Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402731.roa
File: AS402731.roa (raw, json)
Hash identifier: mlsbdFj6NxLAjJeacpkMkdBsXbCRp74tKGIOGnc2WL8=
Subject key identifier: 38:F6:63:7E:0C:85:14:EB:7C:8F:CD:94:4D:4B:C4:62:6F:0F:07:7A
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4144833301942662CF76371F5E5A9D842710694D
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402731.roa
Signing time: Mon 24 Aug 2026 09:14:01 +0000
ROA not before: Mon 24 Aug 2026 09:09:01 +0000
ROA not after: Mon 23 Aug 2027 09:14:01 +0000
asID: 402731
IP address blocks: 188.220.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:44:83:33:01:94:26:62:cf:76:37:1f:5e:5a:9d:84:27:10:69:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 24 09:09:01 2026 GMT
Not After : Aug 23 09:14:01 2027 GMT
Subject: CN=38F6637E0C8514EB7C8FCD944D4BC4626F0F077A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:22:74:a2:72:0a:2e:c5:86:70:8d:0c:27:
e0:d3:e4:2d:0d:0a:05:91:2f:cc:89:f1:2c:af:61:
19:9f:92:d5:73:2d:d6:ab:f2:32:1b:1e:2d:ce:a9:
4b:a1:83:f7:b7:6a:c2:df:15:87:4c:41:3c:4d:b7:
e6:8b:24:c3:71:18:69:6f:af:1b:81:64:63:5a:f6:
14:3a:ac:68:eb:8b:09:bf:72:51:4d:30:18:2b:08:
f1:88:6f:81:c0:4e:55:7f:7c:ab:50:2f:79:89:86:
5a:b5:1a:78:59:75:c6:ca:a1:96:3f:b8:37:00:ee:
d1:b3:fc:b7:b2:eb:88:bb:e8:1b:54:df:4e:dd:d0:
3c:44:be:56:b8:94:4a:57:dc:c2:9e:3d:96:07:6e:
9e:aa:86:34:41:eb:b2:9b:5e:c6:41:c5:77:f0:aa:
79:93:56:5e:94:2a:c9:90:10:b3:d9:7f:72:51:ce:
0b:45:74:9f:47:12:5d:18:0a:e1:91:b2:4b:80:f4:
4a:96:37:66:a7:88:c6:3e:4b:cb:cf:b0:18:44:8e:
5d:2f:49:f3:07:a2:5c:00:a6:7b:d5:a9:59:7b:13:
e5:36:0a:77:8d:88:09:40:8e:86:7d:51:7f:43:3c:
51:fd:cc:59:a0:8b:96:7b:40:75:4e:d9:01:75:07:
57:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F6:63:7E:0C:85:14:EB:7C:8F:CD:94:4D:4B:C4:62:6F:0F:07:7A
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS402731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.49.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:65:67:b7:24:12:89:ba:07:12:c7:5f:9c:b9:13:d5:a1:b9:
e7:ee:39:1e:0c:2e:72:00:cf:d6:dc:ae:bb:db:69:15:0b:e3:
62:ed:f9:3b:9b:8a:35:00:41:c0:b2:f6:f8:d4:fc:9e:d7:4d:
42:07:0d:3a:91:61:b5:f9:6c:a2:c0:65:7b:73:25:f1:e8:d6:
4c:a8:a5:b6:2f:91:91:bc:3f:fe:73:f4:b4:6b:b7:c0:ad:5a:
74:34:a0:90:e8:f1:01:6f:fc:fb:3f:1c:08:20:4a:fc:89:2e:
13:a4:b1:b3:eb:78:24:49:71:1c:cf:c3:2b:1f:6a:30:1f:c8:
e0:58:dd:89:63:56:9e:9e:18:be:32:dd:db:ac:9c:a8:7f:b1:
9f:36:6b:19:70:5c:d8:53:75:38:e5:ca:23:15:cd:85:c2:cd:
28:f6:31:04:1d:42:57:70:c0:c0:73:54:17:a4:9d:05:f9:d9:
cf:4c:c8:26:f1:b1:0b:a9:c0:b7:9d:0b:e5:5e:4e:3d:46:5e:
a6:a1:5e:d0:5d:37:a3:e8:a9:d1:c5:37:c6:16:c1:bf:90:86:
ef:7c:ec:74:00:c7:95:21:e1:bb:fd:e0:57:24:5e:e0:1f:a4:
e3:4b:37:4b:a7:0c:1d:aa:cf:17:4b:1e:38:ab:e1:d9:00:67:
eb:61:3d:e7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUQUSDMwGUJmLPdjcfXlqdhCcQaU0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA4MjQwOTA5MDFaFw0yNzA4MjMwOTE0MDFaMDMxMTAvBgNV
BAMTKDM4RjY2MzdFMEM4NTE0RUI3QzhGQ0Q5NDRENEJDNDYyNkYwRjA3N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEBCJ0onIKLsWGcI0MJ+DT5C0N
CgWRL8yJ8SyvYRmfktVzLdar8jIbHi3OqUuhg/e3asLfFYdMQTxNt+aLJMNxGGlv
rxuBZGNa9hQ6rGjriwm/clFNMBgrCPGIb4HATlV/fKtQL3mJhlq1GnhZdcbKoZY/
uDcA7tGz/Ley64i76BtU307d0DxEvla4lEpX3MKePZYHbp6qhjRB67KbXsZBxXfw
qnmTVl6UKsmQELPZf3JRzgtFdJ9HEl0YCuGRskuA9EqWN2aniMY+S8vPsBhEjl0v
SfMHolwApnvVqVl7E+U2CneNiAlAjoZ9UX9DPFH9zFmgi5Z7QHVO2QF1B1dFAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUOPZjfgyFFOt8j82UTUvEYm8PB3owHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTNDAyNzMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNwx
MA0GCSqGSIb3DQEBCwUAA4IBAQCpZWe3JBKJugcSx1+cuRPVobnn7jkeDC5yAM/W
3K6722kVC+Ni7fk7m4o1AEHAsvb41Pye101CBw06kWG1+WyiwGV7cyXx6NZMqKW2
L5GRvD/+c/S0a7fArVp0NKCQ6PEBb/z7PxwIIEr8iS4TpLGz63gkSXEcz8MrH2ow
H8jgWN2JY1aenhi+Mt3brJyof7GfNmsZcFzYU3U45cojFc2Fws0o9jEEHUJXcMDA
c1QXpJ0F+dnPTMgm8bELqcC3nQvlXk49Rl6moV7QXTej6KnRxTfGFsG/kIbvfOx0
AMeVIeG7/eBXJF7gH6TjSzdLpwwdqs8XSx44q+HZAGfrYT3n
-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:46 2026 by rpki-client