Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402664.roa
File: AS402664.roa (raw, json)
Hash identifier: VfDiA7a+vr8jpLMJER4WYLlPWOHVPd2DjsnvQnzdyE0=
Subject key identifier: 66:47:12:95:A8:B6:47:5C:E6:C4:68:18:1D:04:CD:60:FE:13:CF:B0
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2CA671145492416256AB0822BF170DBF6448E8C3
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402664.roa
Signing time: Tue 25 Aug 2026 06:17:36 +0000
ROA not before: Tue 25 Aug 2026 06:12:36 +0000
ROA not after: Tue 24 Aug 2027 06:17:36 +0000
asID: 402664
IP address blocks: 188.220.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:a6:71:14:54:92:41:62:56:ab:08:22:bf:17:0d:bf:64:48:e8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 25 06:12:36 2026 GMT
Not After : Aug 24 06:17:36 2027 GMT
Subject: CN=66471295A8B6475CE6C468181D04CD60FE13CFB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:29:ca:aa:90:bf:f9:e8:80:47:19:74:3b:
0c:0f:4f:80:06:03:1c:cb:70:33:3f:eb:81:82:da:
87:de:18:fc:c0:99:29:f7:e1:34:2b:b4:eb:c5:2e:
0d:ce:e5:08:95:04:c4:ae:9e:85:82:a1:f1:fa:08:
a7:de:e4:bf:25:75:5d:96:71:70:8e:e8:02:6b:c1:
ec:6d:61:35:61:c7:fb:66:0a:8f:5a:f8:39:89:07:
9a:db:bb:95:12:14:85:14:b8:f7:c3:79:32:cc:db:
77:d1:a2:2f:9b:07:71:26:c1:d3:68:19:86:ce:fc:
47:e5:05:cf:86:16:85:f0:68:e1:17:fa:f0:cf:b1:
e7:35:57:b1:09:46:04:67:02:7e:bd:fc:24:2a:14:
8d:ff:13:82:ad:ea:c0:8e:a3:ce:d3:8c:14:d1:63:
c6:ef:dd:a2:a6:b9:22:d9:ae:67:26:d6:b6:70:d0:
0f:83:3d:c1:03:45:8b:34:b6:7e:53:b1:5c:90:0b:
61:cd:89:ce:6c:4b:8c:86:a9:7d:cf:7a:d5:3a:ae:
03:7a:b3:d0:40:6b:2c:a2:4c:ab:98:a1:8d:05:32:
72:31:ae:ef:81:c8:77:29:83:a3:c9:35:6b:2e:83:
a2:0d:ed:bc:21:e5:27:3f:67:c3:10:8b:90:17:ae:
c5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:47:12:95:A8:B6:47:5C:E6:C4:68:18:1D:04:CD:60:FE:13:CF:B0
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402664.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.76.0/24
Signature Algorithm: sha256WithRSAEncryption
15:44:3f:d6:1e:9a:71:f1:30:f3:6f:49:e6:08:19:1b:03:46:
73:4b:3f:60:ba:92:72:ba:f7:45:f6:1c:f5:d0:cc:da:c9:b8:
de:6b:84:a9:67:a2:95:7f:2f:3f:cd:fe:ef:cf:08:c6:36:ef:
d6:d5:3f:17:0a:8b:29:f6:31:94:9a:2f:23:c7:f5:3d:af:0e:
07:b0:99:66:fa:78:62:c0:8b:ad:52:aa:1e:64:eb:8a:ae:77:
80:47:0e:51:38:e4:92:ed:68:db:8c:dd:9e:b9:34:47:3d:e1:
98:89:ae:c0:cc:5e:46:e9:43:5d:33:24:d5:06:65:fc:77:2f:
ad:aa:36:7a:cb:a6:70:5b:c3:a8:75:0a:09:b8:f8:ae:ec:65:
e2:fb:21:c0:36:a4:ac:b4:d5:87:fd:57:83:07:f6:cd:38:f7:
90:23:fe:44:e9:d2:5d:a7:62:aa:7f:a7:a9:39:0a:cb:45:01:
c6:e2:69:b3:4e:22:53:d0:eb:20:5f:e8:14:1f:09:0c:4f:2b:
49:72:15:66:bd:5a:3e:bd:8f:74:34:32:ae:45:81:c7:6d:12:
91:ca:8b:de:79:76:2b:34:c2:da:8d:f5:56:74:24:10:db:cc:
45:7e:5a:58:11:cc:bc:fe:aa:02:e7:61:4f:a6:9f:ce:0d:74:
55:dc:24:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:43 2026 by rpki-client