Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402643.roa
File: AS402643.roa (raw, json)
Hash identifier: gOR+BHzW3R+eY9zR+Nw4huS7hfgaglwQLWg/PF/N2A0=
Subject key identifier: B9:46:45:0D:F0:82:80:BE:67:A1:50:99:D3:01:A6:59:9D:F9:B8:56
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 28B0C8DB6EA89CCACCA975CCB3887EF4B455D22C
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402643.roa
Signing time: Tue 25 Aug 2026 06:16:21 +0000
ROA not before: Tue 25 Aug 2026 06:11:21 +0000
ROA not after: Tue 24 Aug 2027 06:16:21 +0000
asID: 402643
IP address blocks: 188.220.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:b0:c8:db:6e:a8:9c:ca:cc:a9:75:cc:b3:88:7e:f4:b4:55:d2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 25 06:11:21 2026 GMT
Not After : Aug 24 06:16:21 2027 GMT
Subject: CN=B946450DF08280BE67A15099D301A6599DF9B856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:82:4b:0d:fc:37:76:74:50:d4:88:81:f7:10:
75:32:2b:2a:e2:a2:d8:38:51:5d:b0:e4:99:fe:8e:
af:5c:1b:44:70:46:eb:5c:8c:50:6f:1a:39:6d:20:
0f:a7:24:bb:09:69:33:b7:8b:fd:d5:09:ff:06:1b:
4d:6f:a1:fd:29:89:75:d4:12:8c:47:dd:b0:f2:56:
e0:34:f6:d8:26:7d:64:d2:e6:4b:ca:1b:29:00:e2:
b2:60:49:f3:18:51:75:21:5a:3c:cf:17:17:cb:44:
d2:20:14:2d:f0:5d:cf:99:4d:71:a5:02:e0:f2:4c:
ef:24:4b:4d:98:ac:c1:bb:16:06:a2:9d:e0:89:8d:
2a:ae:0f:43:d8:45:ae:ec:1d:13:ee:02:dc:ec:8d:
68:54:34:07:94:97:7d:d5:9f:80:ad:48:c1:e7:87:
a0:cd:67:8c:1f:dd:0f:6f:8e:b7:57:44:18:2f:4a:
48:8f:84:63:67:2c:5a:b1:d6:d8:ac:31:30:89:93:
d9:47:4e:9d:3c:a0:47:3b:07:d7:cb:95:89:18:31:
f1:c1:f9:d5:8c:e5:90:fa:f2:6b:a1:af:68:13:67:
03:53:c2:03:3d:a5:3f:65:83:ef:72:55:30:c5:0a:
c5:5c:03:80:d9:1e:53:72:27:3e:24:89:19:93:97:
31:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:46:45:0D:F0:82:80:BE:67:A1:50:99:D3:01:A6:59:9D:F9:B8:56
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402643.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.71.0/24
Signature Algorithm: sha256WithRSAEncryption
11:d1:2d:0d:33:9f:13:bd:d2:3f:05:1b:33:ff:6a:b5:cb:b2:
b5:49:2a:c5:05:67:5f:2e:95:31:a2:bd:70:58:18:7b:1f:56:
f3:4e:7e:9c:8e:a6:29:f6:83:3c:27:61:d8:0b:74:b1:5f:b9:
3e:79:7f:c1:98:eb:5d:07:57:5d:2d:6c:c3:7c:b8:82:fa:ce:
6b:15:0c:1b:31:94:ec:4e:55:f7:fb:f4:5d:d5:1b:a9:2f:44:
3c:a5:78:00:6d:fb:fb:6c:65:c4:e2:7c:c3:63:2f:f4:8a:3f:
d9:73:23:ab:00:7f:4e:ae:da:d9:5a:4f:35:f6:8a:99:fb:8b:
35:9e:5f:7d:cc:44:c4:7d:40:9a:cb:39:a1:06:a9:f9:2b:08:
45:f3:f2:3c:6d:a3:98:e5:64:01:33:90:8b:28:47:e5:63:47:
00:2c:0c:20:89:d5:7f:75:b9:8b:99:eb:e1:8e:e7:fc:38:02:
9d:6f:1e:45:65:cf:cc:79:7a:a0:88:ed:a0:ab:de:60:51:50:
ab:e9:52:ef:49:33:df:90:21:6e:c4:38:2f:75:1c:52:6d:46:
2a:87:43:66:0d:bf:20:e3:49:f8:c1:68:b7:2e:06:33:8b:04:
02:c4:69:d9:3c:02:bd:4a:8b:63:66:b3:d4:19:0c:2a:30:ac:
32:68:da:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:56:28 2026 by rpki-client