Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402510.roa
File: AS402510.roa (raw, json)
Hash identifier: 6dhKldgwu08llsMQ/JB/ASa+ZaRUJqBFvmP+xYwImVA=
Subject key identifier: A4:E7:13:70:27:9B:A2:77:A2:E3:2C:10:DD:D4:7F:15:6E:72:EC:CA
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2C9471A8C02D784D1FAB0199007426CC4C096D19
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402510.roa
Signing time: Mon 07 Sep 2026 03:35:59 +0000
ROA not before: Mon 07 Sep 2026 03:30:59 +0000
ROA not after: Mon 06 Sep 2027 03:35:59 +0000
asID: 402510
IP address blocks: 188.220.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:94:71:a8:c0:2d:78:4d:1f:ab:01:99:00:74:26:cc:4c:09:6d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 7 03:30:59 2026 GMT
Not After : Sep 6 03:35:59 2027 GMT
Subject: CN=A4E71370279BA277A2E32C10DDD47F156E72ECCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:ed:20:58:50:b5:f8:9f:88:01:eb:82:46:
b5:83:fb:fc:d1:8a:bb:61:43:99:94:9b:8b:4e:44:
4c:c2:1d:6b:6c:8b:bd:77:10:03:b1:f2:b1:c9:9d:
64:9e:9e:5e:de:76:d3:1a:a7:73:12:c3:3c:cb:56:
b8:14:15:db:96:3b:c6:26:b8:3f:71:9a:d2:5a:7c:
b4:fd:9e:86:cd:95:b1:54:66:54:82:6c:a8:5b:71:
b9:9d:b7:b9:58:47:63:63:a2:ea:67:f6:29:8e:54:
68:fb:fe:7d:b7:5d:e0:76:8a:9b:87:bb:02:34:95:
d2:4c:6c:a2:e9:5d:a3:1d:35:99:ee:6d:2e:b5:35:
97:e6:06:28:e3:b9:b8:b1:34:bf:9f:3b:96:1c:c4:
a5:2d:b9:c0:04:e1:9a:37:1d:2a:23:13:5e:5a:c3:
84:4f:d9:4e:ad:88:92:f1:2c:01:d2:dd:8c:be:e5:
37:09:f4:cc:59:dc:77:a8:ff:de:ce:34:58:63:63:
d4:7e:1f:59:e7:91:81:dc:e8:56:47:ec:9c:b2:41:
de:65:8f:63:38:06:54:2a:c7:97:2a:08:d1:c7:9e:
cb:f0:56:58:d3:19:93:95:49:aa:b8:fd:f9:81:60:
ae:92:b4:47:74:6d:bb:55:f1:2f:aa:79:59:38:4c:
05:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E7:13:70:27:9B:A2:77:A2:E3:2C:10:DD:D4:7F:15:6E:72:EC:CA
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402510.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.210.0/24
Signature Algorithm: sha256WithRSAEncryption
12:5c:b5:2b:ad:33:c0:42:2f:1f:09:ef:52:12:61:6d:a6:ca:
cc:24:c6:50:c5:45:31:72:cb:0c:d5:61:1f:89:36:1d:6c:4e:
c5:86:2f:93:30:12:7f:eb:09:ac:d3:8a:90:67:0b:09:c3:80:
59:75:db:6f:5b:3f:d7:d3:a3:33:2b:16:68:3d:9e:e2:ec:2c:
79:a7:56:41:8b:c4:f6:63:f4:23:2b:5b:3a:d8:35:68:c9:72:
f5:26:29:5a:ec:6b:eb:61:60:78:23:12:39:63:a8:4f:d9:e2:
b9:6c:fc:19:0e:d1:41:87:16:32:43:80:eb:ed:f9:79:8b:a8:
83:8f:06:53:b5:14:22:e8:3a:8f:ab:f1:26:62:65:ec:9d:f8:
c0:e1:50:e3:b8:de:b0:d2:2a:89:36:bf:36:4c:df:8d:57:9a:
64:3a:1c:f4:72:29:24:e0:35:8f:a2:ea:08:39:bd:34:54:79:
7d:3b:dd:77:b4:9f:e9:b6:b8:f2:9c:7c:1f:e3:fb:bf:48:02:
79:3f:3b:3c:13:f7:a0:02:ea:e1:31:e9:54:13:22:62:95:52:
01:09:0b:dc:c6:08:ba:71:e6:d5:bf:fa:09:22:6c:1f:23:f9:
af:02:88:8f:1a:2e:d7:50:6b:40:99:b7:7f:51:9a:f6:93:48:
04:bd:18:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 15:46:38 2026 by rpki-client