3:d9:99:7a:8d:5a:84:a8:ae:d3:
18:bc:96:03:e2:c7:fa:29:d7:f2:4d:82:7c:ed:d8:
e6:f9:f9:0e:50:a2:3b:d5:3b:d5:57:08:9a:47:2b:
78:81:bb:52:89:da:cd:6c:17:bf:73:42:7d:24:a1:
ed:d5:5f:41:b0:22:2d:bc:34:e0:f4:c3:ff:9c:7b:
2e:19:86:88:d9:0f:fd:53:4f:c7:fa:e6:d9:62:e0:
07:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5B:3A:C1:75:CF:F1:5D:A5:A1:10:54:C4:C3:3E:B4:8C:9B:08:29
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.0.0/23
188.220.140.0/22
188.221.38.0/24
188.221.54.0/23
188.221.62.0/23
188.221.80.0/24
188.221.82.0/24
188.221.86.0/24
188.221.97.0/24
188.221.130.0/24
188.221.134.0/24
188.221.137.0/24
188.221.140.0/24
188.221.150.0/23
188.221.161.0/24
188.221.167.0/24
188.221.176.0/24
188.221.179.0/24
188.221.187.0/24
188.221.213.0/24
188.221.224.0/24
188.221.226.0/24
188.221.245.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:a1:1c:39:38:6b:a4:7a:2a:29:60:66:0d:4b:e4:35:a4:31:
67:8c:19:38:80:42:27:65:4f:ef:08:d6:04:9f:05:91:82:b7:
ad:d7:8b:ed:91:83:14:ed:c3:e6:42:71:b1:6f:86:fd:14:ac:
3a:02:d3:eb:54:70:84:42:40:6a:0c:06:fd:d2:72:6a:f1:39:
be:6c:c3:6a:5c:40:90:0b:f0:29:1a:20:44:db:e7:0e:a3:78:
66:d4:0e:39:7d:3e:d3:67:f4:3d:89:64:a4:06:b4:7e:96:72:
15:04:9f:53:d7:28:6a:37:61:cb:4b:fc:52:c9:08:f4:19:15:
f6:0c:bf:c4:32:ca:82:b7:48:79:6c:13:4d:e6:20:5f:4a:ec:
a7:e4:ec:19:29:8d:de:a4:f8:90:d0:bd:9b:32:35:34:f1:fe:
89:cb:3c:5e:d1:1a:fd:7a:7b:b9:dd:c8:39:ce:6f:0b:fd:57:
ab:f1:9a:7f:11:71:20:64:bf:5c:ec:17:01:82:bc:0c:bc:6b:
78:1d:d3:96:ad:53:18:7f:c0:bb:db:42:76:ba:33:c0:ec:07:
f1:26:47:b4:9a:b3:15:e8:43:14:4e:9b:24:73:6a:0d:47:17:
07:09:5b:20:b1:b4:64:29:e2:46:f7:20:cb:b1:92:c6:c4:35:
6d:48:24:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:42:41 2026 by rpki-client