Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402288.roa
File: AS402288.roa (raw, json)
Hash identifier: Q8Vvx97RfEbCxtbQRHtZQAfgMNYNvpcIh7vz6zs7rHw=
Subject key identifier: 7D:55:96:52:59:82:B2:B6:C7:5E:EF:9E:E2:F7:32:10:D3:88:F0:68
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0AB414BD8E79FC73AF7EBD536B8D7B5CD322E058
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402288.roa
Signing time: Mon 06 Jul 2026 07:34:31 +0000
ROA not before: Mon 06 Jul 2026 07:29:31 +0000
ROA not after: Mon 05 Jul 2027 07:34:31 +0000
asID: 402288
IP address blocks: 188.220.2.0/24 maxlen: 24
188.220.3.0/24 maxlen: 24
188.220.24.0/24 maxlen: 24
188.220.179.0/24 maxlen: 24
188.220.181.0/24 maxlen: 24
188.220.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:b4:14:bd:8e:79:fc:73:af:7e:bd:53:6b:8d:7b:5c:d3:22:e0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 6 07:29:31 2026 GMT
Not After : Jul 5 07:34:31 2027 GMT
Subject: CN=7D5596525982B2B6C75EEF9EE2F73210D388F068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:63:33:bd:e5:6b:13:50:47:18:67:bd:ed:
c2:f5:ea:45:65:3b:a8:d5:1c:00:c8:49:63:e1:67:
ba:10:86:8e:3f:cf:d8:33:cc:17:44:dd:59:9e:c4:
d3:47:eb:09:f7:1e:2e:c2:af:e1:4d:c8:40:14:eb:
f8:e7:11:60:1b:e4:cb:21:a3:3a:25:f3:bb:99:0c:
f2:b8:5a:1d:3d:46:5c:56:75:16:21:80:23:a7:ce:
9e:ef:a0:c1:ed:52:52:5c:d1:fe:8c:3e:88:79:cf:
a6:34:2f:e4:b3:a9:33:4b:43:38:dc:b9:c0:c4:da:
b3:04:f5:ee:92:27:00:fb:3f:58:5b:7d:fc:a3:02:
9c:8c:6d:ff:71:35:34:2d:65:10:22:a4:fa:40:87:
c4:c2:ab:d7:9d:8b:b8:df:2b:74:a6:4b:ed:f0:63:
30:3b:7c:50:d7:bf:76:49:49:41:8a:87:94:fc:2a:
37:a0:76:7d:46:84:04:ea:54:0b:f6:c1:f3:4f:b4:
ea:5c:21:be:72:35:d2:f9:04:27:0d:47:2d:93:16:
4e:d2:ff:e1:80:bb:2b:0b:ff:6f:43:36:22:d7:a8:
09:0a:0f:56:2b:09:ca:03:13:1b:5b:61:66:d0:28:
02:d7:36:74:c5:96:35:db:90:c9:ba:f7:db:f0:10:
c1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:55:96:52:59:82:B2:B6:C7:5E:EF:9E:E2:F7:32:10:D3:88:F0:68
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402288.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.2.0/23
188.220.24.0/24
188.220.179.0/24
188.220.181.0-188.220.182.255
Signature Algorithm: sha256WithRSAEncryption
52:1a:bf:74:d7:50:c1:0c:a4:4d:c6:be:61:47:f3:dc:7a:08:
15:e9:90:a2:23:56:ea:2c:ab:fb:06:ff:58:a6:af:08:29:4a:
5e:f6:13:8d:3c:e1:cf:45:d3:f8:bd:a5:58:e8:d7:d3:a0:91:
b4:44:5a:7a:42:51:df:eb:a4:0d:19:c6:76:02:46:7d:cb:5f:
89:2e:e4:11:aa:c5:16:4a:c4:fc:58:00:84:81:8f:f6:6e:44:
2d:ca:89:99:37:97:47:d8:a2:31:94:a8:df:86:36:62:7e:6e:
1f:a8:54:1a:ac:72:a6:fe:e2:5a:73:10:cb:7e:d3:99:2f:12:
71:30:92:8e:a5:45:5d:0d:62:a4:d3:c4:a3:21:ef:1e:76:c3:
11:d7:c7:51:f3:d9:6b:d9:5b:1b:9b:76:59:83:46:bf:52:b2:
7b:64:a2:56:1e:50:f2:8b:4a:d2:17:64:e6:b4:23:ec:d4:cc:
53:d2:51:4c:bb:34:3d:cc:79:77:07:15:8c:4e:3b:08:6c:b5:
41:6b:ed:ba:cb:aa:95:cd:b3:21:8a:29:b1:07:15:bb:5f:41:
98:83:5f:b9:2a:aa:c6:8e:b6:53:db:a4:99:b8:b4:1d:f9:f6:
e6:40:5c:b4:16:44:ba:0f:54:90:0a:49:79:fa:79:b1:ef:f5:
ba:0c:f5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:43:32 2026 by rpki-client